./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3181433555 <...> Warning: Permanently added '10.128.1.79' (ECDSA) to the list of known hosts. execve("./syz-executor3181433555", ["./syz-executor3181433555"], 0x7ffec874e4d0 /* 10 vars */) = 0 brk(NULL) = 0x555557123000 brk(0x555557123c40) = 0x555557123c40 arch_prctl(ARCH_SET_FS, 0x555557123300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555571235d0) = 5006 set_robust_list(0x5555571235e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fd090fd9090, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fd090fd9760}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fd090fd9130, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd090fd9760}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3181433555", 4096) = 28 brk(0x555557144c40) = 0x555557144c40 brk(0x555557145000) = 0x555557145000 mprotect(0x7fd0910a0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 syzkaller login: [ 80.706744][ T5006] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 80.856185][ T5006] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 getpid() = 5006 mkdir("./syzkaller.ys7LkJ", 0700) = 0 chmod("./syzkaller.ys7LkJ", 0777) = 0 chdir("./syzkaller.ys7LkJ") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5007 attached , child_tidptr=0x5555571235d0) = 5007 [pid 5007] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5007] setsid() = 1 [pid 5007] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5007] unshare(CLONE_NEWNS) = 0 [pid 5007] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5007] unshare(CLONE_NEWIPC) = 0 [pid 5007] unshare(CLONE_NEWCGROUP) = 0 [pid 5007] unshare(CLONE_NEWUTS) = 0 [pid 5007] unshare(CLONE_SYSVSEM) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "16777216", 8) = 8 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "536870912", 9) = 9 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "8192", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5007] close(3) = 0 [pid 5007] getpid() = 1 [pid 5007] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5011] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5011] memfd_create("syzkaller", 0) = 3 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [ 81.108235][ T5011] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5011 'syz-executor318' [pid 5011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5011] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5011] close(3) = 0 [pid 5011] mkdir("./file0", 0777) = 0 [ 81.339153][ T5011] loop0: detected capacity change from 0 to 32768 [ 81.354686][ T5011] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5011) [ 81.380755][ T5011] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [pid 5011] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5011] chdir("./file0") = 0 [pid 5011] ioctl(4, LOOP_CLR_FD) = 0 [pid 5011] close(4) = 0 [pid 5011] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... openat resumed>) = 4 [pid 5011] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5011] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5011] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 81.389816][ T5011] BTRFS info (device loop0): using free space tree [ 81.414923][ T5011] BTRFS info (device loop0): enabling ssd optimizations [ 81.422250][ T5011] BTRFS info (device loop0): auto enabling async discard [pid 5009] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5009] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5009] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5028 attached [pid 5028] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5028] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... clone resumed>, parent_tid=[4], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 4 [pid 5009] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5028] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5028] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 81.506475][ T5011] BTRFS info (device loop0): balance: start -s [ 81.539065][ T5011] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5028] <... ioctl resumed>) = 0 [pid 5028] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] close(3) = 0 [pid 5009] close(4) = 0 [pid 5009] close(5) = 0 [pid 5009] close(6) = -1 EBADF (Bad file descriptor) [pid 5009] close(7) = -1 EBADF (Bad file descriptor) [pid 5009] close(8) = -1 EBADF (Bad file descriptor) [pid 5009] close(9) = -1 EBADF (Bad file descriptor) [pid 5009] close(10) = -1 EBADF (Bad file descriptor) [pid 5009] close(11) = -1 EBADF (Bad file descriptor) [pid 5009] close(12) = -1 EBADF (Bad file descriptor) [pid 5009] close(13) = -1 EBADF (Bad file descriptor) [pid 5009] close(14) = -1 EBADF (Bad file descriptor) [pid 5009] close(15) = -1 EBADF (Bad file descriptor) [pid 5009] close(16) = -1 EBADF (Bad file descriptor) [pid 5009] close(17) = -1 EBADF (Bad file descriptor) [pid 5009] close(18) = -1 EBADF (Bad file descriptor) [pid 5009] close(19) = -1 EBADF (Bad file descriptor) [pid 5009] close(20) = -1 EBADF (Bad file descriptor) [pid 5009] close(21) = -1 EBADF (Bad file descriptor) [pid 5009] close(22) = -1 EBADF (Bad file descriptor) [pid 5009] close(23) = -1 EBADF (Bad file descriptor) [pid 5009] close(24) = -1 EBADF (Bad file descriptor) [pid 5009] close(25) = -1 EBADF (Bad file descriptor) [pid 5009] close(26) = -1 EBADF (Bad file descriptor) [pid 5009] close(27) = -1 EBADF (Bad file descriptor) [pid 5009] close(28) = -1 EBADF (Bad file descriptor) [pid 5009] close(29) = -1 EBADF (Bad file descriptor) [pid 5009] exit_group(0 [pid 5028] <... futex resumed>) = ? [pid 5009] <... exit_group resumed>) = ? [pid 5028] +++ exited with 0 +++ [pid 5011] <... ioctl resumed> ) = ? [pid 5011] +++ exited with 0 +++ [pid 5009] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=41 /* 0.41 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./0/cgroup.cpu") = 0 [pid 5007] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./0/binderfs") = 0 [ 81.718408][ T5011] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./0/file0") = 0 [pid 5007] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./0/cgroup") = 0 [pid 5007] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./0/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./0") = 0 [pid 5007] mkdir("./1", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5036 attached [pid 5036] set_robust_list(0x5555571235e0, 24) = 0 [pid 5036] chdir("./1") = 0 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5036] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 5 [pid 5036] <... symlink resumed>) = 0 [pid 5036] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5036] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5036] write(3, "1000", 4) = 4 [pid 5036] close(3) = 0 [pid 5036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5036] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5036] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 6 [pid 5036] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5037 attached [pid 5037] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5037] memfd_create("syzkaller", 0) = 3 [pid 5037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5037] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5037] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5037] close(3) = 0 [pid 5037] mkdir("./file0", 0777) = 0 [ 82.120247][ T5037] loop0: detected capacity change from 0 to 32768 [ 82.131613][ T5037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5037) [ 82.150812][ T5037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.159737][ T5037] BTRFS info (device loop0): using free space tree [pid 5037] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5037] chdir("./file0") = 0 [pid 5037] ioctl(4, LOOP_CLR_FD) = 0 [pid 5037] close(4) = 0 [pid 5037] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] <... futex resumed>) = 0 [pid 5037] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5036] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... openat resumed>) = 4 [pid 5036] <... futex resumed>) = 0 [pid 5037] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] <... futex resumed>) = 0 [pid 5036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5037] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5036] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.180611][ T5037] BTRFS info (device loop0): enabling ssd optimizations [ 82.188300][ T5037] BTRFS info (device loop0): auto enabling async discard [ 82.218735][ T5037] BTRFS info (device loop0): balance: start -s [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5036] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5036] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x7fd089ba69e0, 24 [pid 5036] <... clone resumed>, parent_tid=[7], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 7 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5036] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] openat(AT_FDCWD, ".", O_RDONLY [pid 5036] <... futex resumed>) = 0 [pid 5036] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] <... openat resumed>) = 5 [pid 5053] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] <... futex resumed>) = 0 [pid 5053] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] <... futex resumed>) = 0 [ 82.228248][ T5037] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5053] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5036] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 82.283368][ T5037] BTRFS info (device loop0): balance: ended with status: 0 [pid 5053] <... ioctl resumed>) = 0 [pid 5053] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5053] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] close(3) = 0 [pid 5036] close(4) = 0 [pid 5036] close(5) = 0 [pid 5036] close(6) = -1 EBADF (Bad file descriptor) [pid 5036] close(7) = -1 EBADF (Bad file descriptor) [pid 5036] close(8) = -1 EBADF (Bad file descriptor) [pid 5036] close(9) = -1 EBADF (Bad file descriptor) [pid 5036] close(10) = -1 EBADF (Bad file descriptor) [pid 5036] close(11) = -1 EBADF (Bad file descriptor) [pid 5036] close(12) = -1 EBADF (Bad file descriptor) [pid 5036] close(13) = -1 EBADF (Bad file descriptor) [pid 5036] close(14) = -1 EBADF (Bad file descriptor) [pid 5036] close(15) = -1 EBADF (Bad file descriptor) [pid 5036] close(16) = -1 EBADF (Bad file descriptor) [pid 5036] close(17) = -1 EBADF (Bad file descriptor) [pid 5036] close(18) = -1 EBADF (Bad file descriptor) [pid 5036] close(19) = -1 EBADF (Bad file descriptor) [pid 5036] close(20) = -1 EBADF (Bad file descriptor) [pid 5036] close(21) = -1 EBADF (Bad file descriptor) [pid 5036] close(22) = -1 EBADF (Bad file descriptor) [pid 5036] close(23) = -1 EBADF (Bad file descriptor) [pid 5036] close(24) = -1 EBADF (Bad file descriptor) [pid 5036] close(25) = -1 EBADF (Bad file descriptor) [pid 5036] close(26) = -1 EBADF (Bad file descriptor) [pid 5036] close(27) = -1 EBADF (Bad file descriptor) [pid 5036] close(28) = -1 EBADF (Bad file descriptor) [pid 5036] close(29) = -1 EBADF (Bad file descriptor) [pid 5036] exit_group(0 [pid 5053] <... futex resumed>) = ? [pid 5037] <... futex resumed>) = ? [pid 5036] <... exit_group resumed>) = ? [pid 5053] +++ exited with 0 +++ [pid 5037] +++ exited with 0 +++ [pid 5036] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./1/cgroup.cpu") = 0 [pid 5007] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./1/binderfs") = 0 [pid 5007] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./1/file0") = 0 [pid 5007] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./1/cgroup") = 0 [pid 5007] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./1/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./1") = 0 [pid 5007] mkdir("./2", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 8 ./strace-static-x86_64: Process 5061 attached [pid 5061] set_robust_list(0x5555571235e0, 24) = 0 [pid 5061] chdir("./2") = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5061] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5061] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5061] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5061] <... clone resumed>, parent_tid=[9], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 9 [pid 5062] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] memfd_create("syzkaller", 0) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5062] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file0", 0777) = 0 [ 82.831700][ T5062] loop0: detected capacity change from 0 to 32768 [ 82.842819][ T5062] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5062) [ 82.858519][ T5062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.867436][ T5062] BTRFS info (device loop0): using free space tree [pid 5062] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file0") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [pid 5062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... futex resumed>) = 1 [pid 5062] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... futex resumed>) = 1 [ 82.890157][ T5062] BTRFS info (device loop0): enabling ssd optimizations [ 82.897425][ T5062] BTRFS info (device loop0): auto enabling async discard [pid 5062] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5061] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5061] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[10], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 10 [pid 5061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5079] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] <... futex resumed>) = 0 [pid 5079] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] <... futex resumed>) = 0 [pid 5079] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 82.955902][ T5062] BTRFS info (device loop0): balance: start -s [ 82.966106][ T5062] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 83.026914][ T5062] BTRFS info (device loop0): balance: ended with status: 0 [pid 5079] <... ioctl resumed>) = 0 [pid 5079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] close(3) = 0 [pid 5061] close(4) = 0 [pid 5061] close(5) = 0 [pid 5061] close(6) = -1 EBADF (Bad file descriptor) [pid 5061] close(7) = -1 EBADF (Bad file descriptor) [pid 5061] close(8) = -1 EBADF (Bad file descriptor) [pid 5061] close(9) = -1 EBADF (Bad file descriptor) [pid 5061] close(10) = -1 EBADF (Bad file descriptor) [pid 5061] close(11) = -1 EBADF (Bad file descriptor) [pid 5061] close(12) = -1 EBADF (Bad file descriptor) [pid 5061] close(13) = -1 EBADF (Bad file descriptor) [pid 5061] close(14) = -1 EBADF (Bad file descriptor) [pid 5061] close(15) = -1 EBADF (Bad file descriptor) [pid 5061] close(16) = -1 EBADF (Bad file descriptor) [pid 5061] close(17) = -1 EBADF (Bad file descriptor) [pid 5061] close(18) = -1 EBADF (Bad file descriptor) [pid 5061] close(19) = -1 EBADF (Bad file descriptor) [pid 5061] close(20) = -1 EBADF (Bad file descriptor) [pid 5061] close(21) = -1 EBADF (Bad file descriptor) [pid 5061] close(22) = -1 EBADF (Bad file descriptor) [pid 5061] close(23) = -1 EBADF (Bad file descriptor) [pid 5061] close(24) = -1 EBADF (Bad file descriptor) [pid 5061] close(25) = -1 EBADF (Bad file descriptor) [pid 5061] close(26) = -1 EBADF (Bad file descriptor) [pid 5061] close(27) = -1 EBADF (Bad file descriptor) [pid 5061] close(28) = -1 EBADF (Bad file descriptor) [pid 5061] close(29) = -1 EBADF (Bad file descriptor) [pid 5061] exit_group(0 [pid 5079] <... futex resumed>) = ? [pid 5062] <... futex resumed>) = ? [pid 5061] <... exit_group resumed>) = ? [pid 5079] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- [pid 5007] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./2/cgroup.cpu") = 0 [pid 5007] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./2/binderfs") = 0 [pid 5007] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./2/file0") = 0 [pid 5007] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./2/cgroup") = 0 [pid 5007] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./2/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./2") = 0 [pid 5007] mkdir("./3", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 11 ./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x5555571235e0, 24) = 0 [pid 5080] chdir("./3") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5080] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5080] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5080] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5081 attached [pid 5081] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... clone resumed>, parent_tid=[12], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 12 [pid 5080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = 0 [pid 5080] <... futex resumed>) = 1 [pid 5081] memfd_create("syzkaller", 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... memfd_create resumed>) = 3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5081] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5081] close(3) = 0 [pid 5081] mkdir("./file0", 0777) = 0 [ 83.516421][ T5081] loop0: detected capacity change from 0 to 32768 [ 83.527823][ T5081] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5081) [ 83.546037][ T5081] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 83.554896][ T5081] BTRFS info (device loop0): using free space tree [pid 5081] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] chdir("./file0") = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] close(4) = 0 [pid 5081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 1 [pid 5081] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 1 [ 83.573832][ T5081] BTRFS info (device loop0): enabling ssd optimizations [ 83.581057][ T5081] BTRFS info (device loop0): auto enabling async discard [pid 5081] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5080] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... clone resumed>, parent_tid=[13], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 13 [pid 5080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5080] <... futex resumed>) = 0 [ 83.624897][ T5081] BTRFS info (device loop0): balance: start -s [ 83.634745][ T5081] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 83.732623][ T5081] BTRFS info (device loop0): balance: ended with status: 0 [pid 5098] <... ioctl resumed>) = 0 [pid 5098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] close(3) = 0 [pid 5080] close(4) = 0 [pid 5080] close(5) = 0 [pid 5080] close(6) = -1 EBADF (Bad file descriptor) [pid 5080] close(7) = -1 EBADF (Bad file descriptor) [pid 5080] close(8) = -1 EBADF (Bad file descriptor) [pid 5080] close(9) = -1 EBADF (Bad file descriptor) [pid 5080] close(10) = -1 EBADF (Bad file descriptor) [pid 5080] close(11) = -1 EBADF (Bad file descriptor) [pid 5080] close(12) = -1 EBADF (Bad file descriptor) [pid 5080] close(13) = -1 EBADF (Bad file descriptor) [pid 5080] close(14) = -1 EBADF (Bad file descriptor) [pid 5080] close(15) = -1 EBADF (Bad file descriptor) [pid 5080] close(16) = -1 EBADF (Bad file descriptor) [pid 5080] close(17) = -1 EBADF (Bad file descriptor) [pid 5080] close(18) = -1 EBADF (Bad file descriptor) [pid 5080] close(19) = -1 EBADF (Bad file descriptor) [pid 5080] close(20) = -1 EBADF (Bad file descriptor) [pid 5080] close(21) = -1 EBADF (Bad file descriptor) [pid 5080] close(22) = -1 EBADF (Bad file descriptor) [pid 5080] close(23) = -1 EBADF (Bad file descriptor) [pid 5080] close(24) = -1 EBADF (Bad file descriptor) [pid 5080] close(25) = -1 EBADF (Bad file descriptor) [pid 5080] close(26) = -1 EBADF (Bad file descriptor) [pid 5080] close(27) = -1 EBADF (Bad file descriptor) [pid 5080] close(28) = -1 EBADF (Bad file descriptor) [pid 5080] close(29) = -1 EBADF (Bad file descriptor) [pid 5080] exit_group(0 [pid 5098] <... futex resumed>) = ? [pid 5081] <... futex resumed>) = ? [pid 5080] <... exit_group resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5081] +++ exited with 0 +++ [pid 5080] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./3/cgroup.cpu") = 0 [pid 5007] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./3/binderfs") = 0 [pid 5007] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./3/file0") = 0 [pid 5007] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./3/cgroup") = 0 [pid 5007] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./3/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./3") = 0 [pid 5007] mkdir("./4", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 14 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5099] chdir("./4") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5099] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5099] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5099] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[15], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 15 [pid 5099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5100] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 84.236031][ T5100] loop0: detected capacity change from 0 to 32768 [ 84.246214][ T5100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5100) [ 84.263546][ T5100] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 84.272365][ T5100] BTRFS info (device loop0): using free space tree [pid 5100] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5100] chdir("./file0") = 0 [pid 5100] ioctl(4, LOOP_CLR_FD) = 0 [pid 5100] close(4) = 0 [pid 5100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5100] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 4 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5100] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 84.292186][ T5100] BTRFS info (device loop0): enabling ssd optimizations [ 84.299440][ T5100] BTRFS info (device loop0): auto enabling async discard [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5099] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[16], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 16 [pid 5099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5117 attached [pid 5117] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5117] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... futex resumed>) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [ 84.343917][ T5100] BTRFS info (device loop0): balance: start -s [ 84.353889][ T5100] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5117] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5100] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 84.399544][ T5100] BTRFS info (device loop0): balance: ended with status: 0 [pid 5117] <... ioctl resumed>) = 0 [pid 5117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] close(3) = 0 [pid 5099] close(4) = 0 [pid 5099] close(5) = 0 [pid 5099] close(6) = -1 EBADF (Bad file descriptor) [pid 5099] close(7) = -1 EBADF (Bad file descriptor) [pid 5099] close(8) = -1 EBADF (Bad file descriptor) [pid 5099] close(9) = -1 EBADF (Bad file descriptor) [pid 5099] close(10) = -1 EBADF (Bad file descriptor) [pid 5099] close(11) = -1 EBADF (Bad file descriptor) [pid 5099] close(12) = -1 EBADF (Bad file descriptor) [pid 5099] close(13) = -1 EBADF (Bad file descriptor) [pid 5099] close(14) = -1 EBADF (Bad file descriptor) [pid 5099] close(15) = -1 EBADF (Bad file descriptor) [pid 5099] close(16) = -1 EBADF (Bad file descriptor) [pid 5099] close(17) = -1 EBADF (Bad file descriptor) [pid 5099] close(18) = -1 EBADF (Bad file descriptor) [pid 5099] close(19) = -1 EBADF (Bad file descriptor) [pid 5099] close(20) = -1 EBADF (Bad file descriptor) [pid 5099] close(21) = -1 EBADF (Bad file descriptor) [pid 5099] close(22) = -1 EBADF (Bad file descriptor) [pid 5099] close(23) = -1 EBADF (Bad file descriptor) [pid 5099] close(24) = -1 EBADF (Bad file descriptor) [pid 5099] close(25) = -1 EBADF (Bad file descriptor) [pid 5099] close(26) = -1 EBADF (Bad file descriptor) [pid 5099] close(27) = -1 EBADF (Bad file descriptor) [pid 5099] close(28) = -1 EBADF (Bad file descriptor) [pid 5099] close(29) = -1 EBADF (Bad file descriptor) [pid 5099] exit_group(0 [pid 5117] <... futex resumed>) = ? [pid 5100] <... futex resumed>) = ? [pid 5099] <... exit_group resumed>) = ? [pid 5100] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./4/cgroup.cpu") = 0 [pid 5007] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./4/binderfs") = 0 [pid 5007] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./4/file0") = 0 [pid 5007] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./4/cgroup") = 0 [pid 5007] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./4/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./4") = 0 [pid 5007] mkdir("./5", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached , child_tidptr=0x5555571235d0) = 17 [pid 5118] set_robust_list(0x5555571235e0, 24) = 0 [pid 5118] chdir("./5") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5118] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5118] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5119 attached , parent_tid=[18], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 18 [pid 5119] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5119] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file0", 0777) = 0 [ 84.913520][ T5119] loop0: detected capacity change from 0 to 32768 [ 84.924570][ T5119] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5119) [ 84.942263][ T5119] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 84.951388][ T5119] BTRFS info (device loop0): using free space tree [pid 5119] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 84.971537][ T5119] BTRFS info (device loop0): enabling ssd optimizations [ 84.979236][ T5119] BTRFS info (device loop0): auto enabling async discard [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5118] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5118] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... clone resumed>, parent_tid=[19], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 19 [pid 5118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5136] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.028666][ T5119] BTRFS info (device loop0): balance: start -s [ 85.037692][ T5119] BTRFS info (device loop0): relocating block group 1048576 flags system [ 85.068412][ T5119] BTRFS info (device loop0): balance: ended with status: 0 [pid 5118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5119] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... ioctl resumed>) = 0 [pid 5136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] close(3 [pid 5136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... close resumed>) = 0 [pid 5118] close(4) = 0 [pid 5118] close(5) = 0 [pid 5118] close(6) = -1 EBADF (Bad file descriptor) [pid 5118] close(7) = -1 EBADF (Bad file descriptor) [pid 5118] close(8) = -1 EBADF (Bad file descriptor) [pid 5118] close(9) = -1 EBADF (Bad file descriptor) [pid 5118] close(10) = -1 EBADF (Bad file descriptor) [pid 5118] close(11) = -1 EBADF (Bad file descriptor) [pid 5118] close(12) = -1 EBADF (Bad file descriptor) [pid 5118] close(13) = -1 EBADF (Bad file descriptor) [pid 5118] close(14) = -1 EBADF (Bad file descriptor) [pid 5118] close(15) = -1 EBADF (Bad file descriptor) [pid 5118] close(16) = -1 EBADF (Bad file descriptor) [pid 5118] close(17) = -1 EBADF (Bad file descriptor) [pid 5118] close(18) = -1 EBADF (Bad file descriptor) [pid 5118] close(19) = -1 EBADF (Bad file descriptor) [pid 5118] close(20) = -1 EBADF (Bad file descriptor) [pid 5118] close(21) = -1 EBADF (Bad file descriptor) [pid 5118] close(22) = -1 EBADF (Bad file descriptor) [pid 5118] close(23) = -1 EBADF (Bad file descriptor) [pid 5118] close(24) = -1 EBADF (Bad file descriptor) [pid 5118] close(25) = -1 EBADF (Bad file descriptor) [pid 5118] close(26) = -1 EBADF (Bad file descriptor) [pid 5118] close(27) = -1 EBADF (Bad file descriptor) [pid 5118] close(28) = -1 EBADF (Bad file descriptor) [pid 5118] close(29) = -1 EBADF (Bad file descriptor) [pid 5118] exit_group(0 [pid 5136] <... futex resumed>) = ? [pid 5119] <... futex resumed>) = ? [pid 5136] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 5118] <... exit_group resumed>) = ? [pid 5118] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./5/cgroup.cpu") = 0 [pid 5007] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./5/binderfs") = 0 [pid 5007] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./5/file0") = 0 [pid 5007] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./5/cgroup") = 0 [pid 5007] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./5/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./5") = 0 [pid 5007] mkdir("./6", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 20 ./strace-static-x86_64: Process 5137 attached [pid 5137] set_robust_list(0x5555571235e0, 24) = 0 [pid 5137] chdir("./6") = 0 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5137] setpgid(0, 0) = 0 [pid 5137] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5137] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5137] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5137] write(3, "1000", 4) = 4 [pid 5137] close(3) = 0 [pid 5137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5137] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[21], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 21 [pid 5137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5138] memfd_create("syzkaller", 0) = 3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5138] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5138] close(3) = 0 [pid 5138] mkdir("./file0", 0777) = 0 [ 85.572689][ T5138] loop0: detected capacity change from 0 to 32768 [ 85.584090][ T5138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5138) [ 85.601956][ T5138] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 85.610778][ T5138] BTRFS info (device loop0): using free space tree [pid 5138] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5138] chdir("./file0") = 0 [pid 5138] ioctl(4, LOOP_CLR_FD) = 0 [pid 5138] close(4) = 0 [pid 5138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] <... openat resumed>) = 4 [pid 5138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 85.631458][ T5138] BTRFS info (device loop0): enabling ssd optimizations [ 85.645183][ T5138] BTRFS info (device loop0): auto enabling async discard [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5137] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5137] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[22], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 22 ./strace-static-x86_64: Process 5155 attached [pid 5137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 1 [ 85.711591][ T5138] BTRFS info (device loop0): balance: start -s [ 85.727337][ T5138] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5155] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5137] close(3) = 0 [pid 5137] close(4) = 0 [pid 5137] close(5) = 0 [pid 5137] close(6) = -1 EBADF (Bad file descriptor) [pid 5137] close(7) = -1 EBADF (Bad file descriptor) [pid 5137] close(8) = -1 EBADF (Bad file descriptor) [pid 5137] close(9) = -1 EBADF (Bad file descriptor) [pid 5137] close(10) = -1 EBADF (Bad file descriptor) [pid 5137] close(11) = -1 EBADF (Bad file descriptor) [pid 5137] close(12) = -1 EBADF (Bad file descriptor) [pid 5137] close(13) = -1 EBADF (Bad file descriptor) [pid 5137] close(14) = -1 EBADF (Bad file descriptor) [pid 5137] close(15) = -1 EBADF (Bad file descriptor) [pid 5137] close(16) = -1 EBADF (Bad file descriptor) [pid 5137] close(17) = -1 EBADF (Bad file descriptor) [pid 5137] close(18) = -1 EBADF (Bad file descriptor) [pid 5137] close(19) = -1 EBADF (Bad file descriptor) [pid 5137] close(20) = -1 EBADF (Bad file descriptor) [pid 5137] close(21) = -1 EBADF (Bad file descriptor) [pid 5137] close(22) = -1 EBADF (Bad file descriptor) [pid 5137] close(23) = -1 EBADF (Bad file descriptor) [pid 5137] close(24) = -1 EBADF (Bad file descriptor) [pid 5137] close(25) = -1 EBADF (Bad file descriptor) [pid 5137] close(26) = -1 EBADF (Bad file descriptor) [pid 5137] close(27) = -1 EBADF (Bad file descriptor) [pid 5137] close(28) = -1 EBADF (Bad file descriptor) [pid 5137] close(29) = -1 EBADF (Bad file descriptor) [pid 5137] exit_group(0) = ? [pid 5155] <... ioctl resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5138] <... ioctl resumed> ) = ? [pid 5138] +++ exited with 0 +++ [pid 5137] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./6/cgroup.cpu") = 0 [pid 5007] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./6/binderfs") = 0 [ 86.015549][ T5155] BTRFS warning (device loop0): failed to trim 1 block group(s), last error -512 [ 86.037013][ T5138] BTRFS info (device loop0): balance: ended with status: 0 [ 86.045996][ T5155] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [pid 5007] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./6/file0") = 0 [pid 5007] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./6/cgroup") = 0 [pid 5007] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./6/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./6") = 0 [pid 5007] mkdir("./7", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5156 attached [pid 5156] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 23 [pid 5156] <... set_robust_list resumed>) = 0 [pid 5156] chdir("./7") = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5156] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5156] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5156] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5157 attached , parent_tid=[24], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 24 [pid 5157] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5157] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5157] memfd_create("syzkaller", 0 [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5157] <... memfd_create resumed>) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5157] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5157] close(3) = 0 [pid 5157] mkdir("./file0", 0777) = 0 [ 86.425386][ T5157] loop0: detected capacity change from 0 to 32768 [ 86.435621][ T5157] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5157) [ 86.453064][ T5157] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 86.461902][ T5157] BTRFS info (device loop0): using free space tree [pid 5157] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5157] chdir("./file0") = 0 [pid 5157] ioctl(4, LOOP_CLR_FD) = 0 [pid 5157] close(4) = 0 [pid 5157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5157] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] <... openat resumed>) = 4 [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5157] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.483634][ T5157] BTRFS info (device loop0): enabling ssd optimizations [ 86.490684][ T5157] BTRFS info (device loop0): auto enabling async discard [ 86.526738][ T5157] BTRFS info (device loop0): balance: start -s [ 86.536579][ T5157] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5156] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5156] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5174 attached [pid 5174] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] <... clone resumed>, parent_tid=[25], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 25 [pid 5156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5156] <... futex resumed>) = 1 [pid 5156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.567517][ T5157] BTRFS info (device loop0): balance: ended with status: 0 [pid 5157] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5174] <... ioctl resumed>) = 0 [pid 5174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] close(3) = 0 [pid 5156] close(4) = 0 [pid 5156] close(5) = 0 [pid 5156] close(6) = -1 EBADF (Bad file descriptor) [pid 5156] close(7) = -1 EBADF (Bad file descriptor) [pid 5156] close(8) = -1 EBADF (Bad file descriptor) [pid 5156] close(9) = -1 EBADF (Bad file descriptor) [pid 5156] close(10) = -1 EBADF (Bad file descriptor) [pid 5156] close(11) = -1 EBADF (Bad file descriptor) [pid 5156] close(12) = -1 EBADF (Bad file descriptor) [pid 5156] close(13) = -1 EBADF (Bad file descriptor) [pid 5156] close(14) = -1 EBADF (Bad file descriptor) [pid 5156] close(15) = -1 EBADF (Bad file descriptor) [pid 5156] close(16) = -1 EBADF (Bad file descriptor) [pid 5156] close(17) = -1 EBADF (Bad file descriptor) [pid 5156] close(18) = -1 EBADF (Bad file descriptor) [pid 5156] close(19) = -1 EBADF (Bad file descriptor) [pid 5156] close(20) = -1 EBADF (Bad file descriptor) [pid 5156] close(21) = -1 EBADF (Bad file descriptor) [pid 5156] close(22) = -1 EBADF (Bad file descriptor) [pid 5156] close(23) = -1 EBADF (Bad file descriptor) [pid 5156] close(24) = -1 EBADF (Bad file descriptor) [pid 5156] close(25) = -1 EBADF (Bad file descriptor) [pid 5156] close(26) = -1 EBADF (Bad file descriptor) [pid 5156] close(27) = -1 EBADF (Bad file descriptor) [pid 5156] close(28) = -1 EBADF (Bad file descriptor) [pid 5156] close(29) = -1 EBADF (Bad file descriptor) [pid 5156] exit_group(0 [pid 5174] <... futex resumed>) = ? [pid 5157] <... futex resumed>) = ? [pid 5156] <... exit_group resumed>) = ? [pid 5174] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ [pid 5156] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./7/cgroup.cpu") = 0 [pid 5007] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./7/binderfs") = 0 [pid 5007] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./7/file0") = 0 [pid 5007] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./7/cgroup") = 0 [pid 5007] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./7/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./7") = 0 [pid 5007] mkdir("./8", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 26 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x5555571235e0, 24) = 0 [pid 5178] chdir("./8") = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5178] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5178] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5178] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5179 attached , parent_tid=[27], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 27 [pid 5179] set_robust_list(0x7fd090fc79e0, 24 [pid 5178] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5179] <... set_robust_list resumed>) = 0 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5179] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [ 87.314619][ T5179] loop0: detected capacity change from 0 to 32768 [ 87.327030][ T5179] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5179) [pid 5179] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [pid 5179] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5178] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... openat resumed>) = 4 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 1 [pid 5178] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5178] <... futex resumed>) = 0 [ 87.364762][ T5179] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 87.373666][ T5179] BTRFS info (device loop0): using free space tree [ 87.394467][ T5179] BTRFS info (device loop0): enabling ssd optimizations [ 87.401729][ T5179] BTRFS info (device loop0): auto enabling async discard [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5178] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[28], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 28 [pid 5178] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.450290][ T5179] BTRFS info (device loop0): balance: start -s [ 87.458727][ T5179] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5178] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5196] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5196] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 87.494562][ T5179] BTRFS info (device loop0): balance: ended with status: 0 [pid 5179] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5179] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] <... ioctl resumed>) = 0 [pid 5196] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] close(3 [pid 5196] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... close resumed>) = 0 [pid 5178] close(4) = 0 [pid 5178] close(5) = 0 [pid 5178] close(6) = -1 EBADF (Bad file descriptor) [pid 5178] close(7) = -1 EBADF (Bad file descriptor) [pid 5178] close(8) = -1 EBADF (Bad file descriptor) [pid 5178] close(9) = -1 EBADF (Bad file descriptor) [pid 5178] close(10) = -1 EBADF (Bad file descriptor) [pid 5178] close(11) = -1 EBADF (Bad file descriptor) [pid 5178] close(12) = -1 EBADF (Bad file descriptor) [pid 5178] close(13) = -1 EBADF (Bad file descriptor) [pid 5178] close(14) = -1 EBADF (Bad file descriptor) [pid 5178] close(15) = -1 EBADF (Bad file descriptor) [pid 5178] close(16) = -1 EBADF (Bad file descriptor) [pid 5178] close(17) = -1 EBADF (Bad file descriptor) [pid 5178] close(18) = -1 EBADF (Bad file descriptor) [pid 5178] close(19) = -1 EBADF (Bad file descriptor) [pid 5178] close(20) = -1 EBADF (Bad file descriptor) [pid 5178] close(21) = -1 EBADF (Bad file descriptor) [pid 5178] close(22) = -1 EBADF (Bad file descriptor) [pid 5178] close(23) = -1 EBADF (Bad file descriptor) [pid 5178] close(24) = -1 EBADF (Bad file descriptor) [pid 5178] close(25) = -1 EBADF (Bad file descriptor) [pid 5178] close(26) = -1 EBADF (Bad file descriptor) [pid 5178] close(27) = -1 EBADF (Bad file descriptor) [pid 5178] close(28) = -1 EBADF (Bad file descriptor) [pid 5178] close(29) = -1 EBADF (Bad file descriptor) [pid 5178] exit_group(0 [pid 5196] <... futex resumed>) = ? [pid 5179] <... futex resumed>) = ? [pid 5178] <... exit_group resumed>) = ? [pid 5196] +++ exited with 0 +++ [pid 5179] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./8/cgroup.cpu") = 0 [pid 5007] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./8/binderfs") = 0 [pid 5007] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./8/file0") = 0 [pid 5007] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./8/cgroup") = 0 [pid 5007] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./8/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./8") = 0 [pid 5007] mkdir("./9", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 29 ./strace-static-x86_64: Process 5197 attached [pid 5197] set_robust_list(0x5555571235e0, 24) = 0 [pid 5197] chdir("./9") = 0 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5197] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5197] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5197] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5198] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] <... clone resumed>, parent_tid=[30], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 30 [pid 5197] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 1 [pid 5198] memfd_create("syzkaller", 0 [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5198] <... memfd_create resumed>) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5198] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5198] close(3) = 0 [pid 5198] mkdir("./file0", 0777) = 0 [ 88.028507][ T5198] loop0: detected capacity change from 0 to 32768 [ 88.038860][ T5198] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5198) [ 88.056751][ T5198] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.065666][ T5198] BTRFS info (device loop0): using free space tree [pid 5198] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] chdir("./file0") = 0 [pid 5198] ioctl(4, LOOP_CLR_FD) = 0 [pid 5198] close(4) = 0 [pid 5198] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5198] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5197] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] <... openat resumed>) = 4 [pid 5198] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... futex resumed>) = 0 [pid 5197] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5198] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 88.086498][ T5198] BTRFS info (device loop0): enabling ssd optimizations [ 88.093546][ T5198] BTRFS info (device loop0): auto enabling async discard [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5197] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5197] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[31], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 31 [pid 5197] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x7fd089ba69e0, 24) = 0 [ 88.146634][ T5198] BTRFS info (device loop0): balance: start -s [ 88.155296][ T5198] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5215] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5215] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5197] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5198] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5198] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.187222][ T5198] BTRFS info (device loop0): balance: ended with status: 0 [pid 5198] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5215] <... ioctl resumed>) = 0 [pid 5215] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] close(3 [pid 5215] <... futex resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5215] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] close(4) = 0 [pid 5197] close(5) = 0 [pid 5197] close(6) = -1 EBADF (Bad file descriptor) [pid 5197] close(7) = -1 EBADF (Bad file descriptor) [pid 5197] close(8) = -1 EBADF (Bad file descriptor) [pid 5197] close(9) = -1 EBADF (Bad file descriptor) [pid 5197] close(10) = -1 EBADF (Bad file descriptor) [pid 5197] close(11) = -1 EBADF (Bad file descriptor) [pid 5197] close(12) = -1 EBADF (Bad file descriptor) [pid 5197] close(13) = -1 EBADF (Bad file descriptor) [pid 5197] close(14) = -1 EBADF (Bad file descriptor) [pid 5197] close(15) = -1 EBADF (Bad file descriptor) [pid 5197] close(16) = -1 EBADF (Bad file descriptor) [pid 5197] close(17) = -1 EBADF (Bad file descriptor) [pid 5197] close(18) = -1 EBADF (Bad file descriptor) [pid 5197] close(19) = -1 EBADF (Bad file descriptor) [pid 5197] close(20) = -1 EBADF (Bad file descriptor) [pid 5197] close(21) = -1 EBADF (Bad file descriptor) [pid 5197] close(22) = -1 EBADF (Bad file descriptor) [pid 5197] close(23) = -1 EBADF (Bad file descriptor) [pid 5197] close(24) = -1 EBADF (Bad file descriptor) [pid 5197] close(25) = -1 EBADF (Bad file descriptor) [pid 5197] close(26) = -1 EBADF (Bad file descriptor) [pid 5197] close(27) = -1 EBADF (Bad file descriptor) [pid 5197] close(28) = -1 EBADF (Bad file descriptor) [pid 5197] close(29) = -1 EBADF (Bad file descriptor) [pid 5197] exit_group(0 [pid 5215] <... futex resumed>) = ? [pid 5198] <... futex resumed>) = ? [pid 5197] <... exit_group resumed>) = ? [pid 5215] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5197] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./9/cgroup.cpu") = 0 [pid 5007] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./9/binderfs") = 0 [pid 5007] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./9/file0") = 0 [pid 5007] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./9/cgroup") = 0 [pid 5007] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./9/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./9") = 0 [pid 5007] mkdir("./10", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 32 ./strace-static-x86_64: Process 5216 attached [pid 5216] set_robust_list(0x5555571235e0, 24) = 0 [pid 5216] chdir("./10") = 0 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5216] setpgid(0, 0) = 0 [pid 5216] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5216] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5216] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5216] write(3, "1000", 4) = 4 [pid 5216] close(3) = 0 [pid 5216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5216] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5217 attached , parent_tid=[33], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 33 [pid 5216] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] set_robust_list(0x7fd090fc79e0, 24 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5217] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] close(3) = 0 [pid 5217] mkdir("./file0", 0777) = 0 [ 88.717086][ T5217] loop0: detected capacity change from 0 to 32768 [ 88.728832][ T5217] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5217) [ 88.746120][ T5217] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.754898][ T5217] BTRFS info (device loop0): using free space tree [pid 5217] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5217] chdir("./file0") = 0 [pid 5217] ioctl(4, LOOP_CLR_FD) = 0 [pid 5217] close(4) = 0 [pid 5217] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5217] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 88.776844][ T5217] BTRFS info (device loop0): enabling ssd optimizations [ 88.783947][ T5217] BTRFS info (device loop0): auto enabling async discard [ 88.821299][ T5217] BTRFS info (device loop0): balance: start -s [ 88.830667][ T5217] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5217] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5216] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5216] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[34], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 34 [pid 5216] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5234 attached [pid 5234] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5234] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5234] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5234] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5216] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5217] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.862451][ T5217] BTRFS info (device loop0): balance: ended with status: 0 [pid 5217] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5234] <... ioctl resumed>) = 0 [pid 5234] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5234] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] close(3) = 0 [pid 5216] close(4) = 0 [pid 5216] close(5) = 0 [pid 5216] close(6) = -1 EBADF (Bad file descriptor) [pid 5216] close(7) = -1 EBADF (Bad file descriptor) [pid 5216] close(8) = -1 EBADF (Bad file descriptor) [pid 5216] close(9) = -1 EBADF (Bad file descriptor) [pid 5216] close(10) = -1 EBADF (Bad file descriptor) [pid 5216] close(11) = -1 EBADF (Bad file descriptor) [pid 5216] close(12) = -1 EBADF (Bad file descriptor) [pid 5216] close(13) = -1 EBADF (Bad file descriptor) [pid 5216] close(14) = -1 EBADF (Bad file descriptor) [pid 5216] close(15) = -1 EBADF (Bad file descriptor) [pid 5216] close(16) = -1 EBADF (Bad file descriptor) [pid 5216] close(17) = -1 EBADF (Bad file descriptor) [pid 5216] close(18) = -1 EBADF (Bad file descriptor) [pid 5216] close(19) = -1 EBADF (Bad file descriptor) [pid 5216] close(20) = -1 EBADF (Bad file descriptor) [pid 5216] close(21) = -1 EBADF (Bad file descriptor) [pid 5216] close(22) = -1 EBADF (Bad file descriptor) [pid 5216] close(23) = -1 EBADF (Bad file descriptor) [pid 5216] close(24) = -1 EBADF (Bad file descriptor) [pid 5216] close(25) = -1 EBADF (Bad file descriptor) [pid 5216] close(26) = -1 EBADF (Bad file descriptor) [pid 5216] close(27) = -1 EBADF (Bad file descriptor) [pid 5216] close(28) = -1 EBADF (Bad file descriptor) [pid 5216] close(29) = -1 EBADF (Bad file descriptor) [pid 5216] exit_group(0 [pid 5217] <... futex resumed>) = ? [pid 5234] <... futex resumed>) = ? [pid 5216] <... exit_group resumed>) = ? [pid 5217] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 5216] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./10/cgroup.cpu") = 0 [pid 5007] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./10/binderfs") = 0 [pid 5007] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./10/file0") = 0 [pid 5007] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./10/cgroup") = 0 [pid 5007] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./10/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./10") = 0 [pid 5007] mkdir("./11", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 35 ./strace-static-x86_64: Process 5235 attached [pid 5235] set_robust_list(0x5555571235e0, 24) = 0 [pid 5235] chdir("./11") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5235] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5235] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5235] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5236] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... clone resumed>, parent_tid=[36], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 36 [pid 5235] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5236] memfd_create("syzkaller", 0 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5236] <... memfd_create resumed>) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5236] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [ 89.404699][ T5236] loop0: detected capacity change from 0 to 32768 [ 89.415967][ T5236] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5236) [ 89.433898][ T5236] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.442844][ T5236] BTRFS info (device loop0): using free space tree [pid 5236] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file0") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5235] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... openat resumed>) = 4 [pid 5236] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = 0 [ 89.463395][ T5236] BTRFS info (device loop0): enabling ssd optimizations [ 89.470613][ T5236] BTRFS info (device loop0): auto enabling async discard [pid 5236] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5235] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5253 attached [pid 5253] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5253] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... clone resumed>, parent_tid=[37], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 37 [pid 5235] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 89.519867][ T5236] BTRFS info (device loop0): balance: start -s [ 89.529357][ T5236] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5253] <... futex resumed>) = 0 [pid 5235] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5253] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5235] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5253] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 89.573296][ T5236] BTRFS info (device loop0): balance: ended with status: 0 [pid 5235] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5236] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5236] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... ioctl resumed>) = 0 [pid 5253] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] close(3) = 0 [pid 5235] close(4) = 0 [pid 5235] close(5) = 0 [pid 5235] close(6) = -1 EBADF (Bad file descriptor) [pid 5235] close(7) = -1 EBADF (Bad file descriptor) [pid 5235] close(8) = -1 EBADF (Bad file descriptor) [pid 5235] close(9) = -1 EBADF (Bad file descriptor) [pid 5235] close(10) = -1 EBADF (Bad file descriptor) [pid 5235] close(11) = -1 EBADF (Bad file descriptor) [pid 5235] close(12) = -1 EBADF (Bad file descriptor) [pid 5235] close(13) = -1 EBADF (Bad file descriptor) [pid 5235] close(14) = -1 EBADF (Bad file descriptor) [pid 5235] close(15) = -1 EBADF (Bad file descriptor) [pid 5235] close(16) = -1 EBADF (Bad file descriptor) [pid 5235] close(17) = -1 EBADF (Bad file descriptor) [pid 5235] close(18) = -1 EBADF (Bad file descriptor) [pid 5235] close(19) = -1 EBADF (Bad file descriptor) [pid 5235] close(20) = -1 EBADF (Bad file descriptor) [pid 5235] close(21) = -1 EBADF (Bad file descriptor) [pid 5235] close(22) = -1 EBADF (Bad file descriptor) [pid 5235] close(23) = -1 EBADF (Bad file descriptor) [pid 5235] close(24) = -1 EBADF (Bad file descriptor) [pid 5235] close(25) = -1 EBADF (Bad file descriptor) [pid 5235] close(26) = -1 EBADF (Bad file descriptor) [pid 5235] close(27) = -1 EBADF (Bad file descriptor) [pid 5235] close(28) = -1 EBADF (Bad file descriptor) [pid 5235] close(29) = -1 EBADF (Bad file descriptor) [pid 5235] exit_group(0 [pid 5253] <... futex resumed>) = ? [pid 5236] <... futex resumed>) = ? [pid 5235] <... exit_group resumed>) = ? [pid 5253] +++ exited with 0 +++ [pid 5236] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./11/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./11/cgroup.cpu") = 0 [pid 5007] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./11/binderfs") = 0 [pid 5007] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./11/file0") = 0 [pid 5007] umount2("./11/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./11/cgroup") = 0 [pid 5007] umount2("./11/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./11/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./11") = 0 [pid 5007] mkdir("./12", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 38 ./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x5555571235e0, 24) = 0 [pid 5254] chdir("./12") = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5254] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5254] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5254] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5255 attached [pid 5255] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5255] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... clone resumed>, parent_tid=[39], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 39 [pid 5254] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5255] memfd_create("syzkaller", 0) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5255] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5255] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5255] close(3) = 0 [pid 5255] mkdir("./file0", 0777) = 0 [ 90.108802][ T5255] loop0: detected capacity change from 0 to 32768 [ 90.120327][ T5255] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5255) [ 90.139737][ T5255] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.148626][ T5255] BTRFS info (device loop0): using free space tree [pid 5255] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5255] chdir("./file0") = 0 [pid 5255] ioctl(4, LOOP_CLR_FD) = 0 [pid 5255] close(4) = 0 [pid 5255] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5255] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... openat resumed>) = 4 [pid 5255] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5255] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5254] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.169383][ T5255] BTRFS info (device loop0): enabling ssd optimizations [ 90.176520][ T5255] BTRFS info (device loop0): auto enabling async discard [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5254] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5254] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[40], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 40 [pid 5254] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5272 attached [pid 5272] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5272] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5272] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5272] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5254] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.234378][ T5255] BTRFS info (device loop0): balance: start -s [ 90.244639][ T5255] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5254] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5255] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 90.307483][ T5255] BTRFS info (device loop0): balance: ended with status: 0 [pid 5272] <... ioctl resumed>) = 0 [pid 5272] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] close(3 [pid 5272] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... close resumed>) = 0 [pid 5254] close(4) = 0 [pid 5254] close(5) = 0 [pid 5254] close(6) = -1 EBADF (Bad file descriptor) [pid 5254] close(7) = -1 EBADF (Bad file descriptor) [pid 5254] close(8) = -1 EBADF (Bad file descriptor) [pid 5254] close(9) = -1 EBADF (Bad file descriptor) [pid 5254] close(10) = -1 EBADF (Bad file descriptor) [pid 5254] close(11) = -1 EBADF (Bad file descriptor) [pid 5254] close(12) = -1 EBADF (Bad file descriptor) [pid 5254] close(13) = -1 EBADF (Bad file descriptor) [pid 5254] close(14) = -1 EBADF (Bad file descriptor) [pid 5254] close(15) = -1 EBADF (Bad file descriptor) [pid 5254] close(16) = -1 EBADF (Bad file descriptor) [pid 5254] close(17) = -1 EBADF (Bad file descriptor) [pid 5254] close(18) = -1 EBADF (Bad file descriptor) [pid 5254] close(19) = -1 EBADF (Bad file descriptor) [pid 5254] close(20) = -1 EBADF (Bad file descriptor) [pid 5254] close(21) = -1 EBADF (Bad file descriptor) [pid 5254] close(22) = -1 EBADF (Bad file descriptor) [pid 5254] close(23) = -1 EBADF (Bad file descriptor) [pid 5254] close(24) = -1 EBADF (Bad file descriptor) [pid 5254] close(25) = -1 EBADF (Bad file descriptor) [pid 5254] close(26) = -1 EBADF (Bad file descriptor) [pid 5254] close(27) = -1 EBADF (Bad file descriptor) [pid 5254] close(28) = -1 EBADF (Bad file descriptor) [pid 5254] close(29) = -1 EBADF (Bad file descriptor) [pid 5254] exit_group(0 [pid 5255] <... futex resumed>) = ? [pid 5254] <... exit_group resumed>) = ? [pid 5272] <... futex resumed>) = ? [pid 5255] +++ exited with 0 +++ [pid 5272] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./12/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./12/cgroup.cpu") = 0 [pid 5007] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./12/binderfs") = 0 [pid 5007] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./12/file0") = 0 [pid 5007] umount2("./12/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./12/cgroup") = 0 [pid 5007] umount2("./12/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./12/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./12") = 0 [pid 5007] mkdir("./13", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5273 attached , child_tidptr=0x5555571235d0) = 41 [pid 5273] set_robust_list(0x5555571235e0, 24) = 0 [pid 5273] chdir("./13") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5273] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5273] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5273] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5274] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] <... clone resumed>, parent_tid=[42], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 42 [pid 5273] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = 1 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5274] <... mmap resumed>) = 0x7fd088ba7000 [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5274] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5274] close(3) = 0 [pid 5274] mkdir("./file0", 0777) = 0 [ 90.836741][ T5274] loop0: detected capacity change from 0 to 32768 [ 90.849183][ T5274] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5274) [ 90.868134][ T5274] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.877032][ T5274] BTRFS info (device loop0): using free space tree [pid 5274] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./file0") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD) = 0 [pid 5274] close(4) = 0 [pid 5274] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 1 [pid 5274] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5274] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 1 [ 90.895006][ T5274] BTRFS info (device loop0): enabling ssd optimizations [ 90.902172][ T5274] BTRFS info (device loop0): auto enabling async discard [ 90.934737][ T5274] BTRFS info (device loop0): balance: start -s [pid 5274] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5273] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5273] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5290 attached [pid 5290] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5290] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] <... clone resumed>, parent_tid=[43], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 43 [pid 5273] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... futex resumed>) = 0 [pid 5290] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5290] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5290] <... futex resumed>) = 1 [pid 5290] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5273] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.947316][ T5274] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5273] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 91.051827][ T5274] BTRFS info (device loop0): balance: ended with status: 0 [pid 5290] <... ioctl resumed>) = 0 [pid 5290] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5274] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... futex resumed>) = 0 [pid 5274] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] close(3) = 0 [pid 5273] close(4) = 0 [pid 5273] close(5) = 0 [pid 5273] close(6) = -1 EBADF (Bad file descriptor) [pid 5273] close(7) = -1 EBADF (Bad file descriptor) [pid 5273] close(8) = -1 EBADF (Bad file descriptor) [pid 5273] close(9) = -1 EBADF (Bad file descriptor) [pid 5273] close(10) = -1 EBADF (Bad file descriptor) [pid 5273] close(11) = -1 EBADF (Bad file descriptor) [pid 5273] close(12) = -1 EBADF (Bad file descriptor) [pid 5273] close(13) = -1 EBADF (Bad file descriptor) [pid 5273] close(14) = -1 EBADF (Bad file descriptor) [pid 5273] close(15) = -1 EBADF (Bad file descriptor) [pid 5273] close(16) = -1 EBADF (Bad file descriptor) [pid 5273] close(17) = -1 EBADF (Bad file descriptor) [pid 5273] close(18) = -1 EBADF (Bad file descriptor) [pid 5273] close(19) = -1 EBADF (Bad file descriptor) [pid 5273] close(20) = -1 EBADF (Bad file descriptor) [pid 5273] close(21) = -1 EBADF (Bad file descriptor) [pid 5273] close(22) = -1 EBADF (Bad file descriptor) [pid 5273] close(23) = -1 EBADF (Bad file descriptor) [pid 5273] close(24) = -1 EBADF (Bad file descriptor) [pid 5273] close(25) = -1 EBADF (Bad file descriptor) [pid 5273] close(26) = -1 EBADF (Bad file descriptor) [pid 5273] close(27) = -1 EBADF (Bad file descriptor) [pid 5273] close(28) = -1 EBADF (Bad file descriptor) [pid 5273] close(29) = -1 EBADF (Bad file descriptor) [pid 5273] exit_group(0) = ? [pid 5290] <... futex resumed>) = ? [pid 5274] <... futex resumed>) = ? [pid 5290] +++ exited with 0 +++ [pid 5274] +++ exited with 0 +++ [pid 5273] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./13/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./13/cgroup.cpu") = 0 [pid 5007] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./13/binderfs") = 0 [pid 5007] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./13/file0") = 0 [pid 5007] umount2("./13/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./13/cgroup") = 0 [pid 5007] umount2("./13/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./13/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./13") = 0 [pid 5007] mkdir("./14", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 44 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x5555571235e0, 24) = 0 [pid 5292] chdir("./14") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5292] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5292] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5292] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5293 attached [pid 5293] set_robust_list(0x7fd090fc79e0, 24 [pid 5292] <... clone resumed>, parent_tid=[45], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 45 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5292] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] memfd_create("syzkaller", 0 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5293] <... memfd_create resumed>) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5293] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5293] close(3) = 0 [pid 5293] mkdir("./file0", 0777) = 0 [ 91.608190][ T5293] loop0: detected capacity change from 0 to 32768 [ 91.619715][ T5293] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5293) [ 91.636880][ T5293] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 91.645763][ T5293] BTRFS info (device loop0): using free space tree [pid 5293] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./file0") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5293] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... futex resumed>) = 0 [pid 5293] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5293] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... futex resumed>) = 1 [ 91.666647][ T5293] BTRFS info (device loop0): enabling ssd optimizations [ 91.673703][ T5293] BTRFS info (device loop0): auto enabling async discard [pid 5293] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5292] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5292] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5310 attached [pid 5310] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5310] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... clone resumed>, parent_tid=[46], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 46 [pid 5292] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] <... futex resumed>) = 0 [pid 5310] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5310] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] <... futex resumed>) = 1 [ 91.724197][ T5293] BTRFS info (device loop0): balance: start -s [ 91.733872][ T5293] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5310] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 91.833170][ T5293] BTRFS info (device loop0): balance: ended with status: 0 [ 91.858593][ T1449] cfg80211: failed to load regulatory.db [pid 5310] <... ioctl resumed>) = 0 [pid 5310] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5310] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] close(3) = 0 [pid 5292] close(4) = 0 [pid 5292] close(5) = 0 [pid 5292] close(6) = -1 EBADF (Bad file descriptor) [pid 5292] close(7) = -1 EBADF (Bad file descriptor) [pid 5292] close(8) = -1 EBADF (Bad file descriptor) [pid 5292] close(9) = -1 EBADF (Bad file descriptor) [pid 5292] close(10) = -1 EBADF (Bad file descriptor) [pid 5292] close(11) = -1 EBADF (Bad file descriptor) [pid 5292] close(12) = -1 EBADF (Bad file descriptor) [pid 5292] close(13) = -1 EBADF (Bad file descriptor) [pid 5292] close(14) = -1 EBADF (Bad file descriptor) [pid 5292] close(15) = -1 EBADF (Bad file descriptor) [pid 5292] close(16) = -1 EBADF (Bad file descriptor) [pid 5292] close(17) = -1 EBADF (Bad file descriptor) [pid 5292] close(18) = -1 EBADF (Bad file descriptor) [pid 5292] close(19) = -1 EBADF (Bad file descriptor) [pid 5292] close(20) = -1 EBADF (Bad file descriptor) [pid 5292] close(21) = -1 EBADF (Bad file descriptor) [pid 5292] close(22) = -1 EBADF (Bad file descriptor) [pid 5292] close(23) = -1 EBADF (Bad file descriptor) [pid 5292] close(24) = -1 EBADF (Bad file descriptor) [pid 5292] close(25) = -1 EBADF (Bad file descriptor) [pid 5292] close(26) = -1 EBADF (Bad file descriptor) [pid 5292] close(27) = -1 EBADF (Bad file descriptor) [pid 5292] close(28) = -1 EBADF (Bad file descriptor) [pid 5292] close(29) = -1 EBADF (Bad file descriptor) [pid 5292] exit_group(0 [pid 5310] <... futex resumed>) = ? [pid 5293] <... futex resumed>) = ? [pid 5292] <... exit_group resumed>) = ? [pid 5310] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./14/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./14/cgroup.cpu") = 0 [pid 5007] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./14/binderfs") = 0 [pid 5007] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./14/file0") = 0 [pid 5007] umount2("./14/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./14/cgroup") = 0 [pid 5007] umount2("./14/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./14/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./14") = 0 [pid 5007] mkdir("./15", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5311 attached [pid 5311] set_robust_list(0x5555571235e0, 24) = 0 [pid 5311] chdir("./15") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5311] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5311] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5311] write(3, "1000", 4) = 4 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 47 [pid 5311] <... mmap resumed>) = 0x7fd090fa7000 [pid 5311] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5312 attached [pid 5312] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5312] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... clone resumed>, parent_tid=[48], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 48 [pid 5311] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = 0 [pid 5311] <... futex resumed>) = 1 [pid 5312] memfd_create("syzkaller", 0 [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5312] <... memfd_create resumed>) = 3 [pid 5312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5312] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5312] close(3) = 0 [pid 5312] mkdir("./file0", 0777) = 0 [ 92.343021][ T5312] loop0: detected capacity change from 0 to 32768 [ 92.354234][ T5312] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5312) [ 92.371515][ T5312] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 92.380558][ T5312] BTRFS info (device loop0): using free space tree [pid 5312] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5312] chdir("./file0") = 0 [pid 5312] ioctl(4, LOOP_CLR_FD) = 0 [pid 5312] close(4) = 0 [pid 5312] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5312] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = 0 [pid 5311] <... futex resumed>) = 1 [pid 5312] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... openat resumed>) = 4 [pid 5312] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5312] <... futex resumed>) = 1 [pid 5312] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5311] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.400580][ T5312] BTRFS info (device loop0): enabling ssd optimizations [ 92.407759][ T5312] BTRFS info (device loop0): auto enabling async discard [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5311] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5311] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5329 attached , parent_tid=[49], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 49 [pid 5329] set_robust_list(0x7fd089ba69e0, 24 [pid 5311] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... set_robust_list resumed>) = 0 [pid 5311] <... futex resumed>) = 0 [ 92.464378][ T5312] BTRFS info (device loop0): balance: start -s [ 92.473644][ T5312] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5311] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5329] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5312] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.516827][ T5312] BTRFS info (device loop0): balance: ended with status: 0 [pid 5312] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5329] <... ioctl resumed>) = 0 [pid 5329] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] close(3) = 0 [pid 5311] close(4) = 0 [pid 5311] close(5) = 0 [pid 5311] close(6) = -1 EBADF (Bad file descriptor) [pid 5311] close(7) = -1 EBADF (Bad file descriptor) [pid 5311] close(8) = -1 EBADF (Bad file descriptor) [pid 5311] close(9) = -1 EBADF (Bad file descriptor) [pid 5311] close(10) = -1 EBADF (Bad file descriptor) [pid 5311] close(11) = -1 EBADF (Bad file descriptor) [pid 5311] close(12) = -1 EBADF (Bad file descriptor) [pid 5311] close(13) = -1 EBADF (Bad file descriptor) [pid 5311] close(14) = -1 EBADF (Bad file descriptor) [pid 5311] close(15) = -1 EBADF (Bad file descriptor) [pid 5311] close(16) = -1 EBADF (Bad file descriptor) [pid 5311] close(17) = -1 EBADF (Bad file descriptor) [pid 5311] close(18) = -1 EBADF (Bad file descriptor) [pid 5311] close(19) = -1 EBADF (Bad file descriptor) [pid 5311] close(20) = -1 EBADF (Bad file descriptor) [pid 5311] close(21) = -1 EBADF (Bad file descriptor) [pid 5311] close(22) = -1 EBADF (Bad file descriptor) [pid 5311] close(23) = -1 EBADF (Bad file descriptor) [pid 5311] close(24) = -1 EBADF (Bad file descriptor) [pid 5311] close(25) = -1 EBADF (Bad file descriptor) [pid 5311] close(26) = -1 EBADF (Bad file descriptor) [pid 5311] close(27) = -1 EBADF (Bad file descriptor) [pid 5311] close(28) = -1 EBADF (Bad file descriptor) [pid 5311] close(29) = -1 EBADF (Bad file descriptor) [pid 5311] exit_group(0 [pid 5329] <... futex resumed>) = ? [pid 5312] <... futex resumed>) = ? [pid 5311] <... exit_group resumed>) = ? [pid 5329] +++ exited with 0 +++ [pid 5312] +++ exited with 0 +++ [pid 5311] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./15/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./15/cgroup.cpu") = 0 [pid 5007] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./15/binderfs") = 0 [pid 5007] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./15/file0") = 0 [pid 5007] umount2("./15/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./15/cgroup") = 0 [pid 5007] umount2("./15/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./15/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./15") = 0 [pid 5007] mkdir("./16", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5330 attached [pid 5330] set_robust_list(0x5555571235e0, 24) = 0 [pid 5330] chdir("./16") = 0 [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5330] setpgid(0, 0) = 0 [pid 5330] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5330] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5330] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5330] write(3, "1000", 4 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 50 [pid 5330] <... write resumed>) = 4 [pid 5330] close(3) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5330] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5331 attached [pid 5331] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5331] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... clone resumed>, parent_tid=[51], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 51 [pid 5330] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5331] memfd_create("syzkaller", 0 [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5331] <... memfd_create resumed>) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5331] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5331] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5331] close(3) = 0 [pid 5331] mkdir("./file0", 0777) = 0 [ 93.049989][ T5331] loop0: detected capacity change from 0 to 32768 [ 93.061038][ T5331] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5331) [ 93.078700][ T5331] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.087577][ T5331] BTRFS info (device loop0): using free space tree [pid 5331] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./file0") = 0 [pid 5331] ioctl(4, LOOP_CLR_FD) = 0 [pid 5331] close(4) = 0 [pid 5331] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5331] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] <... futex resumed>) = 0 [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5331] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5331] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5330] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.109040][ T5331] BTRFS info (device loop0): enabling ssd optimizations [ 93.116211][ T5331] BTRFS info (device loop0): auto enabling async discard [ 93.153767][ T5331] BTRFS info (device loop0): balance: start -s [ 93.163050][ T5331] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5330] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5330] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5348 attached [pid 5348] set_robust_list(0x7fd089ba69e0, 24 [pid 5330] <... clone resumed>, parent_tid=[52], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 52 [pid 5348] <... set_robust_list resumed>) = 0 [pid 5330] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] openat(AT_FDCWD, ".", O_RDONLY [pid 5330] <... futex resumed>) = 0 [pid 5348] <... openat resumed>) = 5 [pid 5330] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5348] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5348] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5330] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5331] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.200464][ T5331] BTRFS info (device loop0): balance: ended with status: 0 [pid 5331] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5348] <... ioctl resumed>) = 0 [pid 5348] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5348] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] close(3) = 0 [pid 5330] close(4) = 0 [pid 5330] close(5) = 0 [pid 5330] close(6) = -1 EBADF (Bad file descriptor) [pid 5330] close(7) = -1 EBADF (Bad file descriptor) [pid 5330] close(8) = -1 EBADF (Bad file descriptor) [pid 5330] close(9) = -1 EBADF (Bad file descriptor) [pid 5330] close(10) = -1 EBADF (Bad file descriptor) [pid 5330] close(11) = -1 EBADF (Bad file descriptor) [pid 5330] close(12) = -1 EBADF (Bad file descriptor) [pid 5330] close(13) = -1 EBADF (Bad file descriptor) [pid 5330] close(14) = -1 EBADF (Bad file descriptor) [pid 5330] close(15) = -1 EBADF (Bad file descriptor) [pid 5330] close(16) = -1 EBADF (Bad file descriptor) [pid 5330] close(17) = -1 EBADF (Bad file descriptor) [pid 5330] close(18) = -1 EBADF (Bad file descriptor) [pid 5330] close(19) = -1 EBADF (Bad file descriptor) [pid 5330] close(20) = -1 EBADF (Bad file descriptor) [pid 5330] close(21) = -1 EBADF (Bad file descriptor) [pid 5330] close(22) = -1 EBADF (Bad file descriptor) [pid 5330] close(23) = -1 EBADF (Bad file descriptor) [pid 5330] close(24) = -1 EBADF (Bad file descriptor) [pid 5330] close(25) = -1 EBADF (Bad file descriptor) [pid 5330] close(26) = -1 EBADF (Bad file descriptor) [pid 5330] close(27) = -1 EBADF (Bad file descriptor) [pid 5330] close(28) = -1 EBADF (Bad file descriptor) [pid 5330] close(29) = -1 EBADF (Bad file descriptor) [pid 5330] exit_group(0 [pid 5348] <... futex resumed>) = ? [pid 5331] <... futex resumed>) = ? [pid 5330] <... exit_group resumed>) = ? [pid 5348] +++ exited with 0 +++ [pid 5331] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./16/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./16/cgroup.cpu") = 0 [pid 5007] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./16/binderfs") = 0 [pid 5007] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./16/file0") = 0 [pid 5007] umount2("./16/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./16/cgroup") = 0 [pid 5007] umount2("./16/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./16/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./16") = 0 [pid 5007] mkdir("./17", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5349 attached [pid 5349] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 53 [pid 5349] <... set_robust_list resumed>) = 0 [pid 5349] chdir("./17") = 0 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5349] setpgid(0, 0) = 0 [pid 5349] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5349] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5349] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5349] write(3, "1000", 4) = 4 [pid 5349] close(3) = 0 [pid 5349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5349] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5349] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5350 attached , parent_tid=[54], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 54 [pid 5350] set_robust_list(0x7fd090fc79e0, 24 [pid 5349] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... set_robust_list resumed>) = 0 [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5350] memfd_create("syzkaller", 0) = 3 [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5350] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5350] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5350] close(3) = 0 [pid 5350] mkdir("./file0", 0777) = 0 [ 93.706359][ T5350] loop0: detected capacity change from 0 to 32768 [ 93.717950][ T5350] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5350) [ 93.734579][ T5350] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.743688][ T5350] BTRFS info (device loop0): using free space tree [pid 5350] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5350] chdir("./file0") = 0 [pid 5350] ioctl(4, LOOP_CLR_FD) = 0 [pid 5350] close(4) = 0 [pid 5350] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5350] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5349] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... openat resumed>) = 4 [pid 5350] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = 0 [pid 5350] <... futex resumed>) = 1 [pid 5350] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5349] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.763708][ T5350] BTRFS info (device loop0): enabling ssd optimizations [ 93.770898][ T5350] BTRFS info (device loop0): auto enabling async discard [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5349] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [ 93.822620][ T5350] BTRFS info (device loop0): balance: start -s [ 93.831915][ T5350] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5349] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5349] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5367 attached [pid 5367] set_robust_list(0x7fd089ba69e0, 24 [pid 5349] <... clone resumed>, parent_tid=[55], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 55 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5349] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] openat(AT_FDCWD, ".", O_RDONLY [pid 5349] <... futex resumed>) = 0 [pid 5367] <... openat resumed>) = 5 [pid 5349] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5367] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5349] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5350] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.875371][ T5350] BTRFS info (device loop0): balance: ended with status: 0 [pid 5350] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5367] <... ioctl resumed>) = 0 [pid 5367] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] close(3 [pid 5367] <... futex resumed>) = 0 [pid 5349] <... close resumed>) = 0 [pid 5349] close(4 [pid 5367] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... close resumed>) = 0 [pid 5349] close(5) = 0 [pid 5349] close(6) = -1 EBADF (Bad file descriptor) [pid 5349] close(7) = -1 EBADF (Bad file descriptor) [pid 5349] close(8) = -1 EBADF (Bad file descriptor) [pid 5349] close(9) = -1 EBADF (Bad file descriptor) [pid 5349] close(10) = -1 EBADF (Bad file descriptor) [pid 5349] close(11) = -1 EBADF (Bad file descriptor) [pid 5349] close(12) = -1 EBADF (Bad file descriptor) [pid 5349] close(13) = -1 EBADF (Bad file descriptor) [pid 5349] close(14) = -1 EBADF (Bad file descriptor) [pid 5349] close(15) = -1 EBADF (Bad file descriptor) [pid 5349] close(16) = -1 EBADF (Bad file descriptor) [pid 5349] close(17) = -1 EBADF (Bad file descriptor) [pid 5349] close(18) = -1 EBADF (Bad file descriptor) [pid 5349] close(19) = -1 EBADF (Bad file descriptor) [pid 5349] close(20) = -1 EBADF (Bad file descriptor) [pid 5349] close(21) = -1 EBADF (Bad file descriptor) [pid 5349] close(22) = -1 EBADF (Bad file descriptor) [pid 5349] close(23) = -1 EBADF (Bad file descriptor) [pid 5349] close(24) = -1 EBADF (Bad file descriptor) [pid 5349] close(25) = -1 EBADF (Bad file descriptor) [pid 5349] close(26) = -1 EBADF (Bad file descriptor) [pid 5349] close(27) = -1 EBADF (Bad file descriptor) [pid 5349] close(28) = -1 EBADF (Bad file descriptor) [pid 5349] close(29) = -1 EBADF (Bad file descriptor) [pid 5349] exit_group(0 [pid 5367] <... futex resumed>) = ? [pid 5350] <... futex resumed>) = ? [pid 5349] <... exit_group resumed>) = ? [pid 5367] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 5349] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./17/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./17/cgroup.cpu") = 0 [pid 5007] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./17/binderfs") = 0 [pid 5007] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./17/file0") = 0 [pid 5007] umount2("./17/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./17/cgroup") = 0 [pid 5007] umount2("./17/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./17/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./17") = 0 [pid 5007] mkdir("./18", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 56 ./strace-static-x86_64: Process 5368 attached [pid 5368] set_robust_list(0x5555571235e0, 24) = 0 [pid 5368] chdir("./18") = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5368] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5368] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5368] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[57], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 57 [pid 5368] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5369 attached [pid 5369] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5369] memfd_create("syzkaller", 0) = 3 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5369] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5369] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5369] close(3) = 0 [pid 5369] mkdir("./file0", 0777) = 0 [ 94.387059][ T5369] loop0: detected capacity change from 0 to 32768 [ 94.398886][ T5369] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5369) [ 94.417863][ T5369] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 94.426980][ T5369] BTRFS info (device loop0): using free space tree [pid 5369] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5369] chdir("./file0") = 0 [pid 5369] ioctl(4, LOOP_CLR_FD) = 0 [pid 5369] close(4) = 0 [pid 5369] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... futex resumed>) = 1 [pid 5369] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5369] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... futex resumed>) = 1 [ 94.448229][ T5369] BTRFS info (device loop0): enabling ssd optimizations [ 94.455294][ T5369] BTRFS info (device loop0): auto enabling async discard [pid 5369] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5368] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5368] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5386 attached [pid 5386] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5386] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... clone resumed>, parent_tid=[58], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 58 [pid 5368] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... futex resumed>) = 0 [pid 5386] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5386] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... futex resumed>) = 1 [ 94.498149][ T5369] BTRFS info (device loop0): balance: start -s [ 94.508995][ T5369] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5386] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 94.591816][ T5369] BTRFS info (device loop0): balance: ended with status: 0 [pid 5386] <... ioctl resumed>) = 0 [pid 5369] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5369] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] <... futex resumed>) = 0 [pid 5368] close(3) = 0 [pid 5368] close(4 [pid 5386] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... close resumed>) = 0 [pid 5368] close(5) = 0 [pid 5368] close(6) = -1 EBADF (Bad file descriptor) [pid 5368] close(7) = -1 EBADF (Bad file descriptor) [pid 5368] close(8) = -1 EBADF (Bad file descriptor) [pid 5368] close(9) = -1 EBADF (Bad file descriptor) [pid 5368] close(10) = -1 EBADF (Bad file descriptor) [pid 5368] close(11) = -1 EBADF (Bad file descriptor) [pid 5368] close(12) = -1 EBADF (Bad file descriptor) [pid 5368] close(13) = -1 EBADF (Bad file descriptor) [pid 5368] close(14) = -1 EBADF (Bad file descriptor) [pid 5368] close(15) = -1 EBADF (Bad file descriptor) [pid 5368] close(16) = -1 EBADF (Bad file descriptor) [pid 5368] close(17) = -1 EBADF (Bad file descriptor) [pid 5368] close(18) = -1 EBADF (Bad file descriptor) [pid 5368] close(19) = -1 EBADF (Bad file descriptor) [pid 5368] close(20) = -1 EBADF (Bad file descriptor) [pid 5368] close(21) = -1 EBADF (Bad file descriptor) [pid 5368] close(22) = -1 EBADF (Bad file descriptor) [pid 5368] close(23) = -1 EBADF (Bad file descriptor) [pid 5368] close(24) = -1 EBADF (Bad file descriptor) [pid 5368] close(25) = -1 EBADF (Bad file descriptor) [pid 5368] close(26) = -1 EBADF (Bad file descriptor) [pid 5368] close(27) = -1 EBADF (Bad file descriptor) [pid 5368] close(28) = -1 EBADF (Bad file descriptor) [pid 5368] close(29) = -1 EBADF (Bad file descriptor) [pid 5368] exit_group(0 [pid 5386] <... futex resumed>) = ? [pid 5369] <... futex resumed>) = ? [pid 5368] <... exit_group resumed>) = ? [pid 5386] +++ exited with 0 +++ [pid 5369] +++ exited with 0 +++ [pid 5368] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./18/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./18/cgroup.cpu") = 0 [pid 5007] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./18/binderfs") = 0 [pid 5007] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./18/file0") = 0 [pid 5007] umount2("./18/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./18/cgroup") = 0 [pid 5007] umount2("./18/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./18/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./18") = 0 [pid 5007] mkdir("./19", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 59 ./strace-static-x86_64: Process 5387 attached [pid 5387] set_robust_list(0x5555571235e0, 24) = 0 [pid 5387] chdir("./19") = 0 [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5387] setpgid(0, 0) = 0 [pid 5387] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5387] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5387] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5387] write(3, "1000", 4) = 4 [pid 5387] close(3) = 0 [pid 5387] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5387] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5387] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[60], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 60 [pid 5387] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5388] memfd_create("syzkaller", 0) = 3 [pid 5388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5388] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5388] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5388] close(3) = 0 [pid 5388] mkdir("./file0", 0777) = 0 [ 95.072261][ T5388] loop0: detected capacity change from 0 to 32768 [ 95.083829][ T5388] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5388) [ 95.101456][ T5388] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.110317][ T5388] BTRFS info (device loop0): using free space tree [pid 5388] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5388] chdir("./file0") = 0 [pid 5388] ioctl(4, LOOP_CLR_FD) = 0 [pid 5388] close(4) = 0 [pid 5388] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] <... futex resumed>) = 0 [pid 5387] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5387] <... futex resumed>) = 0 [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... openat resumed>) = 4 [pid 5388] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] <... futex resumed>) = 0 [pid 5388] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5387] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.132106][ T5388] BTRFS info (device loop0): enabling ssd optimizations [ 95.139627][ T5388] BTRFS info (device loop0): auto enabling async discard [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5387] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5387] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5387] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5405 attached , parent_tid=[61], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 61 [pid 5405] set_robust_list(0x7fd089ba69e0, 24 [pid 5387] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] <... set_robust_list resumed>) = 0 [pid 5387] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5405] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] <... futex resumed>) = 0 [pid 5405] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5387] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5388] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.182316][ T5388] BTRFS info (device loop0): balance: start -s [ 95.190580][ T5388] BTRFS info (device loop0): relocating block group 1048576 flags system [ 95.221598][ T5388] BTRFS info (device loop0): balance: ended with status: 0 [pid 5388] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5387] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5405] <... ioctl resumed>) = 0 [pid 5405] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] close(3 [pid 5405] <... futex resumed>) = 0 [pid 5387] <... close resumed>) = 0 [pid 5405] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5387] close(4) = 0 [pid 5387] close(5) = 0 [pid 5387] close(6) = -1 EBADF (Bad file descriptor) [pid 5387] close(7) = -1 EBADF (Bad file descriptor) [pid 5387] close(8) = -1 EBADF (Bad file descriptor) [pid 5387] close(9) = -1 EBADF (Bad file descriptor) [pid 5387] close(10) = -1 EBADF (Bad file descriptor) [pid 5387] close(11) = -1 EBADF (Bad file descriptor) [pid 5387] close(12) = -1 EBADF (Bad file descriptor) [pid 5387] close(13) = -1 EBADF (Bad file descriptor) [pid 5387] close(14) = -1 EBADF (Bad file descriptor) [pid 5387] close(15) = -1 EBADF (Bad file descriptor) [pid 5387] close(16) = -1 EBADF (Bad file descriptor) [pid 5387] close(17) = -1 EBADF (Bad file descriptor) [pid 5387] close(18) = -1 EBADF (Bad file descriptor) [pid 5387] close(19) = -1 EBADF (Bad file descriptor) [pid 5387] close(20) = -1 EBADF (Bad file descriptor) [pid 5387] close(21) = -1 EBADF (Bad file descriptor) [pid 5387] close(22) = -1 EBADF (Bad file descriptor) [pid 5387] close(23) = -1 EBADF (Bad file descriptor) [pid 5387] close(24) = -1 EBADF (Bad file descriptor) [pid 5387] close(25) = -1 EBADF (Bad file descriptor) [pid 5387] close(26) = -1 EBADF (Bad file descriptor) [pid 5387] close(27) = -1 EBADF (Bad file descriptor) [pid 5387] close(28) = -1 EBADF (Bad file descriptor) [pid 5387] close(29) = -1 EBADF (Bad file descriptor) [pid 5387] exit_group(0 [pid 5388] <... futex resumed>) = ? [pid 5387] <... exit_group resumed>) = ? [pid 5388] +++ exited with 0 +++ [pid 5405] <... futex resumed>) = ? [pid 5405] +++ exited with 0 +++ [pid 5387] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./19/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./19/cgroup.cpu") = 0 [pid 5007] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./19/binderfs") = 0 [pid 5007] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./19/file0") = 0 [pid 5007] umount2("./19/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./19/cgroup") = 0 [pid 5007] umount2("./19/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./19/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./19") = 0 [pid 5007] mkdir("./20", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5406 attached [pid 5406] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 62 [pid 5406] <... set_robust_list resumed>) = 0 [pid 5406] chdir("./20") = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5406] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5406] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5406] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5406] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5407 attached , parent_tid=[63], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 63 [pid 5407] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5407] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5407] <... futex resumed>) = 0 [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5407] memfd_create("syzkaller", 0) = 3 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5407] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5407] close(3) = 0 [pid 5407] mkdir("./file0", 0777) = 0 [ 95.767355][ T5407] loop0: detected capacity change from 0 to 32768 [ 95.777849][ T5407] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5407) [ 95.794363][ T5407] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.803674][ T5407] BTRFS info (device loop0): using free space tree [pid 5407] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5407] chdir("./file0") = 0 [pid 5407] ioctl(4, LOOP_CLR_FD) = 0 [pid 5407] close(4) = 0 [pid 5407] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5406] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... openat resumed>) = 4 [pid 5407] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5406] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.824842][ T5407] BTRFS info (device loop0): enabling ssd optimizations [ 95.832259][ T5407] BTRFS info (device loop0): auto enabling async discard [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5406] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5406] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5424 attached , parent_tid=[64], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 64 [pid 5424] set_robust_list(0x7fd089ba69e0, 24 [pid 5406] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5424] <... set_robust_list resumed>) = 0 [pid 5424] openat(AT_FDCWD, ".", O_RDONLY [pid 5406] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... openat resumed>) = 5 [pid 5424] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = 0 [pid 5424] <... futex resumed>) = 1 [ 95.873323][ T5407] BTRFS info (device loop0): balance: start -s [ 95.881579][ T5407] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5406] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 95.925021][ T5407] BTRFS info (device loop0): balance: ended with status: 0 [pid 5407] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5407] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5407] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] <... ioctl resumed>) = 0 [pid 5424] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5424] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] close(3) = 0 [pid 5406] close(4) = 0 [pid 5406] close(5) = 0 [pid 5406] close(6) = -1 EBADF (Bad file descriptor) [pid 5406] close(7) = -1 EBADF (Bad file descriptor) [pid 5406] close(8) = -1 EBADF (Bad file descriptor) [pid 5406] close(9) = -1 EBADF (Bad file descriptor) [pid 5406] close(10) = -1 EBADF (Bad file descriptor) [pid 5406] close(11) = -1 EBADF (Bad file descriptor) [pid 5406] close(12) = -1 EBADF (Bad file descriptor) [pid 5406] close(13) = -1 EBADF (Bad file descriptor) [pid 5406] close(14) = -1 EBADF (Bad file descriptor) [pid 5406] close(15) = -1 EBADF (Bad file descriptor) [pid 5406] close(16) = -1 EBADF (Bad file descriptor) [pid 5406] close(17) = -1 EBADF (Bad file descriptor) [pid 5406] close(18) = -1 EBADF (Bad file descriptor) [pid 5406] close(19) = -1 EBADF (Bad file descriptor) [pid 5406] close(20) = -1 EBADF (Bad file descriptor) [pid 5406] close(21) = -1 EBADF (Bad file descriptor) [pid 5406] close(22) = -1 EBADF (Bad file descriptor) [pid 5406] close(23) = -1 EBADF (Bad file descriptor) [pid 5406] close(24) = -1 EBADF (Bad file descriptor) [pid 5406] close(25) = -1 EBADF (Bad file descriptor) [pid 5406] close(26) = -1 EBADF (Bad file descriptor) [pid 5406] close(27) = -1 EBADF (Bad file descriptor) [pid 5406] close(28) = -1 EBADF (Bad file descriptor) [pid 5406] close(29) = -1 EBADF (Bad file descriptor) [pid 5406] exit_group(0 [pid 5424] <... futex resumed>) = ? [pid 5407] <... futex resumed>) = ? [pid 5406] <... exit_group resumed>) = ? [pid 5424] +++ exited with 0 +++ [pid 5407] +++ exited with 0 +++ [pid 5406] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./20/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./20/cgroup.cpu") = 0 [pid 5007] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./20/binderfs") = 0 [pid 5007] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./20/file0") = 0 [pid 5007] umount2("./20/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./20/cgroup") = 0 [pid 5007] umount2("./20/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./20/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./20") = 0 [pid 5007] mkdir("./21", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 65 ./strace-static-x86_64: Process 5425 attached [pid 5425] set_robust_list(0x5555571235e0, 24) = 0 [pid 5425] chdir("./21") = 0 [pid 5425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5425] setpgid(0, 0) = 0 [pid 5425] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5425] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5425] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5425] write(3, "1000", 4) = 4 [pid 5425] close(3) = 0 [pid 5425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5425] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5425] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5426 attached , parent_tid=[66], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 66 [pid 5426] set_robust_list(0x7fd090fc79e0, 24 [pid 5425] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... set_robust_list resumed>) = 0 [pid 5425] <... futex resumed>) = 0 [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5426] memfd_create("syzkaller", 0) = 3 [pid 5426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5426] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5426] close(3) = 0 [pid 5426] mkdir("./file0", 0777) = 0 [ 96.432358][ T5426] loop0: detected capacity change from 0 to 32768 [ 96.443669][ T5426] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5426) [ 96.460693][ T5426] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 96.469540][ T5426] BTRFS info (device loop0): using free space tree [pid 5426] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5426] chdir("./file0") = 0 [pid 5426] ioctl(4, LOOP_CLR_FD) = 0 [pid 5426] close(4) = 0 [pid 5426] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5425] <... futex resumed>) = 0 [pid 5426] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5425] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5426] <... openat resumed>) = 4 [pid 5426] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5425] <... futex resumed>) = 0 [pid 5426] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5425] <... futex resumed>) = 0 [pid 5426] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 96.489286][ T5426] BTRFS info (device loop0): enabling ssd optimizations [ 96.496680][ T5426] BTRFS info (device loop0): auto enabling async discard [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5425] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5425] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5425] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5443 attached [pid 5443] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5443] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] <... clone resumed>, parent_tid=[67], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 67 [pid 5425] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5425] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5443] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5425] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 96.541426][ T5426] BTRFS info (device loop0): balance: start -s [ 96.551290][ T5426] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5425] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5426] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5426] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 96.606012][ T5426] BTRFS info (device loop0): balance: ended with status: 0 [pid 5426] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] <... ioctl resumed>) = 0 [pid 5443] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] close(3) = 0 [pid 5425] close(4) = 0 [pid 5425] close(5) = 0 [pid 5425] close(6) = -1 EBADF (Bad file descriptor) [pid 5425] close(7) = -1 EBADF (Bad file descriptor) [pid 5425] close(8) = -1 EBADF (Bad file descriptor) [pid 5425] close(9) = -1 EBADF (Bad file descriptor) [pid 5425] close(10) = -1 EBADF (Bad file descriptor) [pid 5425] close(11) = -1 EBADF (Bad file descriptor) [pid 5425] close(12) = -1 EBADF (Bad file descriptor) [pid 5425] close(13) = -1 EBADF (Bad file descriptor) [pid 5425] close(14) = -1 EBADF (Bad file descriptor) [pid 5425] close(15) = -1 EBADF (Bad file descriptor) [pid 5425] close(16) = -1 EBADF (Bad file descriptor) [pid 5425] close(17) = -1 EBADF (Bad file descriptor) [pid 5425] close(18) = -1 EBADF (Bad file descriptor) [pid 5425] close(19) = -1 EBADF (Bad file descriptor) [pid 5425] close(20) = -1 EBADF (Bad file descriptor) [pid 5425] close(21) = -1 EBADF (Bad file descriptor) [pid 5425] close(22) = -1 EBADF (Bad file descriptor) [pid 5425] close(23) = -1 EBADF (Bad file descriptor) [pid 5425] close(24) = -1 EBADF (Bad file descriptor) [pid 5425] close(25) = -1 EBADF (Bad file descriptor) [pid 5425] close(26) = -1 EBADF (Bad file descriptor) [pid 5425] close(27) = -1 EBADF (Bad file descriptor) [pid 5425] close(28) = -1 EBADF (Bad file descriptor) [pid 5425] close(29) = -1 EBADF (Bad file descriptor) [pid 5425] exit_group(0 [pid 5443] <... futex resumed>) = ? [pid 5426] <... futex resumed>) = ? [pid 5425] <... exit_group resumed>) = ? [pid 5443] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 5425] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./21/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./21/cgroup.cpu") = 0 [pid 5007] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./21/binderfs") = 0 [pid 5007] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./21/file0") = 0 [pid 5007] umount2("./21/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./21/cgroup") = 0 [pid 5007] umount2("./21/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./21/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./21") = 0 [pid 5007] mkdir("./22", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5444 attached [pid 5444] set_robust_list(0x5555571235e0, 24) = 0 [pid 5444] chdir("./22" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 68 [pid 5444] <... chdir resumed>) = 0 [pid 5444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5444] setpgid(0, 0) = 0 [pid 5444] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5444] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5444] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5444] write(3, "1000", 4) = 4 [pid 5444] close(3) = 0 [pid 5444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5444] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5444] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5445 attached [pid 5445] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] <... clone resumed>, parent_tid=[69], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 69 [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5444] <... futex resumed>) = 1 [pid 5445] memfd_create("syzkaller", 0 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5445] <... memfd_create resumed>) = 3 [pid 5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5445] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5445] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5445] close(3) = 0 [pid 5445] mkdir("./file0", 0777) = 0 [ 97.121243][ T5445] loop0: detected capacity change from 0 to 32768 [ 97.132506][ T5445] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5445) [ 97.149596][ T5445] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 97.158921][ T5445] BTRFS info (device loop0): using free space tree [pid 5445] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5445] chdir("./file0") = 0 [pid 5445] ioctl(4, LOOP_CLR_FD) = 0 [pid 5445] close(4) = 0 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5445] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] <... openat resumed>) = 4 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5444] <... futex resumed>) = 0 [pid 5445] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 97.178556][ T5445] BTRFS info (device loop0): enabling ssd optimizations [ 97.185716][ T5445] BTRFS info (device loop0): auto enabling async discard [ 97.236796][ T5445] BTRFS info (device loop0): balance: start -s [ 97.245828][ T5445] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5444] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5444] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5444] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[70], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 70 [pid 5444] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5462 attached [pid 5462] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5462] openat(AT_FDCWD, ".", O_RDONLY [pid 5445] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5462] <... openat resumed>) = 5 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5462] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = 0 [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] <... futex resumed>) = 0 [pid 5445] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5462] <... futex resumed>) = 1 [ 97.279649][ T5445] BTRFS info (device loop0): balance: ended with status: 0 [pid 5462] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5445] <... ioctl resumed>) = 0 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] close(3 [pid 5445] <... futex resumed>) = 0 [pid 5444] <... close resumed>) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] close(4) = 0 [pid 5444] close(5) = 0 [pid 5444] close(6) = -1 EBADF (Bad file descriptor) [pid 5444] close(7) = -1 EBADF (Bad file descriptor) [pid 5444] close(8) = -1 EBADF (Bad file descriptor) [pid 5444] close(9) = -1 EBADF (Bad file descriptor) [pid 5444] close(10) = -1 EBADF (Bad file descriptor) [pid 5444] close(11) = -1 EBADF (Bad file descriptor) [pid 5444] close(12) = -1 EBADF (Bad file descriptor) [pid 5444] close(13) = -1 EBADF (Bad file descriptor) [pid 5444] close(14) = -1 EBADF (Bad file descriptor) [pid 5444] close(15) = -1 EBADF (Bad file descriptor) [pid 5444] close(16) = -1 EBADF (Bad file descriptor) [pid 5444] close(17) = -1 EBADF (Bad file descriptor) [pid 5444] close(18) = -1 EBADF (Bad file descriptor) [pid 5444] close(19) = -1 EBADF (Bad file descriptor) [pid 5444] close(20) = -1 EBADF (Bad file descriptor) [pid 5444] close(21) = -1 EBADF (Bad file descriptor) [pid 5444] close(22) = -1 EBADF (Bad file descriptor) [pid 5444] close(23) = -1 EBADF (Bad file descriptor) [pid 5444] close(24) = -1 EBADF (Bad file descriptor) [pid 5444] close(25) = -1 EBADF (Bad file descriptor) [pid 5444] close(26) = -1 EBADF (Bad file descriptor) [pid 5444] close(27) = -1 EBADF (Bad file descriptor) [pid 5444] close(28) = -1 EBADF (Bad file descriptor) [pid 5444] close(29) = -1 EBADF (Bad file descriptor) [pid 5444] exit_group(0 [pid 5462] <... futex resumed>) = ? [pid 5445] <... futex resumed>) = ? [pid 5444] <... exit_group resumed>) = ? [pid 5462] +++ exited with 0 +++ [pid 5445] +++ exited with 0 +++ [pid 5444] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./22/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./22/cgroup.cpu") = 0 [pid 5007] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./22/binderfs") = 0 [pid 5007] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./22/file0") = 0 [pid 5007] umount2("./22/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./22/cgroup") = 0 [pid 5007] umount2("./22/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./22/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./22") = 0 [pid 5007] mkdir("./23", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5463 attached [pid 5463] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 71 [pid 5463] <... set_robust_list resumed>) = 0 [pid 5463] chdir("./23") = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5463] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5463] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5463] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5463] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5464 attached [pid 5464] set_robust_list(0x7fd090fc79e0, 24 [pid 5463] <... clone resumed>, parent_tid=[72], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 72 [pid 5464] <... set_robust_list resumed>) = 0 [pid 5463] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5464] memfd_create("syzkaller", 0) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5464] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5464] close(3) = 0 [pid 5464] mkdir("./file0", 0777) = 0 [ 97.802342][ T5464] loop0: detected capacity change from 0 to 32768 [ 97.813449][ T5464] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5464) [ 97.830667][ T5464] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 97.839868][ T5464] BTRFS info (device loop0): using free space tree [pid 5464] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5464] chdir("./file0") = 0 [pid 5464] ioctl(4, LOOP_CLR_FD) = 0 [pid 5464] close(4) = 0 [pid 5464] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5464] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = 0 [pid 5463] <... futex resumed>) = 1 [pid 5464] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... openat resumed>) = 4 [pid 5464] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5464] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5463] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 97.860014][ T5464] BTRFS info (device loop0): enabling ssd optimizations [ 97.867281][ T5464] BTRFS info (device loop0): auto enabling async discard [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5463] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5463] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5481] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... clone resumed>, parent_tid=[73], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 73 [pid 5463] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5481] <... futex resumed>) = 0 [pid 5481] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5481] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5463] <... futex resumed>) = 0 [ 97.915780][ T5464] BTRFS info (device loop0): balance: start -s [ 97.924103][ T5464] BTRFS info (device loop0): relocating block group 1048576 flags system [ 97.955113][ T5464] BTRFS info (device loop0): balance: ended with status: 0 [pid 5463] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5464] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5464] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] <... ioctl resumed>) = 0 [pid 5481] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] close(3 [pid 5481] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... close resumed>) = 0 [pid 5463] close(4) = 0 [pid 5463] close(5) = 0 [pid 5463] close(6) = -1 EBADF (Bad file descriptor) [pid 5463] close(7) = -1 EBADF (Bad file descriptor) [pid 5463] close(8) = -1 EBADF (Bad file descriptor) [pid 5463] close(9) = -1 EBADF (Bad file descriptor) [pid 5463] close(10) = -1 EBADF (Bad file descriptor) [pid 5463] close(11) = -1 EBADF (Bad file descriptor) [pid 5463] close(12) = -1 EBADF (Bad file descriptor) [pid 5463] close(13) = -1 EBADF (Bad file descriptor) [pid 5463] close(14) = -1 EBADF (Bad file descriptor) [pid 5463] close(15) = -1 EBADF (Bad file descriptor) [pid 5463] close(16) = -1 EBADF (Bad file descriptor) [pid 5463] close(17) = -1 EBADF (Bad file descriptor) [pid 5463] close(18) = -1 EBADF (Bad file descriptor) [pid 5463] close(19) = -1 EBADF (Bad file descriptor) [pid 5463] close(20) = -1 EBADF (Bad file descriptor) [pid 5463] close(21) = -1 EBADF (Bad file descriptor) [pid 5463] close(22) = -1 EBADF (Bad file descriptor) [pid 5463] close(23) = -1 EBADF (Bad file descriptor) [pid 5463] close(24) = -1 EBADF (Bad file descriptor) [pid 5463] close(25) = -1 EBADF (Bad file descriptor) [pid 5463] close(26) = -1 EBADF (Bad file descriptor) [pid 5463] close(27) = -1 EBADF (Bad file descriptor) [pid 5463] close(28) = -1 EBADF (Bad file descriptor) [pid 5463] close(29) = -1 EBADF (Bad file descriptor) [pid 5463] exit_group(0 [pid 5481] <... futex resumed>) = ? [pid 5464] <... futex resumed>) = ? [pid 5481] +++ exited with 0 +++ [pid 5464] +++ exited with 0 +++ [pid 5463] <... exit_group resumed>) = ? [pid 5463] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./23/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./23/cgroup.cpu") = 0 [pid 5007] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./23/binderfs") = 0 [pid 5007] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./23/file0") = 0 [pid 5007] umount2("./23/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./23/cgroup") = 0 [pid 5007] umount2("./23/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./23/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./23") = 0 [pid 5007] mkdir("./24", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 74 ./strace-static-x86_64: Process 5482 attached [pid 5482] set_robust_list(0x5555571235e0, 24) = 0 [pid 5482] chdir("./24") = 0 [pid 5482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5482] setpgid(0, 0) = 0 [pid 5482] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5482] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5482] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5482] write(3, "1000", 4) = 4 [pid 5482] close(3) = 0 [pid 5482] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5482] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5482] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5483 attached [pid 5483] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... clone resumed>, parent_tid=[75], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 75 [pid 5482] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = 0 [pid 5482] <... futex resumed>) = 1 [pid 5483] memfd_create("syzkaller", 0 [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5483] <... memfd_create resumed>) = 3 [pid 5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5483] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5483] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5483] close(3) = 0 [pid 5483] mkdir("./file0", 0777) = 0 [ 98.493033][ T5483] loop0: detected capacity change from 0 to 32768 [ 98.503052][ T5483] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5483) [ 98.521381][ T5483] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 98.530921][ T5483] BTRFS info (device loop0): using free space tree [pid 5483] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5483] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5483] chdir("./file0") = 0 [pid 5483] ioctl(4, LOOP_CLR_FD) = 0 [pid 5483] close(4) = 0 [pid 5483] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5483] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] <... openat resumed>) = 4 [pid 5483] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5483] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 98.551053][ T5483] BTRFS info (device loop0): enabling ssd optimizations [ 98.558278][ T5483] BTRFS info (device loop0): auto enabling async discard [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5482] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5482] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5482] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x7fd089ba69e0, 24 [pid 5482] <... clone resumed>, parent_tid=[76], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 76 [pid 5500] <... set_robust_list resumed>) = 0 [pid 5482] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] openat(AT_FDCWD, ".", O_RDONLY [pid 5482] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... openat resumed>) = 5 [pid 5500] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 98.598662][ T5483] BTRFS info (device loop0): balance: start -s [ 98.608406][ T5483] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5500] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... futex resumed>) = 0 [pid 5482] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5500] <... futex resumed>) = 0 [pid 5482] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 98.646034][ T5483] BTRFS info (device loop0): balance: ended with status: 0 [pid 5483] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5483] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5500] <... ioctl resumed>) = 0 [pid 5500] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] close(3 [pid 5500] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... close resumed>) = 0 [pid 5482] close(4) = 0 [pid 5482] close(5) = 0 [pid 5482] close(6) = -1 EBADF (Bad file descriptor) [pid 5482] close(7) = -1 EBADF (Bad file descriptor) [pid 5482] close(8) = -1 EBADF (Bad file descriptor) [pid 5482] close(9) = -1 EBADF (Bad file descriptor) [pid 5482] close(10) = -1 EBADF (Bad file descriptor) [pid 5482] close(11) = -1 EBADF (Bad file descriptor) [pid 5482] close(12) = -1 EBADF (Bad file descriptor) [pid 5482] close(13) = -1 EBADF (Bad file descriptor) [pid 5482] close(14) = -1 EBADF (Bad file descriptor) [pid 5482] close(15) = -1 EBADF (Bad file descriptor) [pid 5482] close(16) = -1 EBADF (Bad file descriptor) [pid 5482] close(17) = -1 EBADF (Bad file descriptor) [pid 5482] close(18) = -1 EBADF (Bad file descriptor) [pid 5482] close(19) = -1 EBADF (Bad file descriptor) [pid 5482] close(20) = -1 EBADF (Bad file descriptor) [pid 5482] close(21) = -1 EBADF (Bad file descriptor) [pid 5482] close(22) = -1 EBADF (Bad file descriptor) [pid 5482] close(23) = -1 EBADF (Bad file descriptor) [pid 5482] close(24) = -1 EBADF (Bad file descriptor) [pid 5482] close(25) = -1 EBADF (Bad file descriptor) [pid 5482] close(26) = -1 EBADF (Bad file descriptor) [pid 5482] close(27) = -1 EBADF (Bad file descriptor) [pid 5482] close(28) = -1 EBADF (Bad file descriptor) [pid 5482] close(29) = -1 EBADF (Bad file descriptor) [pid 5482] exit_group(0 [pid 5483] <... futex resumed>) = ? [pid 5500] <... futex resumed>) = ? [pid 5482] <... exit_group resumed>) = ? [pid 5483] +++ exited with 0 +++ [pid 5500] +++ exited with 0 +++ [pid 5482] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./24/cgroup.cpu") = 0 [pid 5007] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./24/binderfs") = 0 [pid 5007] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./24/file0") = 0 [pid 5007] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./24/cgroup") = 0 [pid 5007] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./24/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./24") = 0 [pid 5007] mkdir("./25", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5501 attached , child_tidptr=0x5555571235d0) = 77 [pid 5501] set_robust_list(0x5555571235e0, 24) = 0 [pid 5501] chdir("./25") = 0 [pid 5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5501] setpgid(0, 0) = 0 [pid 5501] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5501] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5501] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5501] write(3, "1000", 4) = 4 [pid 5501] close(3) = 0 [pid 5501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5501] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5501] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[78], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 78 [pid 5501] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5502 attached ) = 0 [pid 5502] set_robust_list(0x7fd090fc79e0, 24 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5502] <... set_robust_list resumed>) = 0 [pid 5502] memfd_create("syzkaller", 0) = 3 [pid 5502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5502] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5502] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5502] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5502] close(3) = 0 [pid 5502] mkdir("./file0", 0777) = 0 [ 99.157817][ T5502] loop0: detected capacity change from 0 to 32768 [ 99.169084][ T5502] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5502) [ 99.186781][ T5502] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.195768][ T5502] BTRFS info (device loop0): using free space tree [pid 5502] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5502] chdir("./file0") = 0 [pid 5502] ioctl(4, LOOP_CLR_FD) = 0 [pid 5502] close(4) = 0 [pid 5502] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5502] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] <... futex resumed>) = 0 [pid 5501] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 1 [pid 5502] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... openat resumed>) = 4 [pid 5502] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5502] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 1 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 99.215661][ T5502] BTRFS info (device loop0): enabling ssd optimizations [ 99.222800][ T5502] BTRFS info (device loop0): auto enabling async discard [pid 5502] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5501] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5501] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5501] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5519 attached [pid 5519] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5501] <... clone resumed>, parent_tid=[79], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 79 [pid 5501] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] openat(AT_FDCWD, ".", O_RDONLY [pid 5501] <... futex resumed>) = 0 [pid 5501] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... openat resumed>) = 5 [pid 5519] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5519] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] <... futex resumed>) = 0 [ 99.266391][ T5502] BTRFS info (device loop0): balance: start -s [ 99.276252][ T5502] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5501] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 1 [pid 5519] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5501] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5502] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 99.319704][ T5502] BTRFS info (device loop0): balance: ended with status: 0 [pid 5519] <... ioctl resumed>) = 0 [pid 5519] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] close(3) = 0 [pid 5501] close(4) = 0 [pid 5501] close(5) = 0 [pid 5501] close(6) = -1 EBADF (Bad file descriptor) [pid 5501] close(7) = -1 EBADF (Bad file descriptor) [pid 5501] close(8) = -1 EBADF (Bad file descriptor) [pid 5501] close(9) = -1 EBADF (Bad file descriptor) [pid 5501] close(10) = -1 EBADF (Bad file descriptor) [pid 5501] close(11) = -1 EBADF (Bad file descriptor) [pid 5501] close(12) = -1 EBADF (Bad file descriptor) [pid 5501] close(13) = -1 EBADF (Bad file descriptor) [pid 5501] close(14) = -1 EBADF (Bad file descriptor) [pid 5501] close(15) = -1 EBADF (Bad file descriptor) [pid 5501] close(16) = -1 EBADF (Bad file descriptor) [pid 5501] close(17) = -1 EBADF (Bad file descriptor) [pid 5501] close(18) = -1 EBADF (Bad file descriptor) [pid 5501] close(19) = -1 EBADF (Bad file descriptor) [pid 5501] close(20) = -1 EBADF (Bad file descriptor) [pid 5501] close(21) = -1 EBADF (Bad file descriptor) [pid 5501] close(22) = -1 EBADF (Bad file descriptor) [pid 5501] close(23) = -1 EBADF (Bad file descriptor) [pid 5501] close(24) = -1 EBADF (Bad file descriptor) [pid 5501] close(25) = -1 EBADF (Bad file descriptor) [pid 5501] close(26) = -1 EBADF (Bad file descriptor) [pid 5501] close(27) = -1 EBADF (Bad file descriptor) [pid 5501] close(28) = -1 EBADF (Bad file descriptor) [pid 5501] close(29) = -1 EBADF (Bad file descriptor) [pid 5501] exit_group(0) = ? [pid 5502] <... futex resumed>) = ? [pid 5519] <... futex resumed>) = ? [pid 5519] +++ exited with 0 +++ [pid 5502] +++ exited with 0 +++ [pid 5501] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./25/cgroup.cpu") = 0 [pid 5007] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./25/binderfs") = 0 [pid 5007] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./25/file0") = 0 [pid 5007] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./25/cgroup") = 0 [pid 5007] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./25/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./25") = 0 [pid 5007] mkdir("./26", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 80 ./strace-static-x86_64: Process 5520 attached [pid 5520] set_robust_list(0x5555571235e0, 24) = 0 [pid 5520] chdir("./26") = 0 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5520] setpgid(0, 0) = 0 [pid 5520] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5520] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5520] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5520] write(3, "1000", 4) = 4 [pid 5520] close(3) = 0 [pid 5520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5520] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5521 attached [pid 5521] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5521] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] <... clone resumed>, parent_tid=[81], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 81 [pid 5520] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = 1 [pid 5521] memfd_create("syzkaller", 0 [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5521] <... memfd_create resumed>) = 3 [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5521] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5521] close(3) = 0 [pid 5521] mkdir("./file0", 0777) = 0 [ 99.834319][ T5521] loop0: detected capacity change from 0 to 32768 [ 99.846135][ T5521] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5521) [ 99.863753][ T5521] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.872595][ T5521] BTRFS info (device loop0): using free space tree [pid 5521] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5521] chdir("./file0") = 0 [pid 5521] ioctl(4, LOOP_CLR_FD) = 0 [pid 5521] close(4) = 0 [pid 5521] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5521] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5520] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... openat resumed>) = 4 [pid 5520] <... futex resumed>) = 0 [pid 5521] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5521] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5520] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.892610][ T5521] BTRFS info (device loop0): enabling ssd optimizations [ 99.899970][ T5521] BTRFS info (device loop0): auto enabling async discard [ 99.928822][ T5521] BTRFS info (device loop0): balance: start -s [ 99.938584][ T5521] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5520] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5520] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5538 attached , parent_tid=[82], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 82 [pid 5520] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5538] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5538] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5538] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5538] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5520] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.974403][ T5521] BTRFS info (device loop0): balance: ended with status: 0 [pid 5520] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5521] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5521] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] <... ioctl resumed>) = 0 [pid 5538] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] close(3) = 0 [pid 5520] close(4) = 0 [pid 5520] close(5) = 0 [pid 5520] close(6) = -1 EBADF (Bad file descriptor) [pid 5520] close(7) = -1 EBADF (Bad file descriptor) [pid 5520] close(8) = -1 EBADF (Bad file descriptor) [pid 5520] close(9) = -1 EBADF (Bad file descriptor) [pid 5520] close(10) = -1 EBADF (Bad file descriptor) [pid 5520] close(11) = -1 EBADF (Bad file descriptor) [pid 5520] close(12) = -1 EBADF (Bad file descriptor) [pid 5520] close(13) = -1 EBADF (Bad file descriptor) [pid 5520] close(14) = -1 EBADF (Bad file descriptor) [pid 5520] close(15) = -1 EBADF (Bad file descriptor) [pid 5520] close(16) = -1 EBADF (Bad file descriptor) [pid 5520] close(17) = -1 EBADF (Bad file descriptor) [pid 5520] close(18) = -1 EBADF (Bad file descriptor) [pid 5520] close(19) = -1 EBADF (Bad file descriptor) [pid 5520] close(20) = -1 EBADF (Bad file descriptor) [pid 5520] close(21) = -1 EBADF (Bad file descriptor) [pid 5520] close(22) = -1 EBADF (Bad file descriptor) [pid 5520] close(23) = -1 EBADF (Bad file descriptor) [pid 5520] close(24) = -1 EBADF (Bad file descriptor) [pid 5520] close(25) = -1 EBADF (Bad file descriptor) [pid 5520] close(26) = -1 EBADF (Bad file descriptor) [pid 5520] close(27) = -1 EBADF (Bad file descriptor) [pid 5520] close(28) = -1 EBADF (Bad file descriptor) [pid 5520] close(29) = -1 EBADF (Bad file descriptor) [pid 5520] exit_group(0 [pid 5538] <... futex resumed>) = ? [pid 5521] <... futex resumed>) = ? [pid 5520] <... exit_group resumed>) = ? [pid 5538] +++ exited with 0 +++ [pid 5521] +++ exited with 0 +++ [pid 5520] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./26/cgroup.cpu") = 0 [pid 5007] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./26/binderfs") = 0 [pid 5007] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./26/file0") = 0 [pid 5007] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./26/cgroup") = 0 [pid 5007] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./26/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./26") = 0 [pid 5007] mkdir("./27", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5539 attached , child_tidptr=0x5555571235d0) = 83 [pid 5539] set_robust_list(0x5555571235e0, 24) = 0 [pid 5539] chdir("./27") = 0 [pid 5539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5539] setpgid(0, 0) = 0 [pid 5539] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5539] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5539] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5539] write(3, "1000", 4) = 4 [pid 5539] close(3) = 0 [pid 5539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5539] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5540 attached , parent_tid=[84], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 84 [pid 5540] set_robust_list(0x7fd090fc79e0, 24 [pid 5539] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... set_robust_list resumed>) = 0 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5540] memfd_create("syzkaller", 0) = 3 [pid 5540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5540] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5540] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5540] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5540] close(3) = 0 [pid 5540] mkdir("./file0", 0777) = 0 [ 100.505562][ T5540] loop0: detected capacity change from 0 to 32768 [ 100.516268][ T5540] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5540) [ 100.531604][ T5540] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 100.540476][ T5540] BTRFS info (device loop0): using free space tree [pid 5540] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5540] chdir("./file0") = 0 [pid 5540] ioctl(4, LOOP_CLR_FD) = 0 [pid 5540] close(4) = 0 [pid 5540] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5540] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5539] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... openat resumed>) = 4 [pid 5540] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5540] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5539] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 100.562204][ T5540] BTRFS info (device loop0): enabling ssd optimizations [ 100.569456][ T5540] BTRFS info (device loop0): auto enabling async discard [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5539] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5539] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5557 attached [pid 5557] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5557] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... clone resumed>, parent_tid=[85], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 85 [pid 5539] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 5539] <... futex resumed>) = 1 [pid 5557] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5539] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5557] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5539] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5557] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5539] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [ 100.622184][ T5540] BTRFS info (device loop0): balance: start -s [ 100.631277][ T5540] BTRFS info (device loop0): relocating block group 1048576 flags system [ 100.659696][ T5540] BTRFS info (device loop0): balance: ended with status: 0 [pid 5540] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5557] <... ioctl resumed>) = 0 [pid 5557] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] close(3 [pid 5557] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... close resumed>) = 0 [pid 5539] close(4) = 0 [pid 5539] close(5) = 0 [pid 5539] close(6) = -1 EBADF (Bad file descriptor) [pid 5539] close(7) = -1 EBADF (Bad file descriptor) [pid 5539] close(8) = -1 EBADF (Bad file descriptor) [pid 5539] close(9) = -1 EBADF (Bad file descriptor) [pid 5539] close(10) = -1 EBADF (Bad file descriptor) [pid 5539] close(11) = -1 EBADF (Bad file descriptor) [pid 5539] close(12) = -1 EBADF (Bad file descriptor) [pid 5539] close(13) = -1 EBADF (Bad file descriptor) [pid 5539] close(14) = -1 EBADF (Bad file descriptor) [pid 5539] close(15) = -1 EBADF (Bad file descriptor) [pid 5539] close(16) = -1 EBADF (Bad file descriptor) [pid 5539] close(17) = -1 EBADF (Bad file descriptor) [pid 5539] close(18) = -1 EBADF (Bad file descriptor) [pid 5539] close(19) = -1 EBADF (Bad file descriptor) [pid 5539] close(20) = -1 EBADF (Bad file descriptor) [pid 5539] close(21) = -1 EBADF (Bad file descriptor) [pid 5539] close(22) = -1 EBADF (Bad file descriptor) [pid 5539] close(23) = -1 EBADF (Bad file descriptor) [pid 5539] close(24) = -1 EBADF (Bad file descriptor) [pid 5539] close(25) = -1 EBADF (Bad file descriptor) [pid 5539] close(26) = -1 EBADF (Bad file descriptor) [pid 5539] close(27) = -1 EBADF (Bad file descriptor) [pid 5539] close(28) = -1 EBADF (Bad file descriptor) [pid 5539] close(29) = -1 EBADF (Bad file descriptor) [pid 5539] exit_group(0 [pid 5557] <... futex resumed>) = ? [pid 5540] <... futex resumed>) = ? [pid 5539] <... exit_group resumed>) = ? [pid 5557] +++ exited with 0 +++ [pid 5540] +++ exited with 0 +++ [pid 5539] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./27/cgroup.cpu") = 0 [pid 5007] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./27/binderfs") = 0 [pid 5007] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./27/file0") = 0 [pid 5007] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./27/cgroup") = 0 [pid 5007] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./27/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./27") = 0 [pid 5007] mkdir("./28", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 86 ./strace-static-x86_64: Process 5558 attached [pid 5558] set_robust_list(0x5555571235e0, 24) = 0 [pid 5558] chdir("./28") = 0 [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5558] setpgid(0, 0) = 0 [pid 5558] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5558] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5558] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5558] write(3, "1000", 4) = 4 [pid 5558] close(3) = 0 [pid 5558] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5558] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5558] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[87], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 87 [pid 5558] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5559 attached [pid 5559] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5559] memfd_create("syzkaller", 0) = 3 [pid 5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5559] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5559] close(3) = 0 [pid 5559] mkdir("./file0", 0777) = 0 [ 101.177938][ T5559] loop0: detected capacity change from 0 to 32768 [ 101.190416][ T5559] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5559) [ 101.208286][ T5559] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.217323][ T5559] BTRFS info (device loop0): using free space tree [pid 5559] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5559] chdir("./file0") = 0 [pid 5559] ioctl(4, LOOP_CLR_FD) = 0 [pid 5559] close(4) = 0 [pid 5559] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5559] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5558] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] <... openat resumed>) = 4 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] <... futex resumed>) = 0 [pid 5558] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] <... futex resumed>) = 1 [ 101.238530][ T5559] BTRFS info (device loop0): enabling ssd optimizations [ 101.246006][ T5559] BTRFS info (device loop0): auto enabling async discard [ 101.270992][ T5559] BTRFS info (device loop0): balance: start -s [ 101.280788][ T5559] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5559] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5558] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5558] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5558] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5576 attached [pid 5576] set_robust_list(0x7fd089ba69e0, 24 [pid 5558] <... clone resumed>, parent_tid=[88], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 88 [pid 5576] <... set_robust_list resumed>) = 0 [pid 5558] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] openat(AT_FDCWD, ".", O_RDONLY [pid 5558] <... futex resumed>) = 0 [pid 5576] <... openat resumed>) = 5 [pid 5558] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5576] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5558] <... futex resumed>) = 0 [pid 5576] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 101.310971][ T5559] BTRFS info (device loop0): balance: ended with status: 0 [pid 5558] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5559] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5559] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5576] <... ioctl resumed>) = 0 [pid 5576] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] close(3) = 0 [pid 5558] close(4) = 0 [pid 5558] close(5) = 0 [pid 5558] close(6) = -1 EBADF (Bad file descriptor) [pid 5558] close(7) = -1 EBADF (Bad file descriptor) [pid 5558] close(8) = -1 EBADF (Bad file descriptor) [pid 5558] close(9) = -1 EBADF (Bad file descriptor) [pid 5558] close(10) = -1 EBADF (Bad file descriptor) [pid 5558] close(11) = -1 EBADF (Bad file descriptor) [pid 5558] close(12) = -1 EBADF (Bad file descriptor) [pid 5558] close(13) = -1 EBADF (Bad file descriptor) [pid 5558] close(14) = -1 EBADF (Bad file descriptor) [pid 5558] close(15) = -1 EBADF (Bad file descriptor) [pid 5558] close(16) = -1 EBADF (Bad file descriptor) [pid 5558] close(17) = -1 EBADF (Bad file descriptor) [pid 5558] close(18) = -1 EBADF (Bad file descriptor) [pid 5558] close(19) = -1 EBADF (Bad file descriptor) [pid 5558] close(20) = -1 EBADF (Bad file descriptor) [pid 5558] close(21) = -1 EBADF (Bad file descriptor) [pid 5558] close(22) = -1 EBADF (Bad file descriptor) [pid 5558] close(23) = -1 EBADF (Bad file descriptor) [pid 5558] close(24) = -1 EBADF (Bad file descriptor) [pid 5558] close(25) = -1 EBADF (Bad file descriptor) [pid 5558] close(26) = -1 EBADF (Bad file descriptor) [pid 5558] close(27) = -1 EBADF (Bad file descriptor) [pid 5558] close(28) = -1 EBADF (Bad file descriptor) [pid 5558] close(29) = -1 EBADF (Bad file descriptor) [pid 5558] exit_group(0 [pid 5576] <... futex resumed>) = ? [pid 5559] <... futex resumed>) = ? [pid 5558] <... exit_group resumed>) = ? [pid 5576] +++ exited with 0 +++ [pid 5559] +++ exited with 0 +++ [pid 5558] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./28/cgroup.cpu") = 0 [pid 5007] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./28/binderfs") = 0 [pid 5007] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./28/file0") = 0 [pid 5007] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./28/cgroup") = 0 [pid 5007] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./28/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./28") = 0 [pid 5007] mkdir("./29", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 89 ./strace-static-x86_64: Process 5577 attached [pid 5577] set_robust_list(0x5555571235e0, 24) = 0 [pid 5577] chdir("./29") = 0 [pid 5577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5577] setpgid(0, 0) = 0 [pid 5577] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5577] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5577] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5577] write(3, "1000", 4) = 4 [pid 5577] close(3) = 0 [pid 5577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5577] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[90], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 90 ./strace-static-x86_64: Process 5578 attached [pid 5578] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5578] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5578] <... futex resumed>) = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5578] memfd_create("syzkaller", 0) = 3 [pid 5578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5578] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5578] close(3) = 0 [pid 5578] mkdir("./file0", 0777) = 0 [ 101.835183][ T5578] loop0: detected capacity change from 0 to 32768 [ 101.846495][ T5578] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5578) [ 101.864254][ T5578] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.873383][ T5578] BTRFS info (device loop0): using free space tree [pid 5578] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5578] chdir("./file0") = 0 [pid 5578] ioctl(4, LOOP_CLR_FD) = 0 [pid 5578] close(4) = 0 [pid 5578] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5578] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 101.893357][ T5578] BTRFS info (device loop0): enabling ssd optimizations [ 101.900546][ T5578] BTRFS info (device loop0): auto enabling async discard [pid 5578] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5577] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5577] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[91], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 91 [pid 5577] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5595 attached [pid 5595] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5595] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5595] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 101.950223][ T5578] BTRFS info (device loop0): balance: start -s [ 101.960276][ T5578] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5577] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5577] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5577] <... futex resumed>) = 1 [pid 5595] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5577] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5578] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5578] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 102.008121][ T5578] BTRFS info (device loop0): balance: ended with status: 0 [pid 5595] <... ioctl resumed>) = 0 [pid 5595] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] close(3 [pid 5595] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] <... close resumed>) = 0 [pid 5577] close(4) = 0 [pid 5577] close(5) = 0 [pid 5577] close(6) = -1 EBADF (Bad file descriptor) [pid 5577] close(7) = -1 EBADF (Bad file descriptor) [pid 5577] close(8) = -1 EBADF (Bad file descriptor) [pid 5577] close(9) = -1 EBADF (Bad file descriptor) [pid 5577] close(10) = -1 EBADF (Bad file descriptor) [pid 5577] close(11) = -1 EBADF (Bad file descriptor) [pid 5577] close(12) = -1 EBADF (Bad file descriptor) [pid 5577] close(13) = -1 EBADF (Bad file descriptor) [pid 5577] close(14) = -1 EBADF (Bad file descriptor) [pid 5577] close(15) = -1 EBADF (Bad file descriptor) [pid 5577] close(16) = -1 EBADF (Bad file descriptor) [pid 5577] close(17) = -1 EBADF (Bad file descriptor) [pid 5577] close(18) = -1 EBADF (Bad file descriptor) [pid 5577] close(19) = -1 EBADF (Bad file descriptor) [pid 5577] close(20) = -1 EBADF (Bad file descriptor) [pid 5577] close(21) = -1 EBADF (Bad file descriptor) [pid 5577] close(22) = -1 EBADF (Bad file descriptor) [pid 5577] close(23) = -1 EBADF (Bad file descriptor) [pid 5577] close(24) = -1 EBADF (Bad file descriptor) [pid 5577] close(25) = -1 EBADF (Bad file descriptor) [pid 5577] close(26) = -1 EBADF (Bad file descriptor) [pid 5577] close(27) = -1 EBADF (Bad file descriptor) [pid 5577] close(28) = -1 EBADF (Bad file descriptor) [pid 5577] close(29) = -1 EBADF (Bad file descriptor) [pid 5577] exit_group(0 [pid 5595] <... futex resumed>) = ? [pid 5578] <... futex resumed>) = ? [pid 5595] +++ exited with 0 +++ [pid 5578] +++ exited with 0 +++ [pid 5577] <... exit_group resumed>) = ? [pid 5577] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./29/cgroup.cpu") = 0 [pid 5007] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./29/binderfs") = 0 [pid 5007] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./29/file0") = 0 [pid 5007] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./29/cgroup") = 0 [pid 5007] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./29/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./29") = 0 [pid 5007] mkdir("./30", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 92 ./strace-static-x86_64: Process 5596 attached [pid 5596] set_robust_list(0x5555571235e0, 24) = 0 [pid 5596] chdir("./30") = 0 [pid 5596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5596] setpgid(0, 0) = 0 [pid 5596] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5596] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5596] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5596] write(3, "1000", 4) = 4 [pid 5596] close(3) = 0 [pid 5596] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5596] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5596] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[93], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 93 [pid 5596] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5597 attached [pid 5597] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5597] memfd_create("syzkaller", 0) = 3 [pid 5597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5597] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5597] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5597] close(3) = 0 [pid 5597] mkdir("./file0", 0777) = 0 [ 102.532836][ T5597] loop0: detected capacity change from 0 to 32768 [ 102.543985][ T5597] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5597) [ 102.562391][ T5597] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 102.571447][ T5597] BTRFS info (device loop0): using free space tree [pid 5597] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5597] chdir("./file0") = 0 [pid 5597] ioctl(4, LOOP_CLR_FD) = 0 [pid 5597] close(4) = 0 [pid 5597] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5597] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5596] <... futex resumed>) = 0 [pid 5597] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5597] <... openat resumed>) = 4 [pid 5597] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5597] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5596] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.591522][ T5597] BTRFS info (device loop0): enabling ssd optimizations [ 102.598688][ T5597] BTRFS info (device loop0): auto enabling async discard [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5596] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.638533][ T5597] BTRFS info (device loop0): balance: start -s [ 102.648204][ T5597] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5596] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5596] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[94], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 94 [pid 5596] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5614 attached [pid 5614] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5614] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5614] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 0 [pid 5596] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... futex resumed>) = 1 [pid 5614] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5597] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5597] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.681515][ T5597] BTRFS info (device loop0): balance: ended with status: 0 [pid 5597] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... ioctl resumed>) = 0 [pid 5614] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] close(3) = 0 [pid 5596] close(4) = 0 [pid 5596] close(5) = 0 [pid 5596] close(6) = -1 EBADF (Bad file descriptor) [pid 5596] close(7) = -1 EBADF (Bad file descriptor) [pid 5596] close(8) = -1 EBADF (Bad file descriptor) [pid 5596] close(9) = -1 EBADF (Bad file descriptor) [pid 5596] close(10) = -1 EBADF (Bad file descriptor) [pid 5596] close(11) = -1 EBADF (Bad file descriptor) [pid 5596] close(12) = -1 EBADF (Bad file descriptor) [pid 5596] close(13) = -1 EBADF (Bad file descriptor) [pid 5596] close(14) = -1 EBADF (Bad file descriptor) [pid 5596] close(15) = -1 EBADF (Bad file descriptor) [pid 5596] close(16) = -1 EBADF (Bad file descriptor) [pid 5596] close(17) = -1 EBADF (Bad file descriptor) [pid 5596] close(18) = -1 EBADF (Bad file descriptor) [pid 5596] close(19) = -1 EBADF (Bad file descriptor) [pid 5596] close(20) = -1 EBADF (Bad file descriptor) [pid 5596] close(21) = -1 EBADF (Bad file descriptor) [pid 5596] close(22) = -1 EBADF (Bad file descriptor) [pid 5596] close(23) = -1 EBADF (Bad file descriptor) [pid 5596] close(24) = -1 EBADF (Bad file descriptor) [pid 5596] close(25) = -1 EBADF (Bad file descriptor) [pid 5596] close(26) = -1 EBADF (Bad file descriptor) [pid 5596] close(27) = -1 EBADF (Bad file descriptor) [pid 5596] close(28) = -1 EBADF (Bad file descriptor) [pid 5596] close(29) = -1 EBADF (Bad file descriptor) [pid 5596] exit_group(0 [pid 5614] <... futex resumed>) = ? [pid 5597] <... futex resumed>) = ? [pid 5596] <... exit_group resumed>) = ? [pid 5614] +++ exited with 0 +++ [pid 5597] +++ exited with 0 +++ [pid 5596] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./30/cgroup.cpu") = 0 [pid 5007] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./30/binderfs") = 0 [pid 5007] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./30/file0") = 0 [pid 5007] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./30/cgroup") = 0 [pid 5007] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./30/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./30") = 0 [pid 5007] mkdir("./31", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5615 attached [pid 5615] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 95 [pid 5615] chdir("./31") = 0 [pid 5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5615] setpgid(0, 0) = 0 [pid 5615] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5615] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5615] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5615] write(3, "1000", 4) = 4 [pid 5615] close(3) = 0 [pid 5615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5615] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5615] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5616 attached [pid 5616] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... clone resumed>, parent_tid=[96], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 96 [pid 5615] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5616] <... futex resumed>) = 0 [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5616] memfd_create("syzkaller", 0) = 3 [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5616] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5616] close(3) = 0 [pid 5616] mkdir("./file0", 0777) = 0 [ 103.198391][ T5616] loop0: detected capacity change from 0 to 32768 [ 103.210067][ T5616] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5616) [ 103.227060][ T5616] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.235937][ T5616] BTRFS info (device loop0): using free space tree [pid 5616] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5616] chdir("./file0") = 0 [pid 5616] ioctl(4, LOOP_CLR_FD) = 0 [pid 5616] close(4) = 0 [pid 5616] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] <... futex resumed>) = 0 [pid 5616] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5616] <... openat resumed>) = 4 [pid 5616] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] <... futex resumed>) = 0 [pid 5616] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 103.256363][ T5616] BTRFS info (device loop0): enabling ssd optimizations [ 103.263473][ T5616] BTRFS info (device loop0): auto enabling async discard [ 103.309804][ T5616] BTRFS info (device loop0): balance: start -s [ 103.319413][ T5616] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5615] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5615] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5615] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5633 attached [pid 5633] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5633] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... clone resumed>, parent_tid=[97], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 97 [pid 5615] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = 0 [pid 5633] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5633] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5633] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... futex resumed>) = 1 [pid 5615] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = 0 [pid 5615] <... futex resumed>) = 1 [pid 5633] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 103.352378][ T5616] BTRFS info (device loop0): balance: ended with status: 0 [pid 5615] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5633] <... ioctl resumed>) = 0 [pid 5633] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5633] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] close(3) = 0 [pid 5615] close(4) = 0 [pid 5615] close(5) = 0 [pid 5615] close(6) = -1 EBADF (Bad file descriptor) [pid 5615] close(7) = -1 EBADF (Bad file descriptor) [pid 5615] close(8) = -1 EBADF (Bad file descriptor) [pid 5615] close(9) = -1 EBADF (Bad file descriptor) [pid 5615] close(10) = -1 EBADF (Bad file descriptor) [pid 5615] close(11) = -1 EBADF (Bad file descriptor) [pid 5615] close(12) = -1 EBADF (Bad file descriptor) [pid 5615] close(13) = -1 EBADF (Bad file descriptor) [pid 5615] close(14) = -1 EBADF (Bad file descriptor) [pid 5615] close(15) = -1 EBADF (Bad file descriptor) [pid 5615] close(16) = -1 EBADF (Bad file descriptor) [pid 5615] close(17) = -1 EBADF (Bad file descriptor) [pid 5615] close(18) = -1 EBADF (Bad file descriptor) [pid 5615] close(19) = -1 EBADF (Bad file descriptor) [pid 5615] close(20) = -1 EBADF (Bad file descriptor) [pid 5615] close(21) = -1 EBADF (Bad file descriptor) [pid 5615] close(22) = -1 EBADF (Bad file descriptor) [pid 5615] close(23) = -1 EBADF (Bad file descriptor) [pid 5615] close(24) = -1 EBADF (Bad file descriptor) [pid 5615] close(25) = -1 EBADF (Bad file descriptor) [pid 5615] close(26) = -1 EBADF (Bad file descriptor) [pid 5615] close(27) = -1 EBADF (Bad file descriptor) [pid 5615] close(28) = -1 EBADF (Bad file descriptor) [pid 5615] close(29) = -1 EBADF (Bad file descriptor) [pid 5615] exit_group(0 [pid 5633] <... futex resumed>) = ? [pid 5616] <... futex resumed>) = ? [pid 5615] <... exit_group resumed>) = ? [pid 5633] +++ exited with 0 +++ [pid 5616] +++ exited with 0 +++ [pid 5615] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./31/cgroup.cpu") = 0 [pid 5007] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./31/binderfs") = 0 [pid 5007] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./31/file0") = 0 [pid 5007] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./31/cgroup") = 0 [pid 5007] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./31/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./31") = 0 [pid 5007] mkdir("./32", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 98 ./strace-static-x86_64: Process 5634 attached [pid 5634] set_robust_list(0x5555571235e0, 24) = 0 [pid 5634] chdir("./32") = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5634] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5634] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5634] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5634] write(3, "1000", 4) = 4 [pid 5634] close(3) = 0 [pid 5634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5634] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5634] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5635 attached [pid 5635] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5634] <... clone resumed>, parent_tid=[99], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 99 [pid 5634] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5635] memfd_create("syzkaller", 0) = 3 [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5635] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5635] close(3) = 0 [pid 5635] mkdir("./file0", 0777) = 0 [ 103.868145][ T5635] loop0: detected capacity change from 0 to 32768 [ 103.879293][ T5635] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5635) [ 103.896723][ T5635] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.905526][ T5635] BTRFS info (device loop0): using free space tree [pid 5635] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5635] chdir("./file0") = 0 [pid 5635] ioctl(4, LOOP_CLR_FD) = 0 [pid 5635] close(4) = 0 [pid 5635] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] <... futex resumed>) = 0 [pid 5634] <... futex resumed>) = 1 [pid 5635] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5635] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] <... futex resumed>) = 0 [pid 5635] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 103.924122][ T5635] BTRFS info (device loop0): enabling ssd optimizations [ 103.931314][ T5635] BTRFS info (device loop0): auto enabling async discard [ 103.977172][ T5635] BTRFS info (device loop0): balance: start -s [ 103.986720][ T5635] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5634] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5634] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5634] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[100], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 100 ./strace-static-x86_64: Process 5652 attached [pid 5652] set_robust_list(0x7fd089ba69e0, 24 [pid 5634] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] <... set_robust_list resumed>) = 0 [pid 5634] <... futex resumed>) = 0 [pid 5652] openat(AT_FDCWD, ".", O_RDONLY [pid 5634] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... openat resumed>) = 5 [pid 5652] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5635] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 104.019338][ T5635] BTRFS info (device loop0): balance: ended with status: 0 [pid 5635] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5652] <... ioctl resumed>) = 0 [pid 5652] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5634] close(3 [pid 5652] <... futex resumed>) = 0 [pid 5652] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... close resumed>) = 0 [pid 5634] close(4) = 0 [pid 5634] close(5) = 0 [pid 5634] close(6) = -1 EBADF (Bad file descriptor) [pid 5634] close(7) = -1 EBADF (Bad file descriptor) [pid 5634] close(8) = -1 EBADF (Bad file descriptor) [pid 5634] close(9) = -1 EBADF (Bad file descriptor) [pid 5634] close(10) = -1 EBADF (Bad file descriptor) [pid 5634] close(11) = -1 EBADF (Bad file descriptor) [pid 5634] close(12) = -1 EBADF (Bad file descriptor) [pid 5634] close(13) = -1 EBADF (Bad file descriptor) [pid 5634] close(14) = -1 EBADF (Bad file descriptor) [pid 5634] close(15) = -1 EBADF (Bad file descriptor) [pid 5634] close(16) = -1 EBADF (Bad file descriptor) [pid 5634] close(17) = -1 EBADF (Bad file descriptor) [pid 5634] close(18) = -1 EBADF (Bad file descriptor) [pid 5634] close(19) = -1 EBADF (Bad file descriptor) [pid 5634] close(20) = -1 EBADF (Bad file descriptor) [pid 5634] close(21) = -1 EBADF (Bad file descriptor) [pid 5634] close(22) = -1 EBADF (Bad file descriptor) [pid 5634] close(23) = -1 EBADF (Bad file descriptor) [pid 5634] close(24) = -1 EBADF (Bad file descriptor) [pid 5634] close(25) = -1 EBADF (Bad file descriptor) [pid 5634] close(26) = -1 EBADF (Bad file descriptor) [pid 5634] close(27) = -1 EBADF (Bad file descriptor) [pid 5634] close(28) = -1 EBADF (Bad file descriptor) [pid 5634] close(29) = -1 EBADF (Bad file descriptor) [pid 5634] exit_group(0 [pid 5652] <... futex resumed>) = ? [pid 5635] <... futex resumed>) = ? [pid 5634] <... exit_group resumed>) = ? [pid 5652] +++ exited with 0 +++ [pid 5635] +++ exited with 0 +++ [pid 5634] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./32/cgroup.cpu") = 0 [pid 5007] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./32/binderfs") = 0 [pid 5007] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./32/file0") = 0 [pid 5007] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./32/cgroup") = 0 [pid 5007] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./32/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./32") = 0 [pid 5007] mkdir("./33", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5655 attached [pid 5655] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 101 [pid 5655] <... set_robust_list resumed>) = 0 [pid 5655] chdir("./33") = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5655] setpgid(0, 0) = 0 [pid 5655] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5655] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5655] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5655] write(3, "1000", 4) = 4 [pid 5655] close(3) = 0 [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5655] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5655] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5656] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] <... clone resumed>, parent_tid=[102], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 102 [pid 5655] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5656] memfd_create("syzkaller", 0) = 3 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5656] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5656] close(3) = 0 [pid 5656] mkdir("./file0", 0777) = 0 [ 104.572465][ T5656] loop0: detected capacity change from 0 to 32768 [ 104.593551][ T5656] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5656) [ 104.609073][ T5656] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [pid 5656] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5656] chdir("./file0") = 0 [pid 5656] ioctl(4, LOOP_CLR_FD) = 0 [pid 5656] close(4) = 0 [pid 5656] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] <... futex resumed>) = 0 [pid 5655] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5655] <... futex resumed>) = 1 [pid 5656] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5656] <... openat resumed>) = 4 [pid 5656] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5655] <... futex resumed>) = 0 [pid 5655] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5655] <... futex resumed>) = 0 [ 104.617949][ T5656] BTRFS info (device loop0): using free space tree [ 104.639033][ T5656] BTRFS info (device loop0): enabling ssd optimizations [ 104.646254][ T5656] BTRFS info (device loop0): auto enabling async discard [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5655] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5655] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5655] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5673 attached [pid 5673] set_robust_list(0x7fd089ba69e0, 24 [pid 5655] <... clone resumed>, parent_tid=[103], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 103 [pid 5655] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... set_robust_list resumed>) = 0 [pid 5673] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5673] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 104.686767][ T5656] BTRFS info (device loop0): balance: start -s [ 104.695131][ T5656] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5655] <... futex resumed>) = 0 [pid 5673] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5673] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5655] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 104.746504][ T5656] BTRFS info (device loop0): balance: ended with status: 0 [pid 5656] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5656] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5673] <... ioctl resumed>) = 0 [pid 5673] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5673] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] close(3) = 0 [pid 5655] close(4) = 0 [pid 5655] close(5) = 0 [pid 5655] close(6) = -1 EBADF (Bad file descriptor) [pid 5655] close(7) = -1 EBADF (Bad file descriptor) [pid 5655] close(8) = -1 EBADF (Bad file descriptor) [pid 5655] close(9) = -1 EBADF (Bad file descriptor) [pid 5655] close(10) = -1 EBADF (Bad file descriptor) [pid 5655] close(11) = -1 EBADF (Bad file descriptor) [pid 5655] close(12) = -1 EBADF (Bad file descriptor) [pid 5655] close(13) = -1 EBADF (Bad file descriptor) [pid 5655] close(14) = -1 EBADF (Bad file descriptor) [pid 5655] close(15) = -1 EBADF (Bad file descriptor) [pid 5655] close(16) = -1 EBADF (Bad file descriptor) [pid 5655] close(17) = -1 EBADF (Bad file descriptor) [pid 5655] close(18) = -1 EBADF (Bad file descriptor) [pid 5655] close(19) = -1 EBADF (Bad file descriptor) [pid 5655] close(20) = -1 EBADF (Bad file descriptor) [pid 5655] close(21) = -1 EBADF (Bad file descriptor) [pid 5655] close(22) = -1 EBADF (Bad file descriptor) [pid 5655] close(23) = -1 EBADF (Bad file descriptor) [pid 5655] close(24) = -1 EBADF (Bad file descriptor) [pid 5655] close(25) = -1 EBADF (Bad file descriptor) [pid 5655] close(26) = -1 EBADF (Bad file descriptor) [pid 5655] close(27) = -1 EBADF (Bad file descriptor) [pid 5655] close(28) = -1 EBADF (Bad file descriptor) [pid 5655] close(29) = -1 EBADF (Bad file descriptor) [pid 5655] exit_group(0 [pid 5673] <... futex resumed>) = ? [pid 5656] <... futex resumed>) = ? [pid 5655] <... exit_group resumed>) = ? [pid 5673] +++ exited with 0 +++ [pid 5656] +++ exited with 0 +++ [pid 5655] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./33/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./33/cgroup.cpu") = 0 [pid 5007] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./33/binderfs") = 0 [pid 5007] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./33/file0") = 0 [pid 5007] umount2("./33/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./33/cgroup") = 0 [pid 5007] umount2("./33/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./33/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./33") = 0 [pid 5007] mkdir("./34", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5674 attached [pid 5674] set_robust_list(0x5555571235e0, 24) = 0 [pid 5674] chdir("./34") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 104 [pid 5674] <... symlink resumed>) = 0 [pid 5674] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5674] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5674] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5675 attached , parent_tid=[105], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 105 [pid 5675] set_robust_list(0x7fd090fc79e0, 24 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... set_robust_list resumed>) = 0 [pid 5674] <... futex resumed>) = 0 [pid 5675] memfd_create("syzkaller", 0 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5675] <... memfd_create resumed>) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5675] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5675] close(3) = 0 [pid 5675] mkdir("./file0", 0777) = 0 [ 105.264817][ T5675] loop0: detected capacity change from 0 to 32768 [ 105.276216][ T5675] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5675) [ 105.292660][ T5675] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.301864][ T5675] BTRFS info (device loop0): using free space tree [pid 5675] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file0") = 0 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5674] <... futex resumed>) = 0 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5674] <... futex resumed>) = 0 [pid 5675] <... openat resumed>) = 4 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5674] <... futex resumed>) = 0 [ 105.320842][ T5675] BTRFS info (device loop0): enabling ssd optimizations [ 105.328257][ T5675] BTRFS info (device loop0): auto enabling async discard [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5674] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5674] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[106], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 106 [pid 5674] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5692 attached [pid 5692] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5692] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5675] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5692] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... futex resumed>) = 1 [pid 5674] <... futex resumed>) = 0 [pid 5692] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] <... futex resumed>) = 0 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5674] <... futex resumed>) = 0 [ 105.363458][ T5675] BTRFS info (device loop0): balance: start -s [ 105.371727][ T5675] BTRFS info (device loop0): relocating block group 1048576 flags system [ 105.399056][ T5675] BTRFS info (device loop0): balance: ended with status: 0 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5675] <... ioctl resumed>) = 0 [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] close(3 [pid 5675] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5674] <... close resumed>) = 0 [pid 5674] close(4) = 0 [pid 5674] close(5) = 0 [pid 5674] close(6) = -1 EBADF (Bad file descriptor) [pid 5674] close(7) = -1 EBADF (Bad file descriptor) [pid 5674] close(8) = -1 EBADF (Bad file descriptor) [pid 5674] close(9) = -1 EBADF (Bad file descriptor) [pid 5674] close(10) = -1 EBADF (Bad file descriptor) [pid 5674] close(11) = -1 EBADF (Bad file descriptor) [pid 5674] close(12) = -1 EBADF (Bad file descriptor) [pid 5674] close(13) = -1 EBADF (Bad file descriptor) [pid 5674] close(14) = -1 EBADF (Bad file descriptor) [pid 5674] close(15) = -1 EBADF (Bad file descriptor) [pid 5674] close(16) = -1 EBADF (Bad file descriptor) [pid 5674] close(17) = -1 EBADF (Bad file descriptor) [pid 5674] close(18) = -1 EBADF (Bad file descriptor) [pid 5674] close(19) = -1 EBADF (Bad file descriptor) [pid 5674] close(20) = -1 EBADF (Bad file descriptor) [pid 5674] close(21) = -1 EBADF (Bad file descriptor) [pid 5674] close(22) = -1 EBADF (Bad file descriptor) [pid 5674] close(23) = -1 EBADF (Bad file descriptor) [pid 5674] close(24) = -1 EBADF (Bad file descriptor) [pid 5674] close(25) = -1 EBADF (Bad file descriptor) [pid 5674] close(26) = -1 EBADF (Bad file descriptor) [pid 5674] close(27) = -1 EBADF (Bad file descriptor) [pid 5674] close(28) = -1 EBADF (Bad file descriptor) [pid 5674] close(29) = -1 EBADF (Bad file descriptor) [pid 5674] exit_group(0 [pid 5692] <... futex resumed>) = ? [pid 5675] <... futex resumed>) = ? [pid 5674] <... exit_group resumed>) = ? [pid 5692] +++ exited with 0 +++ [pid 5675] +++ exited with 0 +++ [pid 5674] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./34/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./34/cgroup.cpu") = 0 [pid 5007] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./34/binderfs") = 0 [pid 5007] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./34/file0") = 0 [pid 5007] umount2("./34/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./34/cgroup") = 0 [pid 5007] umount2("./34/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./34/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./34") = 0 [pid 5007] mkdir("./35", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 107 ./strace-static-x86_64: Process 5693 attached [pid 5693] set_robust_list(0x5555571235e0, 24) = 0 [pid 5693] chdir("./35") = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5693] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5693] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3) = 0 [pid 5693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5693] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[108], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 108 [pid 5693] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5694 attached [pid 5694] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5694] memfd_create("syzkaller", 0) = 3 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5694] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5694] close(3) = 0 [pid 5694] mkdir("./file0", 0777) = 0 [ 105.917957][ T5694] loop0: detected capacity change from 0 to 32768 [ 105.929099][ T5694] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5694) [ 105.947201][ T5694] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.956025][ T5694] BTRFS info (device loop0): using free space tree [pid 5694] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file0") = 0 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5694] close(4) = 0 [pid 5694] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5694] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5693] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... openat resumed>) = 4 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... futex resumed>) = 1 [ 105.977749][ T5694] BTRFS info (device loop0): enabling ssd optimizations [ 105.984756][ T5694] BTRFS info (device loop0): auto enabling async discard [pid 5694] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5693] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5711 attached , parent_tid=[109], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 109 [pid 5711] set_robust_list(0x7fd089ba69e0, 24 [pid 5693] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5711] <... set_robust_list resumed>) = 0 [pid 5711] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5711] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 106.026931][ T5694] BTRFS info (device loop0): balance: start -s [ 106.036268][ T5694] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5711] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5711] <... ioctl resumed>) = 0 [pid 5711] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5711] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5694] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] close(3 [pid 5694] <... futex resumed>) = 0 [pid 5694] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] <... close resumed>) = 0 [pid 5693] close(4) = 0 [pid 5693] close(5) = 0 [pid 5693] close(6) = -1 EBADF (Bad file descriptor) [pid 5693] close(7) = -1 EBADF (Bad file descriptor) [pid 5693] close(8) = -1 EBADF (Bad file descriptor) [pid 5693] close(9) = -1 EBADF (Bad file descriptor) [pid 5693] close(10) = -1 EBADF (Bad file descriptor) [pid 5693] close(11) = -1 EBADF (Bad file descriptor) [pid 5693] close(12) = -1 EBADF (Bad file descriptor) [pid 5693] close(13) = -1 EBADF (Bad file descriptor) [pid 5693] close(14) = -1 EBADF (Bad file descriptor) [pid 5693] close(15) = -1 EBADF (Bad file descriptor) [pid 5693] close(16) = -1 EBADF (Bad file descriptor) [pid 5693] close(17) = -1 EBADF (Bad file descriptor) [pid 5693] close(18) = -1 EBADF (Bad file descriptor) [pid 5693] close(19) = -1 EBADF (Bad file descriptor) [pid 5693] close(20) = -1 EBADF (Bad file descriptor) [pid 5693] close(21) = -1 EBADF (Bad file descriptor) [pid 5693] close(22) = -1 EBADF (Bad file descriptor) [pid 5693] close(23) = -1 EBADF (Bad file descriptor) [pid 5693] close(24) = -1 EBADF (Bad file descriptor) [pid 5693] close(25) = -1 EBADF (Bad file descriptor) [pid 5693] close(26) = -1 EBADF (Bad file descriptor) [pid 5693] close(27) = -1 EBADF (Bad file descriptor) [pid 5693] close(28) = -1 EBADF (Bad file descriptor) [pid 5693] close(29) = -1 EBADF (Bad file descriptor) [pid 5693] exit_group(0) = ? [pid 5711] <... futex resumed>) = ? [pid 5711] +++ exited with 0 +++ [pid 5694] <... futex resumed>) = ? [pid 5694] +++ exited with 0 +++ [pid 5693] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./35/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./35/cgroup.cpu") = 0 [pid 5007] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./35/binderfs") = 0 [ 106.178557][ T5694] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./35/file0") = 0 [pid 5007] umount2("./35/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./35/cgroup") = 0 [pid 5007] umount2("./35/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./35/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./35") = 0 [pid 5007] mkdir("./36", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 110 ./strace-static-x86_64: Process 5712 attached [pid 5712] set_robust_list(0x5555571235e0, 24) = 0 [pid 5712] chdir("./36") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5712] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5712] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5712] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[111], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 111 [pid 5712] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5713] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [pid 5713] mkdir("./file0", 0777) = 0 [ 106.581206][ T5713] loop0: detected capacity change from 0 to 32768 [ 106.595707][ T5713] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5713) [ 106.613027][ T5713] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 106.621900][ T5713] BTRFS info (device loop0): using free space tree [pid 5713] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5713] chdir("./file0") = 0 [pid 5713] ioctl(4, LOOP_CLR_FD) = 0 [pid 5713] close(4) = 0 [pid 5713] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... futex resumed>) = 0 [pid 5713] <... futex resumed>) = 1 [pid 5713] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5712] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] <... openat resumed>) = 4 [pid 5713] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5713] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5712] <... futex resumed>) = 1 [pid 5713] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 106.643299][ T5713] BTRFS info (device loop0): enabling ssd optimizations [ 106.650499][ T5713] BTRFS info (device loop0): auto enabling async discard [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5712] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5712] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[112], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 112 [pid 5712] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.706576][ T5713] BTRFS info (device loop0): balance: start -s [ 106.714784][ T5713] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5712] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5730 attached [pid 5730] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5730] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5730] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5730] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] <... futex resumed>) = 0 [pid 5730] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 106.750484][ T5713] BTRFS info (device loop0): balance: ended with status: 0 [pid 5712] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5713] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5713] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] <... ioctl resumed>) = 0 [pid 5730] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] close(3) = 0 [pid 5730] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] close(4) = 0 [pid 5712] close(5) = 0 [pid 5712] close(6) = -1 EBADF (Bad file descriptor) [pid 5712] close(7) = -1 EBADF (Bad file descriptor) [pid 5712] close(8) = -1 EBADF (Bad file descriptor) [pid 5712] close(9) = -1 EBADF (Bad file descriptor) [pid 5712] close(10) = -1 EBADF (Bad file descriptor) [pid 5712] close(11) = -1 EBADF (Bad file descriptor) [pid 5712] close(12) = -1 EBADF (Bad file descriptor) [pid 5712] close(13) = -1 EBADF (Bad file descriptor) [pid 5712] close(14) = -1 EBADF (Bad file descriptor) [pid 5712] close(15) = -1 EBADF (Bad file descriptor) [pid 5712] close(16) = -1 EBADF (Bad file descriptor) [pid 5712] close(17) = -1 EBADF (Bad file descriptor) [pid 5712] close(18) = -1 EBADF (Bad file descriptor) [pid 5712] close(19) = -1 EBADF (Bad file descriptor) [pid 5712] close(20) = -1 EBADF (Bad file descriptor) [pid 5712] close(21) = -1 EBADF (Bad file descriptor) [pid 5712] close(22) = -1 EBADF (Bad file descriptor) [pid 5712] close(23) = -1 EBADF (Bad file descriptor) [pid 5712] close(24) = -1 EBADF (Bad file descriptor) [pid 5712] close(25) = -1 EBADF (Bad file descriptor) [pid 5712] close(26) = -1 EBADF (Bad file descriptor) [pid 5712] close(27) = -1 EBADF (Bad file descriptor) [pid 5712] close(28) = -1 EBADF (Bad file descriptor) [pid 5712] close(29) = -1 EBADF (Bad file descriptor) [pid 5712] exit_group(0 [pid 5730] <... futex resumed>) = ? [pid 5713] <... futex resumed>) = ? [pid 5730] +++ exited with 0 +++ [pid 5713] +++ exited with 0 +++ [pid 5712] <... exit_group resumed>) = ? [pid 5712] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./36/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./36/cgroup.cpu") = 0 [pid 5007] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./36/binderfs") = 0 [pid 5007] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./36/file0") = 0 [pid 5007] umount2("./36/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./36/cgroup") = 0 [pid 5007] umount2("./36/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./36/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./36") = 0 [pid 5007] mkdir("./37", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 113 ./strace-static-x86_64: Process 5731 attached [pid 5731] set_robust_list(0x5555571235e0, 24) = 0 [pid 5731] chdir("./37") = 0 [pid 5731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5731] setpgid(0, 0) = 0 [pid 5731] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5731] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5731] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5731] write(3, "1000", 4) = 4 [pid 5731] close(3) = 0 [pid 5731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5731] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5731] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5732 attached , parent_tid=[114], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 114 [pid 5732] set_robust_list(0x7fd090fc79e0, 24 [pid 5731] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] <... set_robust_list resumed>) = 0 [pid 5731] <... futex resumed>) = 0 [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5732] memfd_create("syzkaller", 0) = 3 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5732] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5732] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5732] close(3) = 0 [pid 5732] mkdir("./file0", 0777) = 0 [ 107.256720][ T5732] loop0: detected capacity change from 0 to 32768 [ 107.268407][ T5732] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5732) [ 107.285489][ T5732] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.294217][ T5732] BTRFS info (device loop0): using free space tree [pid 5732] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5732] chdir("./file0") = 0 [pid 5732] ioctl(4, LOOP_CLR_FD) = 0 [pid 5732] close(4) = 0 [pid 5732] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5732] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5731] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] <... openat resumed>) = 4 [pid 5731] <... futex resumed>) = 0 [pid 5732] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5732] <... futex resumed>) = 0 [pid 5731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5732] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5731] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 107.313927][ T5732] BTRFS info (device loop0): enabling ssd optimizations [ 107.321085][ T5732] BTRFS info (device loop0): auto enabling async discard [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5731] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5731] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5749 attached , parent_tid=[115], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 115 [pid 5749] set_robust_list(0x7fd089ba69e0, 24 [pid 5731] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] <... set_robust_list resumed>) = 0 [pid 5749] openat(AT_FDCWD, ".", O_RDONLY [pid 5731] <... futex resumed>) = 0 [pid 5749] <... openat resumed>) = 5 [pid 5731] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5731] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.373391][ T5732] BTRFS info (device loop0): balance: start -s [ 107.383505][ T5732] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5749] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 107.453322][ T5732] BTRFS info (device loop0): balance: ended with status: 0 [pid 5749] <... ioctl resumed>) = 0 [pid 5749] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5749] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5732] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] close(3 [pid 5732] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5731] <... close resumed>) = 0 [pid 5731] close(4) = 0 [pid 5731] close(5) = 0 [pid 5731] close(6) = -1 EBADF (Bad file descriptor) [pid 5731] close(7) = -1 EBADF (Bad file descriptor) [pid 5731] close(8) = -1 EBADF (Bad file descriptor) [pid 5731] close(9) = -1 EBADF (Bad file descriptor) [pid 5731] close(10) = -1 EBADF (Bad file descriptor) [pid 5731] close(11) = -1 EBADF (Bad file descriptor) [pid 5731] close(12) = -1 EBADF (Bad file descriptor) [pid 5731] close(13) = -1 EBADF (Bad file descriptor) [pid 5731] close(14) = -1 EBADF (Bad file descriptor) [pid 5731] close(15) = -1 EBADF (Bad file descriptor) [pid 5731] close(16) = -1 EBADF (Bad file descriptor) [pid 5731] close(17) = -1 EBADF (Bad file descriptor) [pid 5731] close(18) = -1 EBADF (Bad file descriptor) [pid 5731] close(19) = -1 EBADF (Bad file descriptor) [pid 5731] close(20) = -1 EBADF (Bad file descriptor) [pid 5731] close(21) = -1 EBADF (Bad file descriptor) [pid 5731] close(22) = -1 EBADF (Bad file descriptor) [pid 5731] close(23) = -1 EBADF (Bad file descriptor) [pid 5731] close(24) = -1 EBADF (Bad file descriptor) [pid 5731] close(25) = -1 EBADF (Bad file descriptor) [pid 5731] close(26) = -1 EBADF (Bad file descriptor) [pid 5731] close(27) = -1 EBADF (Bad file descriptor) [pid 5731] close(28) = -1 EBADF (Bad file descriptor) [pid 5731] close(29) = -1 EBADF (Bad file descriptor) [pid 5731] exit_group(0 [pid 5749] <... futex resumed>) = ? [pid 5732] <... futex resumed>) = ? [pid 5731] <... exit_group resumed>) = ? [pid 5749] +++ exited with 0 +++ [pid 5732] +++ exited with 0 +++ [pid 5731] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./37/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./37/cgroup.cpu") = 0 [pid 5007] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./37/binderfs") = 0 [pid 5007] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./37/file0") = 0 [pid 5007] umount2("./37/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./37/cgroup") = 0 [pid 5007] umount2("./37/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./37/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./37") = 0 [pid 5007] mkdir("./38", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 116 ./strace-static-x86_64: Process 5750 attached [pid 5750] set_robust_list(0x5555571235e0, 24) = 0 [pid 5750] chdir("./38") = 0 [pid 5750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5750] setpgid(0, 0) = 0 [pid 5750] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5750] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5750] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5750] write(3, "1000", 4) = 4 [pid 5750] close(3) = 0 [pid 5750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5750] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5750] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5751 attached [pid 5751] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5751] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] <... clone resumed>, parent_tid=[117], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 117 [pid 5750] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] <... futex resumed>) = 0 [pid 5750] <... futex resumed>) = 1 [pid 5751] memfd_create("syzkaller", 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5751] <... memfd_create resumed>) = 3 [pid 5751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5751] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5751] close(3) = 0 [pid 5751] mkdir("./file0", 0777) = 0 [ 107.941349][ T5751] loop0: detected capacity change from 0 to 32768 [ 107.952491][ T5751] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5751) [ 107.969411][ T5751] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.978276][ T5751] BTRFS info (device loop0): using free space tree [pid 5751] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5751] chdir("./file0") = 0 [pid 5751] ioctl(4, LOOP_CLR_FD) = 0 [pid 5751] close(4) = 0 [pid 5751] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5751] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.998801][ T5751] BTRFS info (device loop0): enabling ssd optimizations [ 108.006025][ T5751] BTRFS info (device loop0): auto enabling async discard [pid 5751] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5750] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5750] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5750] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[118], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 118 [pid 5750] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5768 attached [pid 5750] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5768] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5768] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5768] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5768] <... futex resumed>) = 1 [ 108.052405][ T5751] BTRFS info (device loop0): balance: start -s [ 108.062317][ T5751] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5768] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5751] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5751] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.115812][ T5751] BTRFS info (device loop0): balance: ended with status: 0 [pid 5751] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] <... ioctl resumed>) = 0 [pid 5768] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] close(3) = 0 [pid 5750] close(4) = 0 [pid 5750] close(5) = 0 [pid 5750] close(6) = -1 EBADF (Bad file descriptor) [pid 5750] close(7) = -1 EBADF (Bad file descriptor) [pid 5750] close(8) = -1 EBADF (Bad file descriptor) [pid 5750] close(9) = -1 EBADF (Bad file descriptor) [pid 5750] close(10) = -1 EBADF (Bad file descriptor) [pid 5750] close(11) = -1 EBADF (Bad file descriptor) [pid 5750] close(12) = -1 EBADF (Bad file descriptor) [pid 5750] close(13) = -1 EBADF (Bad file descriptor) [pid 5750] close(14) = -1 EBADF (Bad file descriptor) [pid 5750] close(15) = -1 EBADF (Bad file descriptor) [pid 5750] close(16) = -1 EBADF (Bad file descriptor) [pid 5750] close(17) = -1 EBADF (Bad file descriptor) [pid 5750] close(18) = -1 EBADF (Bad file descriptor) [pid 5750] close(19) = -1 EBADF (Bad file descriptor) [pid 5750] close(20) = -1 EBADF (Bad file descriptor) [pid 5750] close(21) = -1 EBADF (Bad file descriptor) [pid 5750] close(22) = -1 EBADF (Bad file descriptor) [pid 5750] close(23) = -1 EBADF (Bad file descriptor) [pid 5750] close(24) = -1 EBADF (Bad file descriptor) [pid 5750] close(25) = -1 EBADF (Bad file descriptor) [pid 5750] close(26) = -1 EBADF (Bad file descriptor) [pid 5750] close(27) = -1 EBADF (Bad file descriptor) [pid 5750] close(28) = -1 EBADF (Bad file descriptor) [pid 5750] close(29) = -1 EBADF (Bad file descriptor) [pid 5750] exit_group(0 [pid 5751] <... futex resumed>) = ? [pid 5768] <... futex resumed>) = ? [pid 5750] <... exit_group resumed>) = ? [pid 5751] +++ exited with 0 +++ [pid 5768] +++ exited with 0 +++ [pid 5750] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./38/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./38/cgroup.cpu") = 0 [pid 5007] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./38/binderfs") = 0 [pid 5007] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./38/file0") = 0 [pid 5007] umount2("./38/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./38/cgroup") = 0 [pid 5007] umount2("./38/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./38/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./38") = 0 [pid 5007] mkdir("./39", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 119 ./strace-static-x86_64: Process 5769 attached [pid 5769] set_robust_list(0x5555571235e0, 24) = 0 [pid 5769] chdir("./39") = 0 [pid 5769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5769] setpgid(0, 0) = 0 [pid 5769] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5769] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5769] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5769] write(3, "1000", 4) = 4 [pid 5769] close(3) = 0 [pid 5769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5769] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5769] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5770 attached , parent_tid=[120], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 120 [pid 5770] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5770] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5770] memfd_create("syzkaller", 0 [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5770] <... memfd_create resumed>) = 3 [pid 5770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5770] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5770] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5770] close(3) = 0 [pid 5770] mkdir("./file0", 0777) = 0 [ 108.622408][ T5770] loop0: detected capacity change from 0 to 32768 [ 108.633973][ T5770] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5770) [ 108.649568][ T5770] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.658540][ T5770] BTRFS info (device loop0): using free space tree [pid 5770] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5770] chdir("./file0") = 0 [pid 5770] ioctl(4, LOOP_CLR_FD) = 0 [pid 5770] close(4) = 0 [pid 5770] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5769] <... futex resumed>) = 0 [pid 5769] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5769] <... futex resumed>) = 0 [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5770] <... openat resumed>) = 4 [pid 5770] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5769] <... futex resumed>) = 0 [pid 5770] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5769] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.679169][ T5770] BTRFS info (device loop0): enabling ssd optimizations [ 108.686542][ T5770] BTRFS info (device loop0): auto enabling async discard [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5769] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5769] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5769] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5787 attached [pid 5787] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5787] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] <... clone resumed>, parent_tid=[121], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 121 [pid 5769] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... futex resumed>) = 0 [pid 5769] <... futex resumed>) = 1 [pid 5787] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5787] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5769] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... futex resumed>) = 0 [pid 5769] <... futex resumed>) = 1 [pid 5787] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 108.742885][ T5770] BTRFS info (device loop0): balance: start -s [ 108.751722][ T5770] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5769] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 108.824418][ T5770] BTRFS info (device loop0): balance: ended with status: 0 [pid 5787] <... ioctl resumed>) = 0 [pid 5787] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5770] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5769] close(3 [pid 5770] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] <... close resumed>) = 0 [pid 5769] close(4) = 0 [pid 5769] close(5) = 0 [pid 5769] close(6) = -1 EBADF (Bad file descriptor) [pid 5769] close(7) = -1 EBADF (Bad file descriptor) [pid 5769] close(8) = -1 EBADF (Bad file descriptor) [pid 5769] close(9) = -1 EBADF (Bad file descriptor) [pid 5769] close(10) = -1 EBADF (Bad file descriptor) [pid 5769] close(11) = -1 EBADF (Bad file descriptor) [pid 5769] close(12) = -1 EBADF (Bad file descriptor) [pid 5769] close(13) = -1 EBADF (Bad file descriptor) [pid 5769] close(14) = -1 EBADF (Bad file descriptor) [pid 5769] close(15) = -1 EBADF (Bad file descriptor) [pid 5769] close(16) = -1 EBADF (Bad file descriptor) [pid 5769] close(17) = -1 EBADF (Bad file descriptor) [pid 5769] close(18) = -1 EBADF (Bad file descriptor) [pid 5769] close(19) = -1 EBADF (Bad file descriptor) [pid 5769] close(20) = -1 EBADF (Bad file descriptor) [pid 5769] close(21) = -1 EBADF (Bad file descriptor) [pid 5769] close(22) = -1 EBADF (Bad file descriptor) [pid 5769] close(23) = -1 EBADF (Bad file descriptor) [pid 5769] close(24) = -1 EBADF (Bad file descriptor) [pid 5769] close(25) = -1 EBADF (Bad file descriptor) [pid 5769] close(26) = -1 EBADF (Bad file descriptor) [pid 5769] close(27) = -1 EBADF (Bad file descriptor) [pid 5769] close(28) = -1 EBADF (Bad file descriptor) [pid 5769] close(29) = -1 EBADF (Bad file descriptor) [pid 5769] exit_group(0 [pid 5787] <... futex resumed>) = ? [pid 5770] <... futex resumed>) = ? [pid 5769] <... exit_group resumed>) = ? [pid 5787] +++ exited with 0 +++ [pid 5770] +++ exited with 0 +++ [pid 5769] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./39/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./39/cgroup.cpu") = 0 [pid 5007] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./39/binderfs") = 0 [pid 5007] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./39/file0") = 0 [pid 5007] umount2("./39/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./39/cgroup") = 0 [pid 5007] umount2("./39/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./39/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./39") = 0 [pid 5007] mkdir("./40", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5788 attached , child_tidptr=0x5555571235d0) = 122 [pid 5788] set_robust_list(0x5555571235e0, 24) = 0 [pid 5788] chdir("./40") = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5788] setpgid(0, 0) = 0 [pid 5788] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5788] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5788] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5788] write(3, "1000", 4) = 4 [pid 5788] close(3) = 0 [pid 5788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5788] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5789 attached , parent_tid=[123], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 123 [pid 5788] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5789] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5789] memfd_create("syzkaller", 0) = 3 [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5789] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5789] close(3) = 0 [pid 5789] mkdir("./file0", 0777) = 0 [ 109.318339][ T5789] loop0: detected capacity change from 0 to 32768 [ 109.329786][ T5789] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5789) [ 109.346396][ T5789] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.355287][ T5789] BTRFS info (device loop0): using free space tree [pid 5789] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5789] chdir("./file0") = 0 [pid 5789] ioctl(4, LOOP_CLR_FD) = 0 [pid 5789] close(4) = 0 [pid 5789] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] <... futex resumed>) = 0 [pid 5789] <... futex resumed>) = 1 [pid 5789] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5788] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... openat resumed>) = 4 [pid 5789] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = 0 [pid 5788] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] <... futex resumed>) = 0 [pid 5788] <... futex resumed>) = 1 [pid 5789] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 109.376135][ T5789] BTRFS info (device loop0): enabling ssd optimizations [ 109.383225][ T5789] BTRFS info (device loop0): auto enabling async discard [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5788] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5788] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[124], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 124 [ 109.431344][ T5789] BTRFS info (device loop0): balance: start -s [ 109.441308][ T5789] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5788] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5806 attached ) = 0 [pid 5806] set_robust_list(0x7fd089ba69e0, 24 [pid 5788] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... set_robust_list resumed>) = 0 [pid 5806] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5806] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5806] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5788] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5789] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.487656][ T5789] BTRFS info (device loop0): balance: ended with status: 0 [pid 5789] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5806] <... ioctl resumed>) = 0 [pid 5806] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] close(3 [pid 5806] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... close resumed>) = 0 [pid 5788] close(4) = 0 [pid 5788] close(5) = 0 [pid 5788] close(6) = -1 EBADF (Bad file descriptor) [pid 5788] close(7) = -1 EBADF (Bad file descriptor) [pid 5788] close(8) = -1 EBADF (Bad file descriptor) [pid 5788] close(9) = -1 EBADF (Bad file descriptor) [pid 5788] close(10) = -1 EBADF (Bad file descriptor) [pid 5788] close(11) = -1 EBADF (Bad file descriptor) [pid 5788] close(12) = -1 EBADF (Bad file descriptor) [pid 5788] close(13) = -1 EBADF (Bad file descriptor) [pid 5788] close(14) = -1 EBADF (Bad file descriptor) [pid 5788] close(15) = -1 EBADF (Bad file descriptor) [pid 5788] close(16) = -1 EBADF (Bad file descriptor) [pid 5788] close(17) = -1 EBADF (Bad file descriptor) [pid 5788] close(18) = -1 EBADF (Bad file descriptor) [pid 5788] close(19) = -1 EBADF (Bad file descriptor) [pid 5788] close(20) = -1 EBADF (Bad file descriptor) [pid 5788] close(21) = -1 EBADF (Bad file descriptor) [pid 5788] close(22) = -1 EBADF (Bad file descriptor) [pid 5788] close(23) = -1 EBADF (Bad file descriptor) [pid 5788] close(24) = -1 EBADF (Bad file descriptor) [pid 5788] close(25) = -1 EBADF (Bad file descriptor) [pid 5788] close(26) = -1 EBADF (Bad file descriptor) [pid 5788] close(27) = -1 EBADF (Bad file descriptor) [pid 5788] close(28) = -1 EBADF (Bad file descriptor) [pid 5788] close(29) = -1 EBADF (Bad file descriptor) [pid 5788] exit_group(0 [pid 5806] <... futex resumed>) = ? [pid 5789] <... futex resumed>) = ? [pid 5788] <... exit_group resumed>) = ? [pid 5806] +++ exited with 0 +++ [pid 5789] +++ exited with 0 +++ [pid 5788] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./40/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./40/cgroup.cpu") = 0 [pid 5007] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./40/binderfs") = 0 [pid 5007] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./40/file0") = 0 [pid 5007] umount2("./40/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./40/cgroup") = 0 [pid 5007] umount2("./40/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./40/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./40") = 0 [pid 5007] mkdir("./41", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5807 attached [pid 5807] set_robust_list(0x5555571235e0, 24) = 0 [pid 5807] chdir("./41") = 0 [pid 5807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5807] setpgid(0, 0) = 0 [pid 5807] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5807] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5807] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 125 [pid 5807] <... openat resumed>) = 3 [pid 5807] write(3, "1000", 4) = 4 [pid 5807] close(3) = 0 [pid 5807] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5807] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5807] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x7fd090fc79e0, 24 [pid 5807] <... clone resumed>, parent_tid=[126], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 126 [pid 5807] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5808] <... set_robust_list resumed>) = 0 [pid 5808] memfd_create("syzkaller", 0) = 3 [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5808] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5808] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5808] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5808] close(3) = 0 [pid 5808] mkdir("./file0", 0777) = 0 [ 109.985730][ T5808] loop0: detected capacity change from 0 to 32768 [ 109.996474][ T5808] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5808) [ 110.014939][ T5808] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.023866][ T5808] BTRFS info (device loop0): using free space tree [pid 5808] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5808] chdir("./file0") = 0 [pid 5808] ioctl(4, LOOP_CLR_FD) = 0 [pid 5808] close(4) = 0 [pid 5808] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5808] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [ 110.043371][ T5808] BTRFS info (device loop0): enabling ssd optimizations [ 110.050886][ T5808] BTRFS info (device loop0): auto enabling async discard [pid 5808] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5807] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5807] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[127], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 127 [pid 5807] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5825 attached [pid 5825] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5825] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5825] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5825] <... futex resumed>) = 1 [ 110.097775][ T5808] BTRFS info (device loop0): balance: start -s [ 110.106996][ T5808] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5825] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5808] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5808] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.175918][ T5808] BTRFS info (device loop0): balance: ended with status: 0 [pid 5808] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... ioctl resumed>) = 0 [pid 5825] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5807] close(3) = 0 [pid 5807] close(4) = 0 [pid 5807] close(5) = 0 [pid 5807] close(6) = -1 EBADF (Bad file descriptor) [pid 5807] close(7) = -1 EBADF (Bad file descriptor) [pid 5807] close(8) = -1 EBADF (Bad file descriptor) [pid 5807] close(9) = -1 EBADF (Bad file descriptor) [pid 5807] close(10) = -1 EBADF (Bad file descriptor) [pid 5807] close(11) = -1 EBADF (Bad file descriptor) [pid 5807] close(12) = -1 EBADF (Bad file descriptor) [pid 5807] close(13) = -1 EBADF (Bad file descriptor) [pid 5807] close(14) = -1 EBADF (Bad file descriptor) [pid 5807] close(15) = -1 EBADF (Bad file descriptor) [pid 5807] close(16) = -1 EBADF (Bad file descriptor) [pid 5807] close(17) = -1 EBADF (Bad file descriptor) [pid 5807] close(18) = -1 EBADF (Bad file descriptor) [pid 5807] close(19) = -1 EBADF (Bad file descriptor) [pid 5807] close(20) = -1 EBADF (Bad file descriptor) [pid 5807] close(21) = -1 EBADF (Bad file descriptor) [pid 5807] close(22) = -1 EBADF (Bad file descriptor) [pid 5807] close(23) = -1 EBADF (Bad file descriptor) [pid 5807] close(24) = -1 EBADF (Bad file descriptor) [pid 5807] close(25) = -1 EBADF (Bad file descriptor) [pid 5807] close(26) = -1 EBADF (Bad file descriptor) [pid 5807] close(27) = -1 EBADF (Bad file descriptor) [pid 5807] close(28) = -1 EBADF (Bad file descriptor) [pid 5807] close(29) = -1 EBADF (Bad file descriptor) [pid 5807] exit_group(0 [pid 5825] <... futex resumed>) = ? [pid 5808] <... futex resumed>) = ? [pid 5807] <... exit_group resumed>) = ? [pid 5825] +++ exited with 0 +++ [pid 5808] +++ exited with 0 +++ [pid 5807] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./41/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./41/cgroup.cpu") = 0 [pid 5007] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./41/binderfs") = 0 [pid 5007] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./41/file0") = 0 [pid 5007] umount2("./41/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./41/cgroup") = 0 [pid 5007] umount2("./41/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./41/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./41") = 0 [pid 5007] mkdir("./42", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 128 ./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x5555571235e0, 24) = 0 [pid 5826] chdir("./42") = 0 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5826] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5826] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 [pid 5826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5826] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5826] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... clone resumed>, parent_tid=[129], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 129 [pid 5826] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 1 [pid 5827] memfd_create("syzkaller", 0 [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5827] <... memfd_create resumed>) = 3 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5827] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] mkdir("./file0", 0777) = 0 [ 110.666112][ T5827] loop0: detected capacity change from 0 to 32768 [ 110.675732][ T5827] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5827) [ 110.692508][ T5827] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.701331][ T5827] BTRFS info (device loop0): using free space tree [pid 5827] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] chdir("./file0") = 0 [pid 5827] ioctl(4, LOOP_CLR_FD) = 0 [pid 5827] close(4) = 0 [pid 5827] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5827] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... openat resumed>) = 4 [pid 5827] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5827] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 110.722231][ T5827] BTRFS info (device loop0): enabling ssd optimizations [ 110.729514][ T5827] BTRFS info (device loop0): auto enabling async discard [ 110.776877][ T5827] BTRFS info (device loop0): balance: start -s [ 110.785558][ T5827] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5826] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5826] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5826] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5844 attached , parent_tid=[130], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 130 [pid 5826] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] set_robust_list(0x7fd089ba69e0, 24 [pid 5826] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] <... set_robust_list resumed>) = 0 [pid 5844] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5844] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5844] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5826] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5827] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.818052][ T5827] BTRFS info (device loop0): balance: ended with status: 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5844] <... ioctl resumed>) = 0 [pid 5844] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] close(3) = 0 [pid 5826] close(4) = 0 [pid 5826] close(5) = 0 [pid 5826] close(6) = -1 EBADF (Bad file descriptor) [pid 5826] close(7) = -1 EBADF (Bad file descriptor) [pid 5826] close(8) = -1 EBADF (Bad file descriptor) [pid 5826] close(9) = -1 EBADF (Bad file descriptor) [pid 5826] close(10) = -1 EBADF (Bad file descriptor) [pid 5826] close(11) = -1 EBADF (Bad file descriptor) [pid 5826] close(12) = -1 EBADF (Bad file descriptor) [pid 5826] close(13) = -1 EBADF (Bad file descriptor) [pid 5826] close(14) = -1 EBADF (Bad file descriptor) [pid 5826] close(15) = -1 EBADF (Bad file descriptor) [pid 5826] close(16) = -1 EBADF (Bad file descriptor) [pid 5826] close(17) = -1 EBADF (Bad file descriptor) [pid 5826] close(18) = -1 EBADF (Bad file descriptor) [pid 5826] close(19) = -1 EBADF (Bad file descriptor) [pid 5826] close(20) = -1 EBADF (Bad file descriptor) [pid 5826] close(21) = -1 EBADF (Bad file descriptor) [pid 5826] close(22) = -1 EBADF (Bad file descriptor) [pid 5826] close(23) = -1 EBADF (Bad file descriptor) [pid 5826] close(24) = -1 EBADF (Bad file descriptor) [pid 5826] close(25) = -1 EBADF (Bad file descriptor) [pid 5826] close(26) = -1 EBADF (Bad file descriptor) [pid 5826] close(27) = -1 EBADF (Bad file descriptor) [pid 5826] close(28) = -1 EBADF (Bad file descriptor) [pid 5826] close(29) = -1 EBADF (Bad file descriptor) [pid 5826] exit_group(0 [pid 5844] <... futex resumed>) = ? [pid 5827] <... futex resumed>) = ? [pid 5826] <... exit_group resumed>) = ? [pid 5844] +++ exited with 0 +++ [pid 5827] +++ exited with 0 +++ [pid 5826] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./42/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./42/cgroup.cpu") = 0 [pid 5007] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./42/binderfs") = 0 [pid 5007] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./42/file0") = 0 [pid 5007] umount2("./42/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./42/cgroup") = 0 [pid 5007] umount2("./42/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./42/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./42") = 0 [pid 5007] mkdir("./43", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 131 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5846] chdir("./43") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5846] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5846] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5846] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5846] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5847 attached , parent_tid=[132], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 132 [pid 5846] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5847] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5847] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] close(3) = 0 [pid 5847] mkdir("./file0", 0777) = 0 [ 111.355659][ T5847] loop0: detected capacity change from 0 to 32768 [ 111.366972][ T5847] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5847) [ 111.383908][ T5847] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 111.392864][ T5847] BTRFS info (device loop0): using free space tree [pid 5847] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file0") = 0 [pid 5847] ioctl(4, LOOP_CLR_FD) = 0 [pid 5847] close(4) = 0 [pid 5847] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5847] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5846] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] <... openat resumed>) = 4 [pid 5847] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 111.414266][ T5847] BTRFS info (device loop0): enabling ssd optimizations [ 111.421454][ T5847] BTRFS info (device loop0): auto enabling async discard [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5846] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5846] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5864 attached , parent_tid=[133], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 133 [pid 5846] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] set_robust_list(0x7fd089ba69e0, 24 [pid 5846] <... futex resumed>) = 0 [pid 5864] <... set_robust_list resumed>) = 0 [ 111.484474][ T5847] BTRFS info (device loop0): balance: start -s [ 111.493647][ T5847] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5864] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5864] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5864] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... futex resumed>) = 0 [pid 5864] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5846] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 111.531226][ T5847] BTRFS info (device loop0): balance: ended with status: 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5864] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5864] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5847] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5847] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] close(5) = 0 [pid 5846] close(6) = -1 EBADF (Bad file descriptor) [pid 5846] close(7) = -1 EBADF (Bad file descriptor) [pid 5846] close(8) = -1 EBADF (Bad file descriptor) [pid 5846] close(9) = -1 EBADF (Bad file descriptor) [pid 5846] close(10) = -1 EBADF (Bad file descriptor) [pid 5846] close(11) = -1 EBADF (Bad file descriptor) [pid 5846] close(12) = -1 EBADF (Bad file descriptor) [pid 5846] close(13) = -1 EBADF (Bad file descriptor) [pid 5846] close(14) = -1 EBADF (Bad file descriptor) [pid 5846] close(15) = -1 EBADF (Bad file descriptor) [pid 5846] close(16) = -1 EBADF (Bad file descriptor) [pid 5846] close(17) = -1 EBADF (Bad file descriptor) [pid 5846] close(18) = -1 EBADF (Bad file descriptor) [pid 5846] close(19) = -1 EBADF (Bad file descriptor) [pid 5846] close(20) = -1 EBADF (Bad file descriptor) [pid 5846] close(21) = -1 EBADF (Bad file descriptor) [pid 5846] close(22) = -1 EBADF (Bad file descriptor) [pid 5846] close(23) = -1 EBADF (Bad file descriptor) [pid 5846] close(24) = -1 EBADF (Bad file descriptor) [pid 5846] close(25) = -1 EBADF (Bad file descriptor) [pid 5846] close(26) = -1 EBADF (Bad file descriptor) [pid 5846] close(27) = -1 EBADF (Bad file descriptor) [pid 5846] close(28) = -1 EBADF (Bad file descriptor) [pid 5846] close(29) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5847] <... futex resumed>) = ? [pid 5846] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5847] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./43/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./43/cgroup.cpu") = 0 [pid 5007] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./43/binderfs") = 0 [pid 5007] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./43/file0") = 0 [pid 5007] umount2("./43/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./43/cgroup") = 0 [pid 5007] umount2("./43/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./43/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./43") = 0 [pid 5007] mkdir("./44", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 134 ./strace-static-x86_64: Process 5865 attached [pid 5865] set_robust_list(0x5555571235e0, 24) = 0 [pid 5865] chdir("./44") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5865] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5865] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5865] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[135], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 135 [pid 5865] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5866 attached [pid 5866] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5866] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5866] close(3) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [ 112.021968][ T5866] loop0: detected capacity change from 0 to 32768 [ 112.033543][ T5866] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5866) [ 112.051106][ T5866] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 112.059897][ T5866] BTRFS info (device loop0): using free space tree [pid 5866] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5866] chdir("./file0") = 0 [pid 5866] ioctl(4, LOOP_CLR_FD) = 0 [pid 5866] close(4) = 0 [pid 5866] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5866] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5865] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... openat resumed>) = 4 [pid 5865] <... futex resumed>) = 0 [pid 5866] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... futex resumed>) = 0 [pid 5865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5865] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.079122][ T5866] BTRFS info (device loop0): enabling ssd optimizations [ 112.086507][ T5866] BTRFS info (device loop0): auto enabling async discard [ 112.119007][ T5866] BTRFS info (device loop0): balance: start -s [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5865] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5865] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5883 attached , parent_tid=[136], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 136 [pid 5865] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] set_robust_list(0x7fd089ba69e0, 24) = 0 [ 112.128707][ T5866] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5883] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5883] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5866] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.171882][ T5866] BTRFS info (device loop0): balance: ended with status: 0 [pid 5866] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5883] <... ioctl resumed>) = 0 [pid 5883] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] close(5) = 0 [pid 5865] close(6) = -1 EBADF (Bad file descriptor) [pid 5865] close(7) = -1 EBADF (Bad file descriptor) [pid 5865] close(8) = -1 EBADF (Bad file descriptor) [pid 5865] close(9) = -1 EBADF (Bad file descriptor) [pid 5865] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] close(11) = -1 EBADF (Bad file descriptor) [pid 5865] close(12) = -1 EBADF (Bad file descriptor) [pid 5865] close(13) = -1 EBADF (Bad file descriptor) [pid 5865] close(14) = -1 EBADF (Bad file descriptor) [pid 5865] close(15) = -1 EBADF (Bad file descriptor) [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5865] close(17) = -1 EBADF (Bad file descriptor) [pid 5865] close(18) = -1 EBADF (Bad file descriptor) [pid 5865] close(19) = -1 EBADF (Bad file descriptor) [pid 5865] close(20) = -1 EBADF (Bad file descriptor) [pid 5865] close(21) = -1 EBADF (Bad file descriptor) [pid 5865] close(22) = -1 EBADF (Bad file descriptor) [pid 5865] close(23) = -1 EBADF (Bad file descriptor) [pid 5865] close(24) = -1 EBADF (Bad file descriptor) [pid 5865] close(25) = -1 EBADF (Bad file descriptor) [pid 5865] close(26) = -1 EBADF (Bad file descriptor) [pid 5865] close(27) = -1 EBADF (Bad file descriptor) [pid 5865] close(28) = -1 EBADF (Bad file descriptor) [pid 5865] close(29) = -1 EBADF (Bad file descriptor) [pid 5865] exit_group(0 [pid 5883] <... futex resumed>) = ? [pid 5866] <... futex resumed>) = ? [pid 5865] <... exit_group resumed>) = ? [pid 5883] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ [pid 5865] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./44/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./44/cgroup.cpu") = 0 [pid 5007] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./44/binderfs") = 0 [pid 5007] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./44/file0") = 0 [pid 5007] umount2("./44/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./44/cgroup") = 0 [pid 5007] umount2("./44/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./44/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./44") = 0 [pid 5007] mkdir("./45", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 137 ./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x5555571235e0, 24) = 0 [pid 5884] chdir("./45") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5884] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5884] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5884] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[138], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 138 [pid 5884] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5885 attached [pid 5885] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5885] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5885] close(3) = 0 [pid 5885] mkdir("./file0", 0777) = 0 [ 112.690793][ T5885] loop0: detected capacity change from 0 to 32768 [ 112.701737][ T5885] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5885) [ 112.719259][ T5885] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 112.728212][ T5885] BTRFS info (device loop0): using free space tree [pid 5885] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5885] chdir("./file0") = 0 [pid 5885] ioctl(4, LOOP_CLR_FD) = 0 [pid 5885] close(4) = 0 [pid 5885] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5885] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5884] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... openat resumed>) = 4 [pid 5884] <... futex resumed>) = 0 [pid 5885] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] <... futex resumed>) = 0 [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5884] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.748401][ T5885] BTRFS info (device loop0): enabling ssd optimizations [ 112.755523][ T5885] BTRFS info (device loop0): auto enabling async discard [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5884] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5884] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[139], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 139 [pid 5884] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5904 attached [pid 5904] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5904] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5904] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... futex resumed>) = 0 [pid 5904] <... futex resumed>) = 1 [pid 5884] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5884] <... futex resumed>) = 0 [ 112.789971][ T5885] BTRFS info (device loop0): balance: start -s [ 112.799233][ T5885] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5884] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 112.849378][ T5885] BTRFS info (device loop0): balance: ended with status: 0 [pid 5885] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5885] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] <... ioctl resumed>) = 0 [pid 5904] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5904] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] close(3) = 0 [pid 5884] close(4) = 0 [pid 5884] close(5) = 0 [pid 5884] close(6) = -1 EBADF (Bad file descriptor) [pid 5884] close(7) = -1 EBADF (Bad file descriptor) [pid 5884] close(8) = -1 EBADF (Bad file descriptor) [pid 5884] close(9) = -1 EBADF (Bad file descriptor) [pid 5884] close(10) = -1 EBADF (Bad file descriptor) [pid 5884] close(11) = -1 EBADF (Bad file descriptor) [pid 5884] close(12) = -1 EBADF (Bad file descriptor) [pid 5884] close(13) = -1 EBADF (Bad file descriptor) [pid 5884] close(14) = -1 EBADF (Bad file descriptor) [pid 5884] close(15) = -1 EBADF (Bad file descriptor) [pid 5884] close(16) = -1 EBADF (Bad file descriptor) [pid 5884] close(17) = -1 EBADF (Bad file descriptor) [pid 5884] close(18) = -1 EBADF (Bad file descriptor) [pid 5884] close(19) = -1 EBADF (Bad file descriptor) [pid 5884] close(20) = -1 EBADF (Bad file descriptor) [pid 5884] close(21) = -1 EBADF (Bad file descriptor) [pid 5884] close(22) = -1 EBADF (Bad file descriptor) [pid 5884] close(23) = -1 EBADF (Bad file descriptor) [pid 5884] close(24) = -1 EBADF (Bad file descriptor) [pid 5884] close(25) = -1 EBADF (Bad file descriptor) [pid 5884] close(26) = -1 EBADF (Bad file descriptor) [pid 5884] close(27) = -1 EBADF (Bad file descriptor) [pid 5884] close(28) = -1 EBADF (Bad file descriptor) [pid 5884] close(29) = -1 EBADF (Bad file descriptor) [pid 5884] exit_group(0) = ? [pid 5885] <... futex resumed>) = ? [pid 5904] <... futex resumed>) = ? [pid 5904] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5884] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./45/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./45/cgroup.cpu") = 0 [pid 5007] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./45/binderfs") = 0 [pid 5007] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./45/file0") = 0 [pid 5007] umount2("./45/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./45/cgroup") = 0 [pid 5007] umount2("./45/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./45/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./45") = 0 [pid 5007] mkdir("./46", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 140 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x5555571235e0, 24) = 0 [pid 5905] chdir("./46") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5905] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5905] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5905] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[141], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 141 [pid 5905] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5906] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5906] close(3) = 0 [pid 5906] mkdir("./file0", 0777) = 0 [ 113.359116][ T5906] loop0: detected capacity change from 0 to 32768 [ 113.370366][ T5906] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5906) [ 113.387369][ T5906] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.396168][ T5906] BTRFS info (device loop0): using free space tree [pid 5906] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5906] chdir("./file0") = 0 [pid 5906] ioctl(4, LOOP_CLR_FD) = 0 [pid 5906] close(4) = 0 [pid 5906] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5905] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... openat resumed>) = 4 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... futex resumed>) = 1 [ 113.415666][ T5906] BTRFS info (device loop0): enabling ssd optimizations [ 113.422922][ T5906] BTRFS info (device loop0): auto enabling async discard [pid 5906] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5905] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5905] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5905] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[142], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 142 [pid 5905] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5924] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5924] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 113.488251][ T5906] BTRFS info (device loop0): balance: start -s [ 113.519250][ T5906] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5905] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5924] <... ioctl resumed>) = 0 [pid 5924] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5906] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5906] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] close(5) = 0 [pid 5905] close(6) = -1 EBADF (Bad file descriptor) [pid 5905] close(7) = -1 EBADF (Bad file descriptor) [pid 5905] close(8) = -1 EBADF (Bad file descriptor) [pid 5905] close(9) = -1 EBADF (Bad file descriptor) [pid 5905] close(10) = -1 EBADF (Bad file descriptor) [pid 5905] close(11) = -1 EBADF (Bad file descriptor) [pid 5905] close(12) = -1 EBADF (Bad file descriptor) [pid 5905] close(13) = -1 EBADF (Bad file descriptor) [pid 5905] close(14) = -1 EBADF (Bad file descriptor) [pid 5905] close(15) = -1 EBADF (Bad file descriptor) [pid 5905] close(16) = -1 EBADF (Bad file descriptor) [pid 5905] close(17) = -1 EBADF (Bad file descriptor) [pid 5905] close(18) = -1 EBADF (Bad file descriptor) [pid 5905] close(19) = -1 EBADF (Bad file descriptor) [pid 5905] close(20) = -1 EBADF (Bad file descriptor) [pid 5905] close(21) = -1 EBADF (Bad file descriptor) [pid 5905] close(22) = -1 EBADF (Bad file descriptor) [pid 5905] close(23) = -1 EBADF (Bad file descriptor) [pid 5905] close(24) = -1 EBADF (Bad file descriptor) [pid 5905] close(25) = -1 EBADF (Bad file descriptor) [pid 5905] close(26) = -1 EBADF (Bad file descriptor) [pid 5905] close(27) = -1 EBADF (Bad file descriptor) [pid 5905] close(28) = -1 EBADF (Bad file descriptor) [pid 5905] close(29) = -1 EBADF (Bad file descriptor) [pid 5905] exit_group(0 [pid 5924] <... futex resumed>) = ? [pid 5906] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5924] +++ exited with 0 +++ [pid 5906] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 113.664401][ T5906] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./46/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./46/cgroup.cpu") = 0 [pid 5007] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./46/binderfs") = 0 [pid 5007] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./46/file0") = 0 [pid 5007] umount2("./46/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./46/cgroup") = 0 [pid 5007] umount2("./46/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./46/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./46") = 0 [pid 5007] mkdir("./47", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached [pid 5926] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 143 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5926] chdir("./47") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5926] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5926] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5926] write(3, "1000", 4) = 4 [pid 5926] close(3) = 0 [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5926] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5926] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[144], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 144 [pid 5926] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5927 attached [pid 5927] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5927] memfd_create("syzkaller", 0) = 3 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5927] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5927] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5927] close(3) = 0 [pid 5927] mkdir("./file0", 0777) = 0 [ 114.109055][ T5927] loop0: detected capacity change from 0 to 32768 [ 114.118841][ T5927] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5927) [ 114.137039][ T5927] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 114.146097][ T5927] BTRFS info (device loop0): using free space tree [pid 5927] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./file0") = 0 [pid 5927] ioctl(4, LOOP_CLR_FD) = 0 [pid 5927] close(4) = 0 [pid 5927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = 0 [pid 5927] <... futex resumed>) = 1 [pid 5927] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5926] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5927] <... openat resumed>) = 4 [pid 5927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5926] <... futex resumed>) = 0 [pid 5927] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5926] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 114.164677][ T5927] BTRFS info (device loop0): enabling ssd optimizations [ 114.171839][ T5927] BTRFS info (device loop0): auto enabling async discard [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5926] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5926] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5926] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5945 attached [pid 5945] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5945] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... clone resumed>, parent_tid=[145], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 145 [pid 5926] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5926] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5945] <... futex resumed>) = 0 [pid 5945] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5945] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 1 [pid 5926] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5945] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5926] <... futex resumed>) = 0 [ 114.249945][ T5927] BTRFS info (device loop0): balance: start -s [ 114.259198][ T5927] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5926] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5945] <... ioctl resumed>) = 0 [pid 5945] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] close(3) = 0 [pid 5926] close(4) = 0 [pid 5927] <... futex resumed>) = 0 [pid 5926] close(5 [pid 5927] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... close resumed>) = 0 [pid 5926] close(6) = -1 EBADF (Bad file descriptor) [pid 5926] close(7) = -1 EBADF (Bad file descriptor) [pid 5926] close(8) = -1 EBADF (Bad file descriptor) [pid 5926] close(9) = -1 EBADF (Bad file descriptor) [pid 5926] close(10) = -1 EBADF (Bad file descriptor) [pid 5926] close(11) = -1 EBADF (Bad file descriptor) [pid 5926] close(12) = -1 EBADF (Bad file descriptor) [pid 5926] close(13) = -1 EBADF (Bad file descriptor) [pid 5926] close(14) = -1 EBADF (Bad file descriptor) [pid 5926] close(15) = -1 EBADF (Bad file descriptor) [pid 5926] close(16) = -1 EBADF (Bad file descriptor) [pid 5926] close(17) = -1 EBADF (Bad file descriptor) [pid 5926] close(18) = -1 EBADF (Bad file descriptor) [pid 5926] close(19) = -1 EBADF (Bad file descriptor) [pid 5926] close(20) = -1 EBADF (Bad file descriptor) [pid 5926] close(21) = -1 EBADF (Bad file descriptor) [pid 5926] close(22) = -1 EBADF (Bad file descriptor) [pid 5926] close(23) = -1 EBADF (Bad file descriptor) [pid 5926] close(24) = -1 EBADF (Bad file descriptor) [pid 5926] close(25) = -1 EBADF (Bad file descriptor) [pid 5926] close(26) = -1 EBADF (Bad file descriptor) [pid 5926] close(27) = -1 EBADF (Bad file descriptor) [pid 5926] close(28) = -1 EBADF (Bad file descriptor) [pid 5926] close(29) = -1 EBADF (Bad file descriptor) [pid 5926] exit_group(0) = ? [pid 5945] <... futex resumed>) = ? [pid 5945] +++ exited with 0 +++ [pid 5927] <... futex resumed>) = ? [pid 5927] +++ exited with 0 +++ [pid 5926] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 114.425533][ T5927] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./47/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./47/cgroup.cpu") = 0 [pid 5007] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./47/binderfs") = 0 [pid 5007] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./47/file0") = 0 [pid 5007] umount2("./47/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./47/cgroup") = 0 [pid 5007] umount2("./47/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./47/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./47") = 0 [pid 5007] mkdir("./48", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5947 attached , child_tidptr=0x5555571235d0) = 146 [pid 5947] set_robust_list(0x5555571235e0, 24) = 0 [pid 5947] chdir("./48") = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5947] setpgid(0, 0) = 0 [pid 5947] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5947] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5947] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4) = 4 [pid 5947] close(3) = 0 [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5947] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5947] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x7fd090fc79e0, 24 [pid 5947] <... clone resumed>, parent_tid=[147], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 147 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5947] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5948] memfd_create("syzkaller", 0) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5948] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] close(3) = 0 [pid 5948] mkdir("./file0", 0777) = 0 [ 114.824162][ T5948] loop0: detected capacity change from 0 to 32768 [ 114.835354][ T5948] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5948) [ 114.852411][ T5948] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 114.861537][ T5948] BTRFS info (device loop0): using free space tree [pid 5948] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5948] chdir("./file0") = 0 [pid 5948] ioctl(4, LOOP_CLR_FD) = 0 [pid 5948] close(4) = 0 [pid 5948] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5948] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] <... futex resumed>) = 0 [pid 5947] <... futex resumed>) = 1 [pid 5948] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5947] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5948] <... futex resumed>) = 0 [pid 5948] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 114.881510][ T5948] BTRFS info (device loop0): enabling ssd optimizations [ 114.888679][ T5948] BTRFS info (device loop0): auto enabling async discard [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5947] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5947] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5947] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5965 attached , parent_tid=[148], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 148 [pid 5947] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5965] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5965] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = 1 [pid 5947] <... futex resumed>) = 0 [ 114.953961][ T5948] BTRFS info (device loop0): balance: start -s [ 114.962496][ T5948] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5947] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5965] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5947] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 115.012559][ T5948] BTRFS info (device loop0): balance: ended with status: 0 [pid 5948] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5948] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... ioctl resumed>) = 0 [pid 5965] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] close(3 [pid 5965] <... futex resumed>) = 0 [pid 5947] <... close resumed>) = 0 [pid 5947] close(4) = 0 [pid 5947] close(5) = 0 [pid 5947] close(6) = -1 EBADF (Bad file descriptor) [pid 5947] close(7) = -1 EBADF (Bad file descriptor) [pid 5947] close(8) = -1 EBADF (Bad file descriptor) [pid 5947] close(9) = -1 EBADF (Bad file descriptor) [pid 5947] close(10) = -1 EBADF (Bad file descriptor) [pid 5947] close(11) = -1 EBADF (Bad file descriptor) [pid 5947] close(12) = -1 EBADF (Bad file descriptor) [pid 5947] close(13) = -1 EBADF (Bad file descriptor) [pid 5947] close(14) = -1 EBADF (Bad file descriptor) [pid 5947] close(15) = -1 EBADF (Bad file descriptor) [pid 5947] close(16) = -1 EBADF (Bad file descriptor) [pid 5947] close(17) = -1 EBADF (Bad file descriptor) [pid 5947] close(18) = -1 EBADF (Bad file descriptor) [pid 5947] close(19) = -1 EBADF (Bad file descriptor) [pid 5947] close(20) = -1 EBADF (Bad file descriptor) [pid 5947] close(21) = -1 EBADF (Bad file descriptor) [pid 5947] close(22) = -1 EBADF (Bad file descriptor) [pid 5947] close(23) = -1 EBADF (Bad file descriptor) [pid 5947] close(24) = -1 EBADF (Bad file descriptor) [pid 5947] close(25) = -1 EBADF (Bad file descriptor) [pid 5947] close(26) = -1 EBADF (Bad file descriptor) [pid 5947] close(27) = -1 EBADF (Bad file descriptor) [pid 5947] close(28) = -1 EBADF (Bad file descriptor) [pid 5947] close(29) = -1 EBADF (Bad file descriptor) [pid 5947] exit_group(0 [pid 5948] <... futex resumed>) = ? [pid 5947] <... exit_group resumed>) = ? [pid 5948] +++ exited with 0 +++ [pid 5965] +++ exited with 0 +++ [pid 5947] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./48/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./48/cgroup.cpu") = 0 [pid 5007] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./48/binderfs") = 0 [pid 5007] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./48/file0") = 0 [pid 5007] umount2("./48/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./48/cgroup") = 0 [pid 5007] umount2("./48/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./48/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./48") = 0 [pid 5007] mkdir("./49", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 149 ./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x5555571235e0, 24) = 0 [pid 5966] chdir("./49") = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5966] setpgid(0, 0) = 0 [pid 5966] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5966] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5966] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5966] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5966] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[150], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 150 [pid 5966] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5967] memfd_create("syzkaller", 0) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5967] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5967] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5967] close(3) = 0 [pid 5967] mkdir("./file0", 0777) = 0 [ 115.505376][ T5967] loop0: detected capacity change from 0 to 32768 [ 115.516493][ T5967] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5967) [ 115.532951][ T5967] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.542090][ T5967] BTRFS info (device loop0): using free space tree [pid 5967] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5967] chdir("./file0") = 0 [pid 5967] ioctl(4, LOOP_CLR_FD) = 0 [pid 5967] close(4) = 0 [pid 5967] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5967] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5966] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] <... openat resumed>) = 4 [pid 5966] <... futex resumed>) = 0 [pid 5967] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5967] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5966] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.561357][ T5967] BTRFS info (device loop0): enabling ssd optimizations [ 115.568899][ T5967] BTRFS info (device loop0): auto enabling async discard [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5966] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5966] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5984 attached , parent_tid=[151], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 151 [pid 5966] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] set_robust_list(0x7fd089ba69e0, 24 [pid 5966] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5984] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5966] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5966] <... futex resumed>) = 0 [ 115.607488][ T5967] BTRFS info (device loop0): balance: start -s [ 115.616730][ T5967] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5966] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5967] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5967] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.688234][ T5967] BTRFS info (device loop0): balance: ended with status: 0 [pid 5967] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] <... ioctl resumed>) = 0 [pid 5984] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] close(5) = 0 [pid 5966] close(6) = -1 EBADF (Bad file descriptor) [pid 5966] close(7) = -1 EBADF (Bad file descriptor) [pid 5966] close(8) = -1 EBADF (Bad file descriptor) [pid 5966] close(9) = -1 EBADF (Bad file descriptor) [pid 5966] close(10) = -1 EBADF (Bad file descriptor) [pid 5966] close(11) = -1 EBADF (Bad file descriptor) [pid 5966] close(12) = -1 EBADF (Bad file descriptor) [pid 5966] close(13) = -1 EBADF (Bad file descriptor) [pid 5966] close(14) = -1 EBADF (Bad file descriptor) [pid 5966] close(15) = -1 EBADF (Bad file descriptor) [pid 5966] close(16) = -1 EBADF (Bad file descriptor) [pid 5966] close(17) = -1 EBADF (Bad file descriptor) [pid 5966] close(18) = -1 EBADF (Bad file descriptor) [pid 5966] close(19) = -1 EBADF (Bad file descriptor) [pid 5966] close(20) = -1 EBADF (Bad file descriptor) [pid 5966] close(21) = -1 EBADF (Bad file descriptor) [pid 5966] close(22) = -1 EBADF (Bad file descriptor) [pid 5966] close(23) = -1 EBADF (Bad file descriptor) [pid 5966] close(24) = -1 EBADF (Bad file descriptor) [pid 5966] close(25) = -1 EBADF (Bad file descriptor) [pid 5966] close(26) = -1 EBADF (Bad file descriptor) [pid 5966] close(27) = -1 EBADF (Bad file descriptor) [pid 5966] close(28) = -1 EBADF (Bad file descriptor) [pid 5966] close(29) = -1 EBADF (Bad file descriptor) [pid 5966] exit_group(0 [pid 5984] <... futex resumed>) = ? [pid 5967] <... futex resumed>) = ? [pid 5966] <... exit_group resumed>) = ? [pid 5984] +++ exited with 0 +++ [pid 5967] +++ exited with 0 +++ [pid 5966] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./49/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./49/cgroup.cpu") = 0 [pid 5007] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./49/binderfs") = 0 [pid 5007] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./49/file0") = 0 [pid 5007] umount2("./49/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./49/cgroup") = 0 [pid 5007] umount2("./49/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./49/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./49") = 0 [pid 5007] mkdir("./50", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 152 ./strace-static-x86_64: Process 5985 attached [pid 5985] set_robust_list(0x5555571235e0, 24) = 0 [pid 5985] chdir("./50") = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5985] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5985] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5985] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5986 attached [pid 5986] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5985] <... clone resumed>, parent_tid=[153], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 153 [pid 5986] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 5986] memfd_create("syzkaller", 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5986] <... memfd_create resumed>) = 3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5986] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5986] close(3) = 0 [pid 5986] mkdir("./file0", 0777) = 0 [ 116.162858][ T5986] loop0: detected capacity change from 0 to 32768 [ 116.174066][ T5986] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5986) [ 116.190892][ T5986] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.199848][ T5986] BTRFS info (device loop0): using free space tree [pid 5986] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5986] chdir("./file0") = 0 [pid 5986] ioctl(4, LOOP_CLR_FD) = 0 [pid 5986] close(4) = 0 [pid 5986] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] <... futex resumed>) = 1 [pid 5986] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5986] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] <... futex resumed>) = 1 [ 116.219168][ T5986] BTRFS info (device loop0): enabling ssd optimizations [ 116.226308][ T5986] BTRFS info (device loop0): auto enabling async discard [pid 5986] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5985] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5985] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6003] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... clone resumed>, parent_tid=[154], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 154 [pid 5985] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 6003] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6003] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5985] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6003] <... futex resumed>) = 0 [ 116.268104][ T5986] BTRFS info (device loop0): balance: start -s [ 116.276583][ T5986] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6003] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5986] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5986] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 116.361307][ T5986] BTRFS info (device loop0): balance: ended with status: 0 [pid 5986] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] <... ioctl resumed>) = 0 [pid 6003] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] close(3 [pid 6003] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... close resumed>) = 0 [pid 5985] close(4) = 0 [pid 5985] close(5) = 0 [pid 5985] close(6) = -1 EBADF (Bad file descriptor) [pid 5985] close(7) = -1 EBADF (Bad file descriptor) [pid 5985] close(8) = -1 EBADF (Bad file descriptor) [pid 5985] close(9) = -1 EBADF (Bad file descriptor) [pid 5985] close(10) = -1 EBADF (Bad file descriptor) [pid 5985] close(11) = -1 EBADF (Bad file descriptor) [pid 5985] close(12) = -1 EBADF (Bad file descriptor) [pid 5985] close(13) = -1 EBADF (Bad file descriptor) [pid 5985] close(14) = -1 EBADF (Bad file descriptor) [pid 5985] close(15) = -1 EBADF (Bad file descriptor) [pid 5985] close(16) = -1 EBADF (Bad file descriptor) [pid 5985] close(17) = -1 EBADF (Bad file descriptor) [pid 5985] close(18) = -1 EBADF (Bad file descriptor) [pid 5985] close(19) = -1 EBADF (Bad file descriptor) [pid 5985] close(20) = -1 EBADF (Bad file descriptor) [pid 5985] close(21) = -1 EBADF (Bad file descriptor) [pid 5985] close(22) = -1 EBADF (Bad file descriptor) [pid 5985] close(23) = -1 EBADF (Bad file descriptor) [pid 5985] close(24) = -1 EBADF (Bad file descriptor) [pid 5985] close(25) = -1 EBADF (Bad file descriptor) [pid 5985] close(26) = -1 EBADF (Bad file descriptor) [pid 5985] close(27) = -1 EBADF (Bad file descriptor) [pid 5985] close(28) = -1 EBADF (Bad file descriptor) [pid 5985] close(29) = -1 EBADF (Bad file descriptor) [pid 5985] exit_group(0 [pid 6003] <... futex resumed>) = ? [pid 5986] <... futex resumed>) = ? [pid 6003] +++ exited with 0 +++ [pid 5986] +++ exited with 0 +++ [pid 5985] <... exit_group resumed>) = ? [pid 5985] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./50/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./50/cgroup.cpu") = 0 [pid 5007] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./50/binderfs") = 0 [pid 5007] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./50/file0") = 0 [pid 5007] umount2("./50/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./50/cgroup") = 0 [pid 5007] umount2("./50/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./50/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./50") = 0 [pid 5007] mkdir("./51", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 155 [pid 6004] <... set_robust_list resumed>) = 0 [pid 6004] chdir("./51") = 0 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] setpgid(0, 0) = 0 [pid 6004] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6004] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6004] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6004] write(3, "1000", 4) = 4 [pid 6004] close(3) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6004] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6004] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6005 attached [pid 6005] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6005] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6004] <... clone resumed>, parent_tid=[156], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 156 [pid 6004] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6005] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6005] close(3) = 0 [pid 6005] mkdir("./file0", 0777) = 0 [ 116.855848][ T6005] loop0: detected capacity change from 0 to 32768 [ 116.867306][ T6005] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6005) [ 116.884807][ T6005] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.893765][ T6005] BTRFS info (device loop0): using free space tree [pid 6005] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6005] chdir("./file0") = 0 [pid 6005] ioctl(4, LOOP_CLR_FD) = 0 [pid 6005] close(4) = 0 [pid 6005] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6005] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6004] <... futex resumed>) = 0 [pid 6004] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6005] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... openat resumed>) = 4 [pid 6005] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6004] <... futex resumed>) = 0 [pid 6005] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6004] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 116.915671][ T6005] BTRFS info (device loop0): enabling ssd optimizations [ 116.922670][ T6005] BTRFS info (device loop0): auto enabling async discard [ 116.954479][ T6005] BTRFS info (device loop0): balance: start -s [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6004] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6004] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6004] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6022 attached , parent_tid=[157], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 157 [pid 6004] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] set_robust_list(0x7fd089ba69e0, 24 [pid 6004] <... futex resumed>) = 0 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6004] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6022] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = 1 [pid 6004] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6004] <... futex resumed>) = 0 [ 116.963902][ T6005] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6004] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 117.040652][ T6005] BTRFS info (device loop0): balance: ended with status: 0 [pid 6005] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6005] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6005] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6022] <... ioctl resumed>) = 0 [pid 6022] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] close(3 [pid 6022] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6004] <... close resumed>) = 0 [pid 6004] close(4) = 0 [pid 6004] close(5) = 0 [pid 6004] close(6) = -1 EBADF (Bad file descriptor) [pid 6004] close(7) = -1 EBADF (Bad file descriptor) [pid 6004] close(8) = -1 EBADF (Bad file descriptor) [pid 6004] close(9) = -1 EBADF (Bad file descriptor) [pid 6004] close(10) = -1 EBADF (Bad file descriptor) [pid 6004] close(11) = -1 EBADF (Bad file descriptor) [pid 6004] close(12) = -1 EBADF (Bad file descriptor) [pid 6004] close(13) = -1 EBADF (Bad file descriptor) [pid 6004] close(14) = -1 EBADF (Bad file descriptor) [pid 6004] close(15) = -1 EBADF (Bad file descriptor) [pid 6004] close(16) = -1 EBADF (Bad file descriptor) [pid 6004] close(17) = -1 EBADF (Bad file descriptor) [pid 6004] close(18) = -1 EBADF (Bad file descriptor) [pid 6004] close(19) = -1 EBADF (Bad file descriptor) [pid 6004] close(20) = -1 EBADF (Bad file descriptor) [pid 6004] close(21) = -1 EBADF (Bad file descriptor) [pid 6004] close(22) = -1 EBADF (Bad file descriptor) [pid 6004] close(23) = -1 EBADF (Bad file descriptor) [pid 6004] close(24) = -1 EBADF (Bad file descriptor) [pid 6004] close(25) = -1 EBADF (Bad file descriptor) [pid 6004] close(26) = -1 EBADF (Bad file descriptor) [pid 6004] close(27) = -1 EBADF (Bad file descriptor) [pid 6004] close(28) = -1 EBADF (Bad file descriptor) [pid 6004] close(29) = -1 EBADF (Bad file descriptor) [pid 6004] exit_group(0 [pid 6005] <... futex resumed>) = ? [pid 6022] <... futex resumed>) = ? [pid 6004] <... exit_group resumed>) = ? [pid 6005] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 6004] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./51/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./51/cgroup.cpu") = 0 [pid 5007] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./51/binderfs") = 0 [pid 5007] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./51/file0") = 0 [pid 5007] umount2("./51/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./51/cgroup") = 0 [pid 5007] umount2("./51/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./51/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./51") = 0 [pid 5007] mkdir("./52", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 158 ./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x5555571235e0, 24) = 0 [pid 6023] chdir("./52") = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6023] setpgid(0, 0) = 0 [pid 6023] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6023] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6023] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6023] write(3, "1000", 4) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6023] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6024 attached , parent_tid=[159], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 159 [pid 6024] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6023] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] memfd_create("syzkaller", 0 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... memfd_create resumed>) = 3 [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6024] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6024] close(3) = 0 [pid 6024] mkdir("./file0", 0777) = 0 [ 117.531049][ T6024] loop0: detected capacity change from 0 to 32768 [ 117.542586][ T6024] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6024) [ 117.560296][ T6024] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 117.569196][ T6024] BTRFS info (device loop0): using free space tree [pid 6024] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file0") = 0 [pid 6024] ioctl(4, LOOP_CLR_FD) = 0 [pid 6024] close(4) = 0 [pid 6024] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = 1 [pid 6024] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... openat resumed>) = 4 [pid 6024] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6024] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 117.589765][ T6024] BTRFS info (device loop0): enabling ssd optimizations [ 117.596921][ T6024] BTRFS info (device loop0): auto enabling async discard [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 117.650768][ T6024] BTRFS info (device loop0): balance: start -s [ 117.660247][ T6024] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6023] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6023] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6041 attached [pid 6041] set_robust_list(0x7fd089ba69e0, 24 [pid 6023] <... clone resumed>, parent_tid=[160], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 160 [pid 6041] <... set_robust_list resumed>) = 0 [pid 6023] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] openat(AT_FDCWD, ".", O_RDONLY [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] <... openat resumed>) = 5 [pid 6041] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6041] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6023] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6024] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.693355][ T6024] BTRFS info (device loop0): balance: ended with status: 0 [pid 6024] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6041] <... ioctl resumed>) = 0 [pid 6041] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6041] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] close(3) = 0 [pid 6023] close(4) = 0 [pid 6023] close(5) = 0 [pid 6023] close(6) = -1 EBADF (Bad file descriptor) [pid 6023] close(7) = -1 EBADF (Bad file descriptor) [pid 6023] close(8) = -1 EBADF (Bad file descriptor) [pid 6023] close(9) = -1 EBADF (Bad file descriptor) [pid 6023] close(10) = -1 EBADF (Bad file descriptor) [pid 6023] close(11) = -1 EBADF (Bad file descriptor) [pid 6023] close(12) = -1 EBADF (Bad file descriptor) [pid 6023] close(13) = -1 EBADF (Bad file descriptor) [pid 6023] close(14) = -1 EBADF (Bad file descriptor) [pid 6023] close(15) = -1 EBADF (Bad file descriptor) [pid 6023] close(16) = -1 EBADF (Bad file descriptor) [pid 6023] close(17) = -1 EBADF (Bad file descriptor) [pid 6023] close(18) = -1 EBADF (Bad file descriptor) [pid 6023] close(19) = -1 EBADF (Bad file descriptor) [pid 6023] close(20) = -1 EBADF (Bad file descriptor) [pid 6023] close(21) = -1 EBADF (Bad file descriptor) [pid 6023] close(22) = -1 EBADF (Bad file descriptor) [pid 6023] close(23) = -1 EBADF (Bad file descriptor) [pid 6023] close(24) = -1 EBADF (Bad file descriptor) [pid 6023] close(25) = -1 EBADF (Bad file descriptor) [pid 6023] close(26) = -1 EBADF (Bad file descriptor) [pid 6023] close(27) = -1 EBADF (Bad file descriptor) [pid 6023] close(28) = -1 EBADF (Bad file descriptor) [pid 6023] close(29) = -1 EBADF (Bad file descriptor) [pid 6023] exit_group(0 [pid 6024] <... futex resumed>) = ? [pid 6041] <... futex resumed>) = ? [pid 6023] <... exit_group resumed>) = ? [pid 6041] +++ exited with 0 +++ [pid 6024] +++ exited with 0 +++ [pid 6023] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=158, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./52/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./52/cgroup.cpu") = 0 [pid 5007] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./52/binderfs") = 0 [pid 5007] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./52/file0") = 0 [pid 5007] umount2("./52/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./52/cgroup") = 0 [pid 5007] umount2("./52/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./52/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./52") = 0 [pid 5007] mkdir("./53", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 161 ./strace-static-x86_64: Process 6042 attached [pid 6042] set_robust_list(0x5555571235e0, 24) = 0 [pid 6042] chdir("./53") = 0 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6042] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6042] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6042] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6042] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6042] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[162], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 162 [pid 6042] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6043 attached [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6043] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6043] memfd_create("syzkaller", 0) = 3 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6043] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6043] close(3) = 0 [pid 6043] mkdir("./file0", 0777) = 0 [ 118.230589][ T6043] loop0: detected capacity change from 0 to 32768 [ 118.241845][ T6043] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6043) [ 118.258849][ T6043] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.267772][ T6043] BTRFS info (device loop0): using free space tree [pid 6043] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6043] chdir("./file0") = 0 [pid 6043] ioctl(4, LOOP_CLR_FD) = 0 [pid 6043] close(4) = 0 [pid 6043] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = 0 [pid 6042] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... futex resumed>) = 1 [pid 6043] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6043] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = 0 [pid 6042] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... futex resumed>) = 1 [ 118.288044][ T6043] BTRFS info (device loop0): enabling ssd optimizations [ 118.295243][ T6043] BTRFS info (device loop0): auto enabling async discard [pid 6043] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6042] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6042] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6042] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6060 attached [pid 6060] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6060] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] <... clone resumed>, parent_tid=[163], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 163 [pid 6042] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... futex resumed>) = 0 [pid 6042] <... futex resumed>) = 1 [pid 6060] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6060] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6060] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6042] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6060] <... futex resumed>) = 0 [pid 6042] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 118.333426][ T6043] BTRFS info (device loop0): balance: start -s [ 118.342136][ T6043] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6060] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6043] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6043] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 118.387756][ T6043] BTRFS info (device loop0): balance: ended with status: 0 [pid 6060] <... ioctl resumed>) = 0 [pid 6060] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] close(3 [pid 6060] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] <... close resumed>) = 0 [pid 6042] close(4) = 0 [pid 6042] close(5) = 0 [pid 6042] close(6) = -1 EBADF (Bad file descriptor) [pid 6042] close(7) = -1 EBADF (Bad file descriptor) [pid 6042] close(8) = -1 EBADF (Bad file descriptor) [pid 6042] close(9) = -1 EBADF (Bad file descriptor) [pid 6042] close(10) = -1 EBADF (Bad file descriptor) [pid 6042] close(11) = -1 EBADF (Bad file descriptor) [pid 6042] close(12) = -1 EBADF (Bad file descriptor) [pid 6042] close(13) = -1 EBADF (Bad file descriptor) [pid 6042] close(14) = -1 EBADF (Bad file descriptor) [pid 6042] close(15) = -1 EBADF (Bad file descriptor) [pid 6042] close(16) = -1 EBADF (Bad file descriptor) [pid 6042] close(17) = -1 EBADF (Bad file descriptor) [pid 6042] close(18) = -1 EBADF (Bad file descriptor) [pid 6042] close(19) = -1 EBADF (Bad file descriptor) [pid 6042] close(20) = -1 EBADF (Bad file descriptor) [pid 6042] close(21) = -1 EBADF (Bad file descriptor) [pid 6042] close(22) = -1 EBADF (Bad file descriptor) [pid 6042] close(23) = -1 EBADF (Bad file descriptor) [pid 6042] close(24) = -1 EBADF (Bad file descriptor) [pid 6042] close(25) = -1 EBADF (Bad file descriptor) [pid 6042] close(26) = -1 EBADF (Bad file descriptor) [pid 6042] close(27) = -1 EBADF (Bad file descriptor) [pid 6042] close(28) = -1 EBADF (Bad file descriptor) [pid 6042] close(29) = -1 EBADF (Bad file descriptor) [pid 6042] exit_group(0 [pid 6043] <... futex resumed>) = ? [pid 6060] <... futex resumed>) = ? [pid 6042] <... exit_group resumed>) = ? [pid 6043] +++ exited with 0 +++ [pid 6060] +++ exited with 0 +++ [pid 6042] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=161, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./53/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./53/cgroup.cpu") = 0 [pid 5007] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./53/binderfs") = 0 [pid 5007] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./53/file0") = 0 [pid 5007] umount2("./53/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./53/cgroup") = 0 [pid 5007] umount2("./53/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./53/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./53") = 0 [pid 5007] mkdir("./54", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 164 ./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x5555571235e0, 24) = 0 [pid 6061] chdir("./54") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6061] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6061] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6061] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6062 attached [pid 6062] set_robust_list(0x7fd090fc79e0, 24 [pid 6061] <... clone resumed>, parent_tid=[165], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 165 [pid 6061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6062] memfd_create("syzkaller", 0) = 3 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6062] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6062] close(3) = 0 [pid 6062] mkdir("./file0", 0777) = 0 [ 118.907932][ T6062] loop0: detected capacity change from 0 to 32768 [ 118.919101][ T6062] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6062) [ 118.936912][ T6062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.945809][ T6062] BTRFS info (device loop0): using free space tree [pid 6062] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file0") = 0 [pid 6062] ioctl(4, LOOP_CLR_FD) = 0 [pid 6062] close(4) = 0 [pid 6062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6062] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... openat resumed>) = 4 [pid 6061] <... futex resumed>) = 0 [pid 6062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6062] <... futex resumed>) = 0 [pid 6061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.965116][ T6062] BTRFS info (device loop0): enabling ssd optimizations [ 118.972174][ T6062] BTRFS info (device loop0): auto enabling async discard [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6061] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6061] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[166], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 166 [pid 6061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 119.009924][ T6062] BTRFS info (device loop0): balance: start -s [ 119.018750][ T6062] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6079] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] <... futex resumed>) = 1 [pid 6079] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 119.063395][ T6062] BTRFS info (device loop0): balance: ended with status: 0 [pid 6062] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] <... ioctl resumed>) = 0 [pid 6079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] close(5) = 0 [pid 6061] close(6) = -1 EBADF (Bad file descriptor) [pid 6061] close(7) = -1 EBADF (Bad file descriptor) [pid 6061] close(8) = -1 EBADF (Bad file descriptor) [pid 6061] close(9) = -1 EBADF (Bad file descriptor) [pid 6061] close(10) = -1 EBADF (Bad file descriptor) [pid 6061] close(11) = -1 EBADF (Bad file descriptor) [pid 6061] close(12) = -1 EBADF (Bad file descriptor) [pid 6061] close(13) = -1 EBADF (Bad file descriptor) [pid 6061] close(14) = -1 EBADF (Bad file descriptor) [pid 6061] close(15) = -1 EBADF (Bad file descriptor) [pid 6061] close(16) = -1 EBADF (Bad file descriptor) [pid 6061] close(17) = -1 EBADF (Bad file descriptor) [pid 6061] close(18) = -1 EBADF (Bad file descriptor) [pid 6061] close(19) = -1 EBADF (Bad file descriptor) [pid 6061] close(20) = -1 EBADF (Bad file descriptor) [pid 6061] close(21) = -1 EBADF (Bad file descriptor) [pid 6061] close(22) = -1 EBADF (Bad file descriptor) [pid 6061] close(23) = -1 EBADF (Bad file descriptor) [pid 6061] close(24) = -1 EBADF (Bad file descriptor) [pid 6061] close(25) = -1 EBADF (Bad file descriptor) [pid 6061] close(26) = -1 EBADF (Bad file descriptor) [pid 6061] close(27) = -1 EBADF (Bad file descriptor) [pid 6061] close(28) = -1 EBADF (Bad file descriptor) [pid 6061] close(29) = -1 EBADF (Bad file descriptor) [pid 6061] exit_group(0 [pid 6079] <... futex resumed>) = ? [pid 6062] <... futex resumed>) = ? [pid 6061] <... exit_group resumed>) = ? [pid 6079] +++ exited with 0 +++ [pid 6062] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=164, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./54/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./54/cgroup.cpu") = 0 [pid 5007] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./54/binderfs") = 0 [pid 5007] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./54/file0") = 0 [pid 5007] umount2("./54/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./54/cgroup") = 0 [pid 5007] umount2("./54/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./54/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./54") = 0 [pid 5007] mkdir("./55", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 167 ./strace-static-x86_64: Process 6080 attached [pid 6080] set_robust_list(0x5555571235e0, 24) = 0 [pid 6080] chdir("./55") = 0 [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6080] setpgid(0, 0) = 0 [pid 6080] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6080] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6080] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6080] write(3, "1000", 4) = 4 [pid 6080] close(3) = 0 [pid 6080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6080] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6080] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6081 attached [pid 6081] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] <... clone resumed>, parent_tid=[168], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 168 [pid 6080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = 1 [pid 6081] memfd_create("syzkaller", 0 [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6081] <... memfd_create resumed>) = 3 [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6081] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6081] close(3) = 0 [pid 6081] mkdir("./file0", 0777) = 0 [ 119.608228][ T6081] loop0: detected capacity change from 0 to 32768 [ 119.618783][ T6081] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6081) [ 119.635957][ T6081] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 119.644722][ T6081] BTRFS info (device loop0): using free space tree [pid 6081] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6081] chdir("./file0") = 0 [pid 6081] ioctl(4, LOOP_CLR_FD) = 0 [pid 6081] close(4) = 0 [pid 6081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6080] <... futex resumed>) = 0 [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6081] <... openat resumed>) = 4 [pid 6081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = 1 [pid 6081] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 119.663596][ T6081] BTRFS info (device loop0): enabling ssd optimizations [ 119.670824][ T6081] BTRFS info (device loop0): auto enabling async discard [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6080] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6080] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6080] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] <... clone resumed>, parent_tid=[169], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 169 [pid 6080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = 0 [pid 6098] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.715511][ T6081] BTRFS info (device loop0): balance: start -s [ 119.734076][ T6081] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6098] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6098] <... ioctl resumed>) = 0 [pid 6098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] close(3) = 0 [pid 6080] close(4) = 0 [pid 6080] close(5) = 0 [pid 6080] close(6) = -1 EBADF (Bad file descriptor) [pid 6080] close(7) = -1 EBADF (Bad file descriptor) [pid 6080] close(8) = -1 EBADF (Bad file descriptor) [pid 6080] close(9) = -1 EBADF (Bad file descriptor) [pid 6080] close(10) = -1 EBADF (Bad file descriptor) [pid 6080] close(11) = -1 EBADF (Bad file descriptor) [pid 6080] close(12) = -1 EBADF (Bad file descriptor) [pid 6080] close(13) = -1 EBADF (Bad file descriptor) [pid 6080] close(14) = -1 EBADF (Bad file descriptor) [pid 6080] close(15) = -1 EBADF (Bad file descriptor) [pid 6080] close(16) = -1 EBADF (Bad file descriptor) [pid 6080] close(17) = -1 EBADF (Bad file descriptor) [pid 6080] close(18) = -1 EBADF (Bad file descriptor) [pid 6080] close(19) = -1 EBADF (Bad file descriptor) [pid 6080] close(20) = -1 EBADF (Bad file descriptor) [pid 6080] close(21) = -1 EBADF (Bad file descriptor) [pid 6080] close(22) = -1 EBADF (Bad file descriptor) [pid 6080] close(23) = -1 EBADF (Bad file descriptor) [pid 6080] close(24) = -1 EBADF (Bad file descriptor) [pid 6080] close(25) = -1 EBADF (Bad file descriptor) [pid 6080] close(26) = -1 EBADF (Bad file descriptor) [pid 6080] close(27) = -1 EBADF (Bad file descriptor) [pid 6080] close(28) = -1 EBADF (Bad file descriptor) [pid 6080] close(29) = -1 EBADF (Bad file descriptor) [pid 6080] exit_group(0 [pid 6098] <... futex resumed>) = ? [pid 6081] <... futex resumed>) = ? [pid 6080] <... exit_group resumed>) = ? [pid 6098] +++ exited with 0 +++ [pid 6081] +++ exited with 0 +++ [pid 6080] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=167, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5007] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./55/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./55/cgroup.cpu") = 0 [pid 5007] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./55/binderfs") = 0 [ 119.936114][ T6081] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./55/file0") = 0 [pid 5007] umount2("./55/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./55/cgroup") = 0 [pid 5007] umount2("./55/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./55/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./55") = 0 [pid 5007] mkdir("./56", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 170 ./strace-static-x86_64: Process 6099 attached [pid 6099] set_robust_list(0x5555571235e0, 24) = 0 [pid 6099] chdir("./56") = 0 [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6099] setpgid(0, 0) = 0 [pid 6099] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6099] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6099] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6099] write(3, "1000", 4) = 4 [pid 6099] close(3) = 0 [pid 6099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6099] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6099] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6100 attached [pid 6100] set_robust_list(0x7fd090fc79e0, 24 [pid 6099] <... clone resumed>, parent_tid=[171], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 171 [pid 6100] <... set_robust_list resumed>) = 0 [pid 6099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6100] memfd_create("syzkaller", 0) = 3 [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6100] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6100] close(3) = 0 [pid 6100] mkdir("./file0", 0777) = 0 [ 120.342254][ T6100] loop0: detected capacity change from 0 to 32768 [ 120.353760][ T6100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6100) [ 120.371687][ T6100] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 120.380795][ T6100] BTRFS info (device loop0): using free space tree [pid 6100] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6100] chdir("./file0") = 0 [pid 6100] ioctl(4, LOOP_CLR_FD) = 0 [pid 6100] close(4) = 0 [pid 6100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6099] <... futex resumed>) = 0 [pid 6100] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] <... openat resumed>) = 4 [pid 6099] <... futex resumed>) = 0 [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6099] <... futex resumed>) = 0 [pid 6100] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.401731][ T6100] BTRFS info (device loop0): enabling ssd optimizations [ 120.408903][ T6100] BTRFS info (device loop0): auto enabling async discard [ 120.456652][ T6100] BTRFS info (device loop0): balance: start -s [ 120.466747][ T6100] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6099] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6099] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6099] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6117 attached [pid 6117] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... clone resumed>, parent_tid=[172], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 172 [pid 6099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = 0 [pid 6099] <... futex resumed>) = 1 [pid 6117] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6117] <... futex resumed>) = 0 [pid 6099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 120.503684][ T6100] BTRFS info (device loop0): balance: ended with status: 0 [pid 6117] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6100] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6117] <... ioctl resumed>) = 0 [pid 6117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] close(3 [pid 6117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... close resumed>) = 0 [pid 6099] close(4) = 0 [pid 6099] close(5) = 0 [pid 6099] close(6) = -1 EBADF (Bad file descriptor) [pid 6099] close(7) = -1 EBADF (Bad file descriptor) [pid 6099] close(8) = -1 EBADF (Bad file descriptor) [pid 6099] close(9) = -1 EBADF (Bad file descriptor) [pid 6099] close(10) = -1 EBADF (Bad file descriptor) [pid 6099] close(11) = -1 EBADF (Bad file descriptor) [pid 6099] close(12) = -1 EBADF (Bad file descriptor) [pid 6099] close(13) = -1 EBADF (Bad file descriptor) [pid 6099] close(14) = -1 EBADF (Bad file descriptor) [pid 6099] close(15) = -1 EBADF (Bad file descriptor) [pid 6099] close(16) = -1 EBADF (Bad file descriptor) [pid 6099] close(17) = -1 EBADF (Bad file descriptor) [pid 6099] close(18) = -1 EBADF (Bad file descriptor) [pid 6099] close(19) = -1 EBADF (Bad file descriptor) [pid 6099] close(20) = -1 EBADF (Bad file descriptor) [pid 6099] close(21) = -1 EBADF (Bad file descriptor) [pid 6099] close(22) = -1 EBADF (Bad file descriptor) [pid 6099] close(23) = -1 EBADF (Bad file descriptor) [pid 6099] close(24) = -1 EBADF (Bad file descriptor) [pid 6099] close(25) = -1 EBADF (Bad file descriptor) [pid 6099] close(26) = -1 EBADF (Bad file descriptor) [pid 6099] close(27) = -1 EBADF (Bad file descriptor) [pid 6099] close(28) = -1 EBADF (Bad file descriptor) [pid 6099] close(29) = -1 EBADF (Bad file descriptor) [pid 6099] exit_group(0 [pid 6117] <... futex resumed>) = ? [pid 6100] <... futex resumed>) = ? [pid 6099] <... exit_group resumed>) = ? [pid 6117] +++ exited with 0 +++ [pid 6100] +++ exited with 0 +++ [pid 6099] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=170, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./56/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./56/cgroup.cpu") = 0 [pid 5007] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./56/binderfs") = 0 [pid 5007] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./56/file0") = 0 [pid 5007] umount2("./56/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./56/cgroup") = 0 [pid 5007] umount2("./56/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./56/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./56") = 0 [pid 5007] mkdir("./57", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6118 attached , child_tidptr=0x5555571235d0) = 173 [pid 6118] set_robust_list(0x5555571235e0, 24) = 0 [pid 6118] chdir("./57") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6118] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6118] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[174], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 174 [pid 6118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6119] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] mkdir("./file0", 0777) = 0 [ 121.084707][ T6119] loop0: detected capacity change from 0 to 32768 [ 121.095325][ T6119] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6119) [ 121.113396][ T6119] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.122384][ T6119] BTRFS info (device loop0): using free space tree [pid 6119] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file0") = 0 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6119] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... openat resumed>) = 4 [pid 6119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6119] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 121.144149][ T6119] BTRFS info (device loop0): enabling ssd optimizations [ 121.151602][ T6119] BTRFS info (device loop0): auto enabling async discard [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6118] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6118] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... clone resumed>, parent_tid=[175], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 175 [pid 6118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6136] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6136] <... futex resumed>) = 0 [ 121.207610][ T6119] BTRFS info (device loop0): balance: start -s [ 121.218426][ T6119] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6136] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 121.306356][ T6119] BTRFS info (device loop0): balance: ended with status: 0 [pid 6136] <... ioctl resumed>) = 0 [pid 6136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] close(3 [pid 6119] <... futex resumed>) = 0 [pid 6119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... close resumed>) = 0 [pid 6118] close(4) = 0 [pid 6118] close(5) = 0 [pid 6118] close(6) = -1 EBADF (Bad file descriptor) [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8) = -1 EBADF (Bad file descriptor) [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0 [pid 6136] <... futex resumed>) = ? [pid 6118] <... exit_group resumed>) = ? [pid 6119] <... futex resumed>) = ? [pid 6136] +++ exited with 0 +++ [pid 6119] +++ exited with 0 +++ [pid 6118] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=173, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./57/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./57/cgroup.cpu") = 0 [pid 5007] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./57/binderfs") = 0 [pid 5007] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./57/file0") = 0 [pid 5007] umount2("./57/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./57/cgroup") = 0 [pid 5007] umount2("./57/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./57/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./57") = 0 [pid 5007] mkdir("./58", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 176 ./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x5555571235e0, 24) = 0 [pid 6137] chdir("./58") = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6137] setpgid(0, 0) = 0 [pid 6137] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6137] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6137] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6137] write(3, "1000", 4) = 4 [pid 6137] close(3) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6137] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6137] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6138 attached [pid 6138] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6137] <... clone resumed>, parent_tid=[177], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 177 [pid 6137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] memfd_create("syzkaller", 0 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6138] <... memfd_create resumed>) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6138] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6138] close(3) = 0 [pid 6138] mkdir("./file0", 0777) = 0 [ 121.775521][ T6138] loop0: detected capacity change from 0 to 32768 [ 121.786883][ T6138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6138) [ 121.804666][ T6138] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.813511][ T6138] BTRFS info (device loop0): using free space tree [pid 6138] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6138] chdir("./file0") = 0 [pid 6138] ioctl(4, LOOP_CLR_FD) = 0 [pid 6138] close(4) = 0 [pid 6138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6138] <... futex resumed>) = 1 [pid 6137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6137] <... futex resumed>) = 0 [ 121.833961][ T6138] BTRFS info (device loop0): enabling ssd optimizations [ 121.841086][ T6138] BTRFS info (device loop0): auto enabling async discard [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6137] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6137] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6137] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6155 attached , parent_tid=[178], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 178 [pid 6155] set_robust_list(0x7fd089ba69e0, 24 [pid 6137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 121.891021][ T6138] BTRFS info (device loop0): balance: start -s [ 121.899992][ T6138] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 121.941560][ T6138] BTRFS info (device loop0): balance: ended with status: 0 [pid 6155] <... ioctl resumed>) = 0 [pid 6155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] close(3 [pid 6155] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... close resumed>) = 0 [pid 6137] close(4) = 0 [pid 6137] close(5) = 0 [pid 6137] close(6) = -1 EBADF (Bad file descriptor) [pid 6137] close(7) = -1 EBADF (Bad file descriptor) [pid 6137] close(8) = -1 EBADF (Bad file descriptor) [pid 6137] close(9) = -1 EBADF (Bad file descriptor) [pid 6137] close(10) = -1 EBADF (Bad file descriptor) [pid 6137] close(11) = -1 EBADF (Bad file descriptor) [pid 6137] close(12) = -1 EBADF (Bad file descriptor) [pid 6137] close(13) = -1 EBADF (Bad file descriptor) [pid 6137] close(14) = -1 EBADF (Bad file descriptor) [pid 6137] close(15) = -1 EBADF (Bad file descriptor) [pid 6137] close(16) = -1 EBADF (Bad file descriptor) [pid 6137] close(17) = -1 EBADF (Bad file descriptor) [pid 6137] close(18) = -1 EBADF (Bad file descriptor) [pid 6137] close(19) = -1 EBADF (Bad file descriptor) [pid 6137] close(20) = -1 EBADF (Bad file descriptor) [pid 6137] close(21) = -1 EBADF (Bad file descriptor) [pid 6137] close(22) = -1 EBADF (Bad file descriptor) [pid 6137] close(23) = -1 EBADF (Bad file descriptor) [pid 6137] close(24) = -1 EBADF (Bad file descriptor) [pid 6137] close(25) = -1 EBADF (Bad file descriptor) [pid 6137] close(26) = -1 EBADF (Bad file descriptor) [pid 6137] close(27) = -1 EBADF (Bad file descriptor) [pid 6137] close(28) = -1 EBADF (Bad file descriptor) [pid 6137] close(29) = -1 EBADF (Bad file descriptor) [pid 6137] exit_group(0 [pid 6155] <... futex resumed>) = ? [pid 6138] <... futex resumed>) = ? [pid 6137] <... exit_group resumed>) = ? [pid 6155] +++ exited with 0 +++ [pid 6138] +++ exited with 0 +++ [pid 6137] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=176, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./58/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./58/cgroup.cpu") = 0 [pid 5007] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./58/binderfs") = 0 [pid 5007] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./58/file0") = 0 [pid 5007] umount2("./58/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./58/cgroup") = 0 [pid 5007] umount2("./58/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./58/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./58") = 0 [pid 5007] mkdir("./59", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6156 attached , child_tidptr=0x5555571235d0) = 179 [pid 6156] set_robust_list(0x5555571235e0, 24) = 0 [pid 6156] chdir("./59") = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6156] setpgid(0, 0) = 0 [pid 6156] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6156] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6156] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6156] write(3, "1000", 4) = 4 [pid 6156] close(3) = 0 [pid 6156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6156] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6156] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[180], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 180 [pid 6156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6157 attached [pid 6157] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6157] memfd_create("syzkaller", 0) = 3 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6157] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6157] close(3) = 0 [pid 6157] mkdir("./file0", 0777) = 0 [ 122.478736][ T6157] loop0: detected capacity change from 0 to 32768 [ 122.490154][ T6157] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6157) [ 122.505809][ T6157] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 122.514569][ T6157] BTRFS info (device loop0): using free space tree [pid 6157] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6157] chdir("./file0") = 0 [pid 6157] ioctl(4, LOOP_CLR_FD) = 0 [pid 6157] close(4) = 0 [pid 6157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6156] <... futex resumed>) = 0 [pid 6157] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6157] <... openat resumed>) = 4 [pid 6157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6156] <... futex resumed>) = 0 [pid 6157] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.534078][ T6157] BTRFS info (device loop0): enabling ssd optimizations [ 122.541408][ T6157] BTRFS info (device loop0): auto enabling async discard [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6156] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6156] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6156] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6174 attached [pid 6174] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... clone resumed>, parent_tid=[181], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 181 [ 122.583640][ T6157] BTRFS info (device loop0): balance: start -s [ 122.592731][ T6157] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] <... futex resumed>) = 0 [pid 6174] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] <... futex resumed>) = 0 [pid 6174] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 122.633724][ T6157] BTRFS info (device loop0): balance: ended with status: 0 [pid 6156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6157] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6174] <... ioctl resumed>) = 0 [pid 6174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] close(3 [pid 6174] <... futex resumed>) = 0 [pid 6174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... close resumed>) = 0 [pid 6156] close(4) = 0 [pid 6156] close(5) = 0 [pid 6156] close(6) = -1 EBADF (Bad file descriptor) [pid 6156] close(7) = -1 EBADF (Bad file descriptor) [pid 6156] close(8) = -1 EBADF (Bad file descriptor) [pid 6156] close(9) = -1 EBADF (Bad file descriptor) [pid 6156] close(10) = -1 EBADF (Bad file descriptor) [pid 6156] close(11) = -1 EBADF (Bad file descriptor) [pid 6156] close(12) = -1 EBADF (Bad file descriptor) [pid 6156] close(13) = -1 EBADF (Bad file descriptor) [pid 6156] close(14) = -1 EBADF (Bad file descriptor) [pid 6156] close(15) = -1 EBADF (Bad file descriptor) [pid 6156] close(16) = -1 EBADF (Bad file descriptor) [pid 6156] close(17) = -1 EBADF (Bad file descriptor) [pid 6156] close(18) = -1 EBADF (Bad file descriptor) [pid 6156] close(19) = -1 EBADF (Bad file descriptor) [pid 6156] close(20) = -1 EBADF (Bad file descriptor) [pid 6156] close(21) = -1 EBADF (Bad file descriptor) [pid 6156] close(22) = -1 EBADF (Bad file descriptor) [pid 6156] close(23) = -1 EBADF (Bad file descriptor) [pid 6156] close(24) = -1 EBADF (Bad file descriptor) [pid 6156] close(25) = -1 EBADF (Bad file descriptor) [pid 6156] close(26) = -1 EBADF (Bad file descriptor) [pid 6156] close(27) = -1 EBADF (Bad file descriptor) [pid 6156] close(28) = -1 EBADF (Bad file descriptor) [pid 6156] close(29) = -1 EBADF (Bad file descriptor) [pid 6156] exit_group(0 [pid 6174] <... futex resumed>) = ? [pid 6157] <... futex resumed>) = ? [pid 6156] <... exit_group resumed>) = ? [pid 6174] +++ exited with 0 +++ [pid 6157] +++ exited with 0 +++ [pid 6156] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=179, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./59/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./59/cgroup.cpu") = 0 [pid 5007] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./59/binderfs") = 0 [pid 5007] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./59/file0") = 0 [pid 5007] umount2("./59/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./59/cgroup") = 0 [pid 5007] umount2("./59/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./59/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./59") = 0 [pid 5007] mkdir("./60", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 182 ./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x5555571235e0, 24) = 0 [pid 6175] chdir("./60") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6175] setpgid(0, 0) = 0 [pid 6175] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6175] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6175] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6175] write(3, "1000", 4) = 4 [pid 6175] close(3) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6175] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6175] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x7fd090fc79e0, 24 [pid 6175] <... clone resumed>, parent_tid=[183], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 183 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6175] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6176] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6176] close(3) = 0 [pid 6176] mkdir("./file0", 0777) = 0 [ 123.181378][ T6176] loop0: detected capacity change from 0 to 32768 [ 123.192972][ T6176] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6176) [ 123.210870][ T6176] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.220034][ T6176] BTRFS info (device loop0): using free space tree [pid 6176] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6176] chdir("./file0") = 0 [pid 6176] ioctl(4, LOOP_CLR_FD) = 0 [pid 6176] close(4) = 0 [pid 6176] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6175] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] <... openat resumed>) = 4 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... futex resumed>) = 1 [ 123.239951][ T6176] BTRFS info (device loop0): enabling ssd optimizations [ 123.247457][ T6176] BTRFS info (device loop0): auto enabling async discard [pid 6176] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6175] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6175] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x7fd089ba69e0, 24 [pid 6175] <... clone resumed>, parent_tid=[184], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 184 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6175] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] openat(AT_FDCWD, ".", O_RDONLY [pid 6175] <... futex resumed>) = 0 [pid 6193] <... openat resumed>) = 5 [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6193] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6175] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6176] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.282594][ T6176] BTRFS info (device loop0): balance: start -s [ 123.290864][ T6176] BTRFS info (device loop0): relocating block group 1048576 flags system [ 123.319383][ T6176] BTRFS info (device loop0): balance: ended with status: 0 [pid 6176] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6193] <... ioctl resumed>) = 0 [pid 6193] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] close(3) = 0 [pid 6175] close(4) = 0 [pid 6175] close(5) = 0 [pid 6175] close(6) = -1 EBADF (Bad file descriptor) [pid 6175] close(7) = -1 EBADF (Bad file descriptor) [pid 6175] close(8) = -1 EBADF (Bad file descriptor) [pid 6175] close(9) = -1 EBADF (Bad file descriptor) [pid 6175] close(10) = -1 EBADF (Bad file descriptor) [pid 6175] close(11) = -1 EBADF (Bad file descriptor) [pid 6175] close(12) = -1 EBADF (Bad file descriptor) [pid 6175] close(13) = -1 EBADF (Bad file descriptor) [pid 6175] close(14) = -1 EBADF (Bad file descriptor) [pid 6175] close(15) = -1 EBADF (Bad file descriptor) [pid 6175] close(16) = -1 EBADF (Bad file descriptor) [pid 6175] close(17) = -1 EBADF (Bad file descriptor) [pid 6175] close(18) = -1 EBADF (Bad file descriptor) [pid 6175] close(19) = -1 EBADF (Bad file descriptor) [pid 6175] close(20) = -1 EBADF (Bad file descriptor) [pid 6175] close(21) = -1 EBADF (Bad file descriptor) [pid 6175] close(22) = -1 EBADF (Bad file descriptor) [pid 6175] close(23) = -1 EBADF (Bad file descriptor) [pid 6175] close(24) = -1 EBADF (Bad file descriptor) [pid 6175] close(25) = -1 EBADF (Bad file descriptor) [pid 6175] close(26) = -1 EBADF (Bad file descriptor) [pid 6175] close(27) = -1 EBADF (Bad file descriptor) [pid 6175] close(28) = -1 EBADF (Bad file descriptor) [pid 6175] close(29) = -1 EBADF (Bad file descriptor) [pid 6175] exit_group(0 [pid 6193] <... futex resumed>) = ? [pid 6176] <... futex resumed>) = ? [pid 6175] <... exit_group resumed>) = ? [pid 6193] +++ exited with 0 +++ [pid 6176] +++ exited with 0 +++ [pid 6175] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=182, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./60/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./60/cgroup.cpu") = 0 [pid 5007] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./60/binderfs") = 0 [pid 5007] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./60/file0") = 0 [pid 5007] umount2("./60/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./60/cgroup") = 0 [pid 5007] umount2("./60/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./60/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./60") = 0 [pid 5007] mkdir("./61", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6194 attached [pid 6194] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 185 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6194] chdir("./61") = 0 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] setpgid(0, 0) = 0 [pid 6194] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6194] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6194] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6194] write(3, "1000", 4) = 4 [pid 6194] close(3) = 0 [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6194] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6195 attached , parent_tid=[186], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 186 [pid 6195] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6195] memfd_create("syzkaller", 0 [pid 6194] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... memfd_create resumed>) = 3 [pid 6194] <... futex resumed>) = 0 [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6195] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6195] close(3) = 0 [pid 6195] mkdir("./file0", 0777) = 0 [ 123.842518][ T6195] loop0: detected capacity change from 0 to 32768 [ 123.853776][ T6195] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6195) [ 123.874966][ T6195] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.883837][ T6195] BTRFS info (device loop0): using free space tree [pid 6195] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6195] chdir("./file0") = 0 [pid 6195] ioctl(4, LOOP_CLR_FD) = 0 [pid 6195] close(4) = 0 [pid 6195] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] <... futex resumed>) = 0 [pid 6195] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6194] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6195] <... openat resumed>) = 4 [pid 6195] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] <... futex resumed>) = 0 [pid 6195] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6194] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.905367][ T6195] BTRFS info (device loop0): enabling ssd optimizations [ 123.912413][ T6195] BTRFS info (device loop0): auto enabling async discard [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6194] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6194] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6212 attached [pid 6212] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6212] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] <... clone resumed>, parent_tid=[187], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 187 [pid 6194] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... futex resumed>) = 0 [pid 6194] <... futex resumed>) = 1 [pid 6212] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6212] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 123.963882][ T6195] BTRFS info (device loop0): balance: start -s [ 123.976626][ T6195] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6194] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 0 [pid 6212] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6194] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 124.022176][ T6195] BTRFS info (device loop0): balance: ended with status: 0 [pid 6195] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6195] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6195] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] <... ioctl resumed>) = 0 [pid 6212] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] close(3) = 0 [pid 6194] close(4) = 0 [pid 6194] close(5) = 0 [pid 6194] close(6) = -1 EBADF (Bad file descriptor) [pid 6194] close(7) = -1 EBADF (Bad file descriptor) [pid 6194] close(8) = -1 EBADF (Bad file descriptor) [pid 6194] close(9) = -1 EBADF (Bad file descriptor) [pid 6194] close(10) = -1 EBADF (Bad file descriptor) [pid 6194] close(11) = -1 EBADF (Bad file descriptor) [pid 6194] close(12) = -1 EBADF (Bad file descriptor) [pid 6194] close(13) = -1 EBADF (Bad file descriptor) [pid 6194] close(14) = -1 EBADF (Bad file descriptor) [pid 6194] close(15) = -1 EBADF (Bad file descriptor) [pid 6194] close(16) = -1 EBADF (Bad file descriptor) [pid 6194] close(17) = -1 EBADF (Bad file descriptor) [pid 6194] close(18) = -1 EBADF (Bad file descriptor) [pid 6194] close(19) = -1 EBADF (Bad file descriptor) [pid 6194] close(20) = -1 EBADF (Bad file descriptor) [pid 6194] close(21) = -1 EBADF (Bad file descriptor) [pid 6194] close(22) = -1 EBADF (Bad file descriptor) [pid 6194] close(23) = -1 EBADF (Bad file descriptor) [pid 6194] close(24) = -1 EBADF (Bad file descriptor) [pid 6194] close(25) = -1 EBADF (Bad file descriptor) [pid 6194] close(26) = -1 EBADF (Bad file descriptor) [pid 6194] close(27) = -1 EBADF (Bad file descriptor) [pid 6194] close(28) = -1 EBADF (Bad file descriptor) [pid 6194] close(29) = -1 EBADF (Bad file descriptor) [pid 6194] exit_group(0 [pid 6195] <... futex resumed>) = ? [pid 6212] <... futex resumed>) = ? [pid 6195] +++ exited with 0 +++ [pid 6212] +++ exited with 0 +++ [pid 6194] <... exit_group resumed>) = ? [pid 6194] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=185, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./61/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./61/cgroup.cpu") = 0 [pid 5007] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./61/binderfs") = 0 [pid 5007] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./61/file0") = 0 [pid 5007] umount2("./61/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./61/cgroup") = 0 [pid 5007] umount2("./61/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./61/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./61") = 0 [pid 5007] mkdir("./62", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6213 attached [pid 6213] set_robust_list(0x5555571235e0, 24) = 0 [pid 6213] chdir("./62" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 188 [pid 6213] <... chdir resumed>) = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6213] setpgid(0, 0) = 0 [pid 6213] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6213] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6213] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6213] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6214 attached , parent_tid=[189], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 189 [pid 6214] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6214] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6214] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] memfd_create("syzkaller", 0) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6214] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6214] close(3) = 0 [pid 6214] mkdir("./file0", 0777) = 0 [ 124.566511][ T6214] loop0: detected capacity change from 0 to 32768 [ 124.578459][ T6214] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6214) [ 124.594368][ T6214] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 124.603259][ T6214] BTRFS info (device loop0): using free space tree [pid 6214] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6214] chdir("./file0") = 0 [pid 6214] ioctl(4, LOOP_CLR_FD) = 0 [pid 6214] close(4) = 0 [pid 6214] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... openat resumed>) = 4 [pid 6214] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6213] <... futex resumed>) = 0 [ 124.623273][ T6214] BTRFS info (device loop0): enabling ssd optimizations [ 124.630633][ T6214] BTRFS info (device loop0): auto enabling async discard [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6213] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6213] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6231 attached [pid 6231] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6231] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... clone resumed>, parent_tid=[190], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 190 [pid 6213] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] <... futex resumed>) = 0 [pid 6231] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6231] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 124.671297][ T6214] BTRFS info (device loop0): balance: start -s [ 124.679588][ T6214] BTRFS info (device loop0): relocating block group 1048576 flags system [ 124.707446][ T6214] BTRFS info (device loop0): balance: ended with status: 0 [pid 6213] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6214] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6231] <... ioctl resumed>) = 0 [pid 6231] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] close(3 [pid 6231] <... futex resumed>) = 0 [pid 6231] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... close resumed>) = 0 [pid 6213] close(4) = 0 [pid 6213] close(5) = 0 [pid 6213] close(6) = -1 EBADF (Bad file descriptor) [pid 6213] close(7) = -1 EBADF (Bad file descriptor) [pid 6213] close(8) = -1 EBADF (Bad file descriptor) [pid 6213] close(9) = -1 EBADF (Bad file descriptor) [pid 6213] close(10) = -1 EBADF (Bad file descriptor) [pid 6213] close(11) = -1 EBADF (Bad file descriptor) [pid 6213] close(12) = -1 EBADF (Bad file descriptor) [pid 6213] close(13) = -1 EBADF (Bad file descriptor) [pid 6213] close(14) = -1 EBADF (Bad file descriptor) [pid 6213] close(15) = -1 EBADF (Bad file descriptor) [pid 6213] close(16) = -1 EBADF (Bad file descriptor) [pid 6213] close(17) = -1 EBADF (Bad file descriptor) [pid 6213] close(18) = -1 EBADF (Bad file descriptor) [pid 6213] close(19) = -1 EBADF (Bad file descriptor) [pid 6213] close(20) = -1 EBADF (Bad file descriptor) [pid 6213] close(21) = -1 EBADF (Bad file descriptor) [pid 6213] close(22) = -1 EBADF (Bad file descriptor) [pid 6213] close(23) = -1 EBADF (Bad file descriptor) [pid 6213] close(24) = -1 EBADF (Bad file descriptor) [pid 6213] close(25) = -1 EBADF (Bad file descriptor) [pid 6213] close(26) = -1 EBADF (Bad file descriptor) [pid 6213] close(27) = -1 EBADF (Bad file descriptor) [pid 6213] close(28) = -1 EBADF (Bad file descriptor) [pid 6213] close(29) = -1 EBADF (Bad file descriptor) [pid 6213] exit_group(0 [pid 6231] <... futex resumed>) = ? [pid 6214] <... futex resumed>) = ? [pid 6231] +++ exited with 0 +++ [pid 6213] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=188, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./62/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./62/cgroup.cpu") = 0 [pid 5007] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./62/binderfs") = 0 [pid 5007] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./62/file0") = 0 [pid 5007] umount2("./62/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./62/cgroup") = 0 [pid 5007] umount2("./62/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./62/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./62") = 0 [pid 5007] mkdir("./63", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 191 ./strace-static-x86_64: Process 6232 attached [pid 6232] set_robust_list(0x5555571235e0, 24) = 0 [pid 6232] chdir("./63") = 0 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] setpgid(0, 0) = 0 [pid 6232] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6232] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6232] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6232] write(3, "1000", 4) = 4 [pid 6232] close(3) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6232] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6232] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[192], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 192 [pid 6232] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6233 attached [pid 6233] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6233] memfd_create("syzkaller", 0) = 3 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6233] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6233] close(3) = 0 [pid 6233] mkdir("./file0", 0777) = 0 [ 125.232451][ T6233] loop0: detected capacity change from 0 to 32768 [ 125.243458][ T6233] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6233) [ 125.260928][ T6233] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 125.269776][ T6233] BTRFS info (device loop0): using free space tree [pid 6233] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6233] chdir("./file0") = 0 [pid 6233] ioctl(4, LOOP_CLR_FD) = 0 [pid 6233] close(4) = 0 [pid 6233] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6233] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.289492][ T6233] BTRFS info (device loop0): enabling ssd optimizations [ 125.296839][ T6233] BTRFS info (device loop0): auto enabling async discard [pid 6233] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6232] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6232] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[193], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 193 [pid 6232] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6250 attached [pid 6250] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6250] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6250] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] <... futex resumed>) = 1 [ 125.346301][ T6233] BTRFS info (device loop0): balance: start -s [ 125.356794][ T6233] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6250] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6250] <... ioctl resumed>) = 0 [pid 6250] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6250] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6233] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] close(3) = 0 [pid 6232] close(4) = 0 [pid 6232] close(5) = 0 [pid 6232] close(6) = -1 EBADF (Bad file descriptor) [pid 6232] close(7) = -1 EBADF (Bad file descriptor) [pid 6232] close(8) = -1 EBADF (Bad file descriptor) [pid 6232] close(9) = -1 EBADF (Bad file descriptor) [pid 6232] close(10) = -1 EBADF (Bad file descriptor) [pid 6232] close(11) = -1 EBADF (Bad file descriptor) [pid 6232] close(12) = -1 EBADF (Bad file descriptor) [pid 6232] close(13) = -1 EBADF (Bad file descriptor) [pid 6232] close(14) = -1 EBADF (Bad file descriptor) [pid 6232] close(15) = -1 EBADF (Bad file descriptor) [pid 6232] close(16) = -1 EBADF (Bad file descriptor) [pid 6232] close(17) = -1 EBADF (Bad file descriptor) [pid 6232] close(18) = -1 EBADF (Bad file descriptor) [pid 6232] close(19) = -1 EBADF (Bad file descriptor) [pid 6232] close(20) = -1 EBADF (Bad file descriptor) [pid 6232] close(21) = -1 EBADF (Bad file descriptor) [pid 6232] close(22) = -1 EBADF (Bad file descriptor) [pid 6232] close(23) = -1 EBADF (Bad file descriptor) [pid 6232] close(24) = -1 EBADF (Bad file descriptor) [pid 6232] close(25) = -1 EBADF (Bad file descriptor) [pid 6232] close(26) = -1 EBADF (Bad file descriptor) [pid 6232] close(27) = -1 EBADF (Bad file descriptor) [pid 6232] close(28) = -1 EBADF (Bad file descriptor) [pid 6232] close(29) = -1 EBADF (Bad file descriptor) [pid 6232] exit_group(0 [pid 6250] <... futex resumed>) = ? [pid 6250] +++ exited with 0 +++ [pid 6232] <... exit_group resumed>) = ? [pid 6233] <... futex resumed>) = ? [pid 6233] +++ exited with 0 +++ [pid 6232] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=191, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./63/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./63/cgroup.cpu") = 0 [pid 5007] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./63/binderfs") = 0 [ 125.525804][ T6233] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./63/file0") = 0 [pid 5007] umount2("./63/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./63/cgroup") = 0 [pid 5007] umount2("./63/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./63/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./63") = 0 [pid 5007] mkdir("./64", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 194 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x5555571235e0, 24) = 0 [pid 6251] chdir("./64") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6251] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6251] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6251] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[195], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 195 [pid 6251] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6252 attached [pid 6252] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6252] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6252] close(3) = 0 [pid 6252] mkdir("./file0", 0777) = 0 [ 125.912854][ T6252] loop0: detected capacity change from 0 to 32768 [ 125.924010][ T6252] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6252) [ 125.942213][ T6252] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 125.951460][ T6252] BTRFS info (device loop0): using free space tree [pid 6252] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] chdir("./file0") = 0 [pid 6252] ioctl(4, LOOP_CLR_FD) = 0 [pid 6252] close(4) = 0 [pid 6252] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6251] <... futex resumed>) = 0 [pid 6252] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... futex resumed>) = 0 [pid 6251] <... futex resumed>) = 1 [pid 6252] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] <... futex resumed>) = 0 [pid 6252] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 125.971638][ T6252] BTRFS info (device loop0): enabling ssd optimizations [ 125.978813][ T6252] BTRFS info (device loop0): auto enabling async discard [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6251] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.022076][ T6252] BTRFS info (device loop0): balance: start -s [ 126.031222][ T6252] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6251] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[196], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 196 [pid 6251] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6269 attached [pid 6269] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6269] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6269] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... futex resumed>) = 0 [pid 6251] <... futex resumed>) = 1 [pid 6269] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6251] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6252] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.069461][ T6252] BTRFS info (device loop0): balance: ended with status: 0 [pid 6252] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6269] <... ioctl resumed>) = 0 [pid 6269] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6269] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] close(3) = 0 [pid 6251] close(4) = 0 [pid 6251] close(5) = 0 [pid 6251] close(6) = -1 EBADF (Bad file descriptor) [pid 6251] close(7) = -1 EBADF (Bad file descriptor) [pid 6251] close(8) = -1 EBADF (Bad file descriptor) [pid 6251] close(9) = -1 EBADF (Bad file descriptor) [pid 6251] close(10) = -1 EBADF (Bad file descriptor) [pid 6251] close(11) = -1 EBADF (Bad file descriptor) [pid 6251] close(12) = -1 EBADF (Bad file descriptor) [pid 6251] close(13) = -1 EBADF (Bad file descriptor) [pid 6251] close(14) = -1 EBADF (Bad file descriptor) [pid 6251] close(15) = -1 EBADF (Bad file descriptor) [pid 6251] close(16) = -1 EBADF (Bad file descriptor) [pid 6251] close(17) = -1 EBADF (Bad file descriptor) [pid 6251] close(18) = -1 EBADF (Bad file descriptor) [pid 6251] close(19) = -1 EBADF (Bad file descriptor) [pid 6251] close(20) = -1 EBADF (Bad file descriptor) [pid 6251] close(21) = -1 EBADF (Bad file descriptor) [pid 6251] close(22) = -1 EBADF (Bad file descriptor) [pid 6251] close(23) = -1 EBADF (Bad file descriptor) [pid 6251] close(24) = -1 EBADF (Bad file descriptor) [pid 6251] close(25) = -1 EBADF (Bad file descriptor) [pid 6251] close(26) = -1 EBADF (Bad file descriptor) [pid 6251] close(27) = -1 EBADF (Bad file descriptor) [pid 6251] close(28) = -1 EBADF (Bad file descriptor) [pid 6251] close(29) = -1 EBADF (Bad file descriptor) [pid 6251] exit_group(0 [pid 6269] <... futex resumed>) = ? [pid 6252] <... futex resumed>) = ? [pid 6251] <... exit_group resumed>) = ? [pid 6269] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=194, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./64/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./64/cgroup.cpu") = 0 [pid 5007] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./64/binderfs") = 0 [pid 5007] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./64/file0") = 0 [pid 5007] umount2("./64/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./64/cgroup") = 0 [pid 5007] umount2("./64/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./64/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./64") = 0 [pid 5007] mkdir("./65", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 197 ./strace-static-x86_64: Process 6270 attached [pid 6270] set_robust_list(0x5555571235e0, 24) = 0 [pid 6270] chdir("./65") = 0 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6270] setpgid(0, 0) = 0 [pid 6270] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6270] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6270] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6270] write(3, "1000", 4) = 4 [pid 6270] close(3) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6270] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6270] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[198], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 198 [pid 6270] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6271 attached [pid 6271] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6271] memfd_create("syzkaller", 0) = 3 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6271] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6271] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6271] close(3) = 0 [pid 6271] mkdir("./file0", 0777) = 0 [ 126.634994][ T6271] loop0: detected capacity change from 0 to 32768 [ 126.647387][ T6271] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6271) [ 126.664102][ T6271] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 126.673005][ T6271] BTRFS info (device loop0): using free space tree [pid 6271] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6271] chdir("./file0") = 0 [pid 6271] ioctl(4, LOOP_CLR_FD) = 0 [pid 6271] close(4) = 0 [pid 6271] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6270] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... openat resumed>) = 4 [pid 6271] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6270] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.693999][ T6271] BTRFS info (device loop0): enabling ssd optimizations [ 126.701254][ T6271] BTRFS info (device loop0): auto enabling async discard [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6270] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6270] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6270] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6288 attached [pid 6288] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6288] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... clone resumed>, parent_tid=[199], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 199 [pid 6270] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6288] <... futex resumed>) = 0 [pid 6288] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6288] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 6288] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6270] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.741160][ T6271] BTRFS info (device loop0): balance: start -s [ 126.749467][ T6271] BTRFS info (device loop0): relocating block group 1048576 flags system [ 126.777847][ T6271] BTRFS info (device loop0): balance: ended with status: 0 [pid 6270] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6271] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6271] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] <... ioctl resumed>) = 0 [pid 6288] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] close(3) = 0 [pid 6270] close(4) = 0 [pid 6270] close(5) = 0 [pid 6270] close(6) = -1 EBADF (Bad file descriptor) [pid 6270] close(7) = -1 EBADF (Bad file descriptor) [pid 6270] close(8) = -1 EBADF (Bad file descriptor) [pid 6270] close(9) = -1 EBADF (Bad file descriptor) [pid 6270] close(10) = -1 EBADF (Bad file descriptor) [pid 6270] close(11) = -1 EBADF (Bad file descriptor) [pid 6270] close(12) = -1 EBADF (Bad file descriptor) [pid 6270] close(13) = -1 EBADF (Bad file descriptor) [pid 6270] close(14) = -1 EBADF (Bad file descriptor) [pid 6270] close(15) = -1 EBADF (Bad file descriptor) [pid 6270] close(16) = -1 EBADF (Bad file descriptor) [pid 6270] close(17) = -1 EBADF (Bad file descriptor) [pid 6270] close(18) = -1 EBADF (Bad file descriptor) [pid 6270] close(19) = -1 EBADF (Bad file descriptor) [pid 6270] close(20) = -1 EBADF (Bad file descriptor) [pid 6270] close(21) = -1 EBADF (Bad file descriptor) [pid 6270] close(22) = -1 EBADF (Bad file descriptor) [pid 6270] close(23) = -1 EBADF (Bad file descriptor) [pid 6270] close(24) = -1 EBADF (Bad file descriptor) [pid 6270] close(25) = -1 EBADF (Bad file descriptor) [pid 6270] close(26) = -1 EBADF (Bad file descriptor) [pid 6270] close(27) = -1 EBADF (Bad file descriptor) [pid 6270] close(28) = -1 EBADF (Bad file descriptor) [pid 6270] close(29) = -1 EBADF (Bad file descriptor) [pid 6270] exit_group(0 [pid 6288] <... futex resumed>) = ? [pid 6288] +++ exited with 0 +++ [pid 6271] <... futex resumed>) = ? [pid 6270] <... exit_group resumed>) = ? [pid 6271] +++ exited with 0 +++ [pid 6270] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=197, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./65/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./65/cgroup.cpu") = 0 [pid 5007] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./65/binderfs") = 0 [pid 5007] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./65/file0") = 0 [pid 5007] umount2("./65/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./65/cgroup") = 0 [pid 5007] umount2("./65/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./65/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./65") = 0 [pid 5007] mkdir("./66", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 200 [pid 6289] <... set_robust_list resumed>) = 0 [pid 6289] chdir("./66") = 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6289] setpgid(0, 0) = 0 [pid 6289] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6289] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6289] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6289] write(3, "1000", 4) = 4 [pid 6289] close(3) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6289] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6289] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6290 attached [pid 6290] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6290] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... clone resumed>, parent_tid=[201], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 201 [pid 6289] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6290] memfd_create("syzkaller", 0 [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6290] <... memfd_create resumed>) = 3 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6290] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6290] close(3) = 0 [pid 6290] mkdir("./file0", 0777) = 0 [ 127.309873][ T6290] loop0: detected capacity change from 0 to 32768 [ 127.321162][ T6290] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6290) [ 127.339152][ T6290] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 127.348002][ T6290] BTRFS info (device loop0): using free space tree [pid 6290] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6290] chdir("./file0") = 0 [pid 6290] ioctl(4, LOOP_CLR_FD) = 0 [pid 6290] close(4) = 0 [pid 6290] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6290] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6289] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... openat resumed>) = 4 [pid 6290] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6290] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6289] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 127.368547][ T6290] BTRFS info (device loop0): enabling ssd optimizations [ 127.375809][ T6290] BTRFS info (device loop0): auto enabling async discard [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6289] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6289] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6289] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6307 attached [pid 6307] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6307] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... clone resumed>, parent_tid=[202], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 202 [pid 6289] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6307] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6289] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6307] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 127.432302][ T6290] BTRFS info (device loop0): balance: start -s [ 127.440809][ T6290] BTRFS info (device loop0): relocating block group 1048576 flags system [ 127.470430][ T6290] BTRFS info (device loop0): balance: ended with status: 0 [pid 6289] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6290] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6307] <... ioctl resumed>) = 0 [pid 6307] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] close(3 [pid 6307] <... futex resumed>) = 0 [pid 6307] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... close resumed>) = 0 [pid 6289] close(4) = 0 [pid 6289] close(5) = 0 [pid 6289] close(6) = -1 EBADF (Bad file descriptor) [pid 6289] close(7) = -1 EBADF (Bad file descriptor) [pid 6289] close(8) = -1 EBADF (Bad file descriptor) [pid 6289] close(9) = -1 EBADF (Bad file descriptor) [pid 6289] close(10) = -1 EBADF (Bad file descriptor) [pid 6289] close(11) = -1 EBADF (Bad file descriptor) [pid 6289] close(12) = -1 EBADF (Bad file descriptor) [pid 6289] close(13) = -1 EBADF (Bad file descriptor) [pid 6289] close(14) = -1 EBADF (Bad file descriptor) [pid 6289] close(15) = -1 EBADF (Bad file descriptor) [pid 6289] close(16) = -1 EBADF (Bad file descriptor) [pid 6289] close(17) = -1 EBADF (Bad file descriptor) [pid 6289] close(18) = -1 EBADF (Bad file descriptor) [pid 6289] close(19) = -1 EBADF (Bad file descriptor) [pid 6289] close(20) = -1 EBADF (Bad file descriptor) [pid 6289] close(21) = -1 EBADF (Bad file descriptor) [pid 6289] close(22) = -1 EBADF (Bad file descriptor) [pid 6289] close(23) = -1 EBADF (Bad file descriptor) [pid 6289] close(24) = -1 EBADF (Bad file descriptor) [pid 6289] close(25) = -1 EBADF (Bad file descriptor) [pid 6289] close(26) = -1 EBADF (Bad file descriptor) [pid 6289] close(27) = -1 EBADF (Bad file descriptor) [pid 6289] close(28) = -1 EBADF (Bad file descriptor) [pid 6289] close(29) = -1 EBADF (Bad file descriptor) [pid 6289] exit_group(0 [pid 6290] <... futex resumed>) = ? [pid 6289] <... exit_group resumed>) = ? [pid 6307] <... futex resumed>) = ? [pid 6290] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ [pid 6289] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=200, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./66/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./66/cgroup.cpu") = 0 [pid 5007] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./66/binderfs") = 0 [pid 5007] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./66/file0") = 0 [pid 5007] umount2("./66/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./66/cgroup") = 0 [pid 5007] umount2("./66/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./66/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./66") = 0 [pid 5007] mkdir("./67", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6308 attached , child_tidptr=0x5555571235d0) = 203 [pid 6308] set_robust_list(0x5555571235e0, 24) = 0 [pid 6308] chdir("./67") = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6308] setpgid(0, 0) = 0 [pid 6308] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6308] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6308] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6308] write(3, "1000", 4) = 4 [pid 6308] close(3) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6308] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6309 attached , parent_tid=[204], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 204 [pid 6309] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6308] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6309] memfd_create("syzkaller", 0) = 3 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6309] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6309] close(3) = 0 [pid 6309] mkdir("./file0", 0777) = 0 [ 127.998082][ T6309] loop0: detected capacity change from 0 to 32768 [ 128.010024][ T6309] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6309) [ 128.025908][ T6309] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.034651][ T6309] BTRFS info (device loop0): using free space tree [pid 6309] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6309] chdir("./file0") = 0 [pid 6309] ioctl(4, LOOP_CLR_FD) = 0 [pid 6309] close(4) = 0 [pid 6309] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6309] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... futex resumed>) = 1 [ 128.053756][ T6309] BTRFS info (device loop0): enabling ssd optimizations [ 128.061063][ T6309] BTRFS info (device loop0): auto enabling async discard [pid 6309] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6308] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6308] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[205], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 205 [pid 6308] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.106151][ T6309] BTRFS info (device loop0): balance: start -s [ 128.114406][ T6309] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6308] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6326 attached [pid 6326] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6326] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6326] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 1 [pid 6326] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6309] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6309] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.152465][ T6309] BTRFS info (device loop0): balance: ended with status: 0 [pid 6309] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6326] <... ioctl resumed>) = 0 [pid 6326] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] close(3 [pid 6326] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] <... close resumed>) = 0 [pid 6308] close(4) = 0 [pid 6308] close(5) = 0 [pid 6308] close(6) = -1 EBADF (Bad file descriptor) [pid 6308] close(7) = -1 EBADF (Bad file descriptor) [pid 6308] close(8) = -1 EBADF (Bad file descriptor) [pid 6308] close(9) = -1 EBADF (Bad file descriptor) [pid 6308] close(10) = -1 EBADF (Bad file descriptor) [pid 6308] close(11) = -1 EBADF (Bad file descriptor) [pid 6308] close(12) = -1 EBADF (Bad file descriptor) [pid 6308] close(13) = -1 EBADF (Bad file descriptor) [pid 6308] close(14) = -1 EBADF (Bad file descriptor) [pid 6308] close(15) = -1 EBADF (Bad file descriptor) [pid 6308] close(16) = -1 EBADF (Bad file descriptor) [pid 6308] close(17) = -1 EBADF (Bad file descriptor) [pid 6308] close(18) = -1 EBADF (Bad file descriptor) [pid 6308] close(19) = -1 EBADF (Bad file descriptor) [pid 6308] close(20) = -1 EBADF (Bad file descriptor) [pid 6308] close(21) = -1 EBADF (Bad file descriptor) [pid 6308] close(22) = -1 EBADF (Bad file descriptor) [pid 6308] close(23) = -1 EBADF (Bad file descriptor) [pid 6308] close(24) = -1 EBADF (Bad file descriptor) [pid 6308] close(25) = -1 EBADF (Bad file descriptor) [pid 6308] close(26) = -1 EBADF (Bad file descriptor) [pid 6308] close(27) = -1 EBADF (Bad file descriptor) [pid 6308] close(28) = -1 EBADF (Bad file descriptor) [pid 6308] close(29) = -1 EBADF (Bad file descriptor) [pid 6308] exit_group(0 [pid 6326] <... futex resumed>) = ? [pid 6309] <... futex resumed>) = ? [pid 6308] <... exit_group resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 6326] +++ exited with 0 +++ [pid 6308] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=203, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./67/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./67/cgroup.cpu") = 0 [pid 5007] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./67/binderfs") = 0 [pid 5007] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./67/file0") = 0 [pid 5007] umount2("./67/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./67/cgroup") = 0 [pid 5007] umount2("./67/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./67/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./67") = 0 [pid 5007] mkdir("./68", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6327 attached , child_tidptr=0x5555571235d0) = 206 [pid 6327] set_robust_list(0x5555571235e0, 24) = 0 [pid 6327] chdir("./68") = 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6327] setpgid(0, 0) = 0 [pid 6327] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6327] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6327] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6327] write(3, "1000", 4) = 4 [pid 6327] close(3) = 0 [pid 6327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6327] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6327] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[207], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 207 [pid 6327] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6328 attached [pid 6328] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6328] memfd_create("syzkaller", 0) = 3 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6328] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6328] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6328] close(3) = 0 [pid 6328] mkdir("./file0", 0777) = 0 [ 128.690640][ T6328] loop0: detected capacity change from 0 to 32768 [ 128.701564][ T6328] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6328) [ 128.718466][ T6328] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.727312][ T6328] BTRFS info (device loop0): using free space tree [pid 6328] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6328] chdir("./file0") = 0 [pid 6328] ioctl(4, LOOP_CLR_FD) = 0 [pid 6328] close(4) = 0 [pid 6328] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] <... futex resumed>) = 0 [pid 6328] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6327] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... openat resumed>) = 4 [pid 6327] <... futex resumed>) = 0 [pid 6328] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6328] <... futex resumed>) = 0 [pid 6327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6328] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6327] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.748879][ T6328] BTRFS info (device loop0): enabling ssd optimizations [ 128.756089][ T6328] BTRFS info (device loop0): auto enabling async discard [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6327] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6327] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6327] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6345 attached [pid 6345] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6327] <... clone resumed>, parent_tid=[208], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 208 [pid 6345] openat(AT_FDCWD, ".", O_RDONLY [pid 6327] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6345] <... openat resumed>) = 5 [pid 6345] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] <... futex resumed>) = 0 [pid 6327] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 128.805652][ T6328] BTRFS info (device loop0): balance: start -s [ 128.814008][ T6328] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6345] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.892611][ T6328] BTRFS info (device loop0): balance: ended with status: 0 [pid 6345] <... ioctl resumed>) = 0 [pid 6345] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6345] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6327] close(3) = 0 [pid 6327] close(4) = 0 [pid 6327] close(5) = 0 [pid 6327] close(6) = -1 EBADF (Bad file descriptor) [pid 6327] close(7) = -1 EBADF (Bad file descriptor) [pid 6327] close(8) = -1 EBADF (Bad file descriptor) [pid 6327] close(9) = -1 EBADF (Bad file descriptor) [pid 6327] close(10) = -1 EBADF (Bad file descriptor) [pid 6327] close(11) = -1 EBADF (Bad file descriptor) [pid 6327] close(12) = -1 EBADF (Bad file descriptor) [pid 6327] close(13) = -1 EBADF (Bad file descriptor) [pid 6327] close(14) = -1 EBADF (Bad file descriptor) [pid 6327] close(15) = -1 EBADF (Bad file descriptor) [pid 6327] close(16) = -1 EBADF (Bad file descriptor) [pid 6327] close(17) = -1 EBADF (Bad file descriptor) [pid 6327] close(18) = -1 EBADF (Bad file descriptor) [pid 6327] close(19) = -1 EBADF (Bad file descriptor) [pid 6327] close(20) = -1 EBADF (Bad file descriptor) [pid 6327] close(21) = -1 EBADF (Bad file descriptor) [pid 6327] close(22) = -1 EBADF (Bad file descriptor) [pid 6327] close(23) = -1 EBADF (Bad file descriptor) [pid 6327] close(24) = -1 EBADF (Bad file descriptor) [pid 6327] close(25) = -1 EBADF (Bad file descriptor) [pid 6327] close(26) = -1 EBADF (Bad file descriptor) [pid 6327] close(27) = -1 EBADF (Bad file descriptor) [pid 6327] close(28) = -1 EBADF (Bad file descriptor) [pid 6327] close(29) = -1 EBADF (Bad file descriptor) [pid 6327] exit_group(0 [pid 6345] <... futex resumed>) = ? [pid 6328] <... futex resumed>) = ? [pid 6327] <... exit_group resumed>) = ? [pid 6345] +++ exited with 0 +++ [pid 6328] +++ exited with 0 +++ [pid 6327] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=206, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./68/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./68/cgroup.cpu") = 0 [pid 5007] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./68/binderfs") = 0 [pid 5007] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./68/file0") = 0 [pid 5007] umount2("./68/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./68/cgroup") = 0 [pid 5007] umount2("./68/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./68/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./68") = 0 [pid 5007] mkdir("./69", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 209 ./strace-static-x86_64: Process 6346 attached [pid 6346] set_robust_list(0x5555571235e0, 24) = 0 [pid 6346] chdir("./69") = 0 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6346] setpgid(0, 0) = 0 [pid 6346] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6346] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6346] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6346] write(3, "1000", 4) = 4 [pid 6346] close(3) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6346] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6346] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[210], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 210 ./strace-static-x86_64: Process 6347 attached [pid 6347] set_robust_list(0x7fd090fc79e0, 24 [pid 6346] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] <... set_robust_list resumed>) = 0 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6347] memfd_create("syzkaller", 0) = 3 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6347] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6347] close(3) = 0 [pid 6347] mkdir("./file0", 0777) = 0 [ 129.380579][ T6347] loop0: detected capacity change from 0 to 32768 [ 129.392199][ T6347] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6347) [ 129.409808][ T6347] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.418896][ T6347] BTRFS info (device loop0): using free space tree [pid 6347] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6347] chdir("./file0") = 0 [pid 6347] ioctl(4, LOOP_CLR_FD) = 0 [pid 6347] close(4) = 0 [pid 6347] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [pid 6347] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6347] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [ 129.439929][ T6347] BTRFS info (device loop0): enabling ssd optimizations [ 129.447128][ T6347] BTRFS info (device loop0): auto enabling async discard [pid 6347] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6346] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6346] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6346] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6364 attached [pid 6364] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6364] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] <... clone resumed>, parent_tid=[211], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 211 [pid 6346] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... futex resumed>) = 0 [pid 6364] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6364] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... futex resumed>) = 1 [ 129.484614][ T6347] BTRFS info (device loop0): balance: start -s [ 129.493552][ T6347] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6364] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 129.569243][ T6347] BTRFS info (device loop0): balance: ended with status: 0 [pid 6364] <... ioctl resumed>) = 0 [pid 6347] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6364] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6347] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] close(3) = 0 [pid 6346] close(4) = 0 [pid 6346] close(5) = 0 [pid 6346] close(6) = -1 EBADF (Bad file descriptor) [pid 6346] close(7) = -1 EBADF (Bad file descriptor) [pid 6346] close(8) = -1 EBADF (Bad file descriptor) [pid 6346] close(9) = -1 EBADF (Bad file descriptor) [pid 6346] close(10) = -1 EBADF (Bad file descriptor) [pid 6346] close(11) = -1 EBADF (Bad file descriptor) [pid 6346] close(12) = -1 EBADF (Bad file descriptor) [pid 6346] close(13) = -1 EBADF (Bad file descriptor) [pid 6346] close(14) = -1 EBADF (Bad file descriptor) [pid 6346] close(15) = -1 EBADF (Bad file descriptor) [pid 6346] close(16) = -1 EBADF (Bad file descriptor) [pid 6346] close(17) = -1 EBADF (Bad file descriptor) [pid 6346] close(18) = -1 EBADF (Bad file descriptor) [pid 6346] close(19) = -1 EBADF (Bad file descriptor) [pid 6346] close(20) = -1 EBADF (Bad file descriptor) [pid 6346] close(21) = -1 EBADF (Bad file descriptor) [pid 6346] close(22) = -1 EBADF (Bad file descriptor) [pid 6346] close(23) = -1 EBADF (Bad file descriptor) [pid 6346] close(24) = -1 EBADF (Bad file descriptor) [pid 6346] close(25) = -1 EBADF (Bad file descriptor) [pid 6346] close(26) = -1 EBADF (Bad file descriptor) [pid 6346] close(27) = -1 EBADF (Bad file descriptor) [pid 6346] close(28) = -1 EBADF (Bad file descriptor) [pid 6346] close(29) = -1 EBADF (Bad file descriptor) [pid 6346] exit_group(0 [pid 6364] <... futex resumed>) = ? [pid 6347] <... futex resumed>) = ? [pid 6346] <... exit_group resumed>) = ? [pid 6364] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 6346] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=209, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./69/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./69/cgroup.cpu") = 0 [pid 5007] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./69/binderfs") = 0 [pid 5007] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./69/file0") = 0 [pid 5007] umount2("./69/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./69/cgroup") = 0 [pid 5007] umount2("./69/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./69/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./69") = 0 [pid 5007] mkdir("./70", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 212 ./strace-static-x86_64: Process 6365 attached [pid 6365] set_robust_list(0x5555571235e0, 24) = 0 [pid 6365] chdir("./70") = 0 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6365] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6365] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6365] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4) = 4 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6365] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6366 attached [pid 6366] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6366] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... clone resumed>, parent_tid=[213], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 213 [pid 6365] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] <... futex resumed>) = 0 [pid 6365] <... futex resumed>) = 1 [pid 6366] memfd_create("syzkaller", 0 [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6366] <... memfd_create resumed>) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6366] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6366] close(3) = 0 [pid 6366] mkdir("./file0", 0777) = 0 [ 130.053137][ T6366] loop0: detected capacity change from 0 to 32768 [ 130.064477][ T6366] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6366) [ 130.081249][ T6366] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 130.090114][ T6366] BTRFS info (device loop0): using free space tree [pid 6366] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6366] chdir("./file0") = 0 [pid 6366] ioctl(4, LOOP_CLR_FD) = 0 [pid 6366] close(4) = 0 [pid 6366] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] <... futex resumed>) = 0 [pid 6366] <... futex resumed>) = 1 [pid 6366] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6365] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... openat resumed>) = 4 [pid 6366] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6366] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6365] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 130.109387][ T6366] BTRFS info (device loop0): enabling ssd optimizations [ 130.116478][ T6366] BTRFS info (device loop0): auto enabling async discard [ 130.169300][ T6366] BTRFS info (device loop0): balance: start -s [ 130.178141][ T6366] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6365] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6383 attached [pid 6383] set_robust_list(0x7fd089ba69e0, 24 [pid 6365] <... clone resumed>, parent_tid=[214], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 214 [pid 6383] <... set_robust_list resumed>) = 0 [pid 6365] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] openat(AT_FDCWD, ".", O_RDONLY [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... openat resumed>) = 5 [pid 6383] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6383] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6365] <... futex resumed>) = 0 [pid 6383] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6366] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 130.209643][ T6366] BTRFS info (device loop0): balance: ended with status: 0 [pid 6366] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6383] <... ioctl resumed>) = 0 [pid 6383] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] close(3 [pid 6383] <... futex resumed>) = 0 [pid 6383] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... close resumed>) = 0 [pid 6365] close(4) = 0 [pid 6365] close(5) = 0 [pid 6365] close(6) = -1 EBADF (Bad file descriptor) [pid 6365] close(7) = -1 EBADF (Bad file descriptor) [pid 6365] close(8) = -1 EBADF (Bad file descriptor) [pid 6365] close(9) = -1 EBADF (Bad file descriptor) [pid 6365] close(10) = -1 EBADF (Bad file descriptor) [pid 6365] close(11) = -1 EBADF (Bad file descriptor) [pid 6365] close(12) = -1 EBADF (Bad file descriptor) [pid 6365] close(13) = -1 EBADF (Bad file descriptor) [pid 6365] close(14) = -1 EBADF (Bad file descriptor) [pid 6365] close(15) = -1 EBADF (Bad file descriptor) [pid 6365] close(16) = -1 EBADF (Bad file descriptor) [pid 6365] close(17) = -1 EBADF (Bad file descriptor) [pid 6365] close(18) = -1 EBADF (Bad file descriptor) [pid 6365] close(19) = -1 EBADF (Bad file descriptor) [pid 6365] close(20) = -1 EBADF (Bad file descriptor) [pid 6365] close(21) = -1 EBADF (Bad file descriptor) [pid 6365] close(22) = -1 EBADF (Bad file descriptor) [pid 6365] close(23) = -1 EBADF (Bad file descriptor) [pid 6365] close(24) = -1 EBADF (Bad file descriptor) [pid 6365] close(25) = -1 EBADF (Bad file descriptor) [pid 6365] close(26) = -1 EBADF (Bad file descriptor) [pid 6365] close(27) = -1 EBADF (Bad file descriptor) [pid 6365] close(28) = -1 EBADF (Bad file descriptor) [pid 6365] close(29) = -1 EBADF (Bad file descriptor) [pid 6365] exit_group(0 [pid 6383] <... futex resumed>) = ? [pid 6366] <... futex resumed>) = ? [pid 6365] <... exit_group resumed>) = ? [pid 6383] +++ exited with 0 +++ [pid 6366] +++ exited with 0 +++ [pid 6365] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=212, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./70/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./70/cgroup.cpu") = 0 [pid 5007] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./70/binderfs") = 0 [pid 5007] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./70/file0") = 0 [pid 5007] umount2("./70/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./70/cgroup") = 0 [pid 5007] umount2("./70/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./70/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./70") = 0 [pid 5007] mkdir("./71", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 215 ./strace-static-x86_64: Process 6384 attached [pid 6384] set_robust_list(0x5555571235e0, 24) = 0 [pid 6384] chdir("./71") = 0 [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6384] setpgid(0, 0) = 0 [pid 6384] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6384] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6384] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6384] write(3, "1000", 4) = 4 [pid 6384] close(3) = 0 [pid 6384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6384] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6384] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[216], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 216 [pid 6384] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6385 attached [pid 6385] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6385] memfd_create("syzkaller", 0) = 3 [pid 6385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6385] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6385] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6385] close(3) = 0 [pid 6385] mkdir("./file0", 0777) = 0 [ 130.716562][ T6385] loop0: detected capacity change from 0 to 32768 [ 130.727931][ T6385] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6385) [ 130.745498][ T6385] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 130.754319][ T6385] BTRFS info (device loop0): using free space tree [pid 6385] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6385] chdir("./file0") = 0 [pid 6385] ioctl(4, LOOP_CLR_FD) = 0 [pid 6385] close(4) = 0 [pid 6385] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = 0 [pid 6384] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6385] <... futex resumed>) = 1 [pid 6385] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6385] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 0 [pid 6384] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6384] <... futex resumed>) = 0 [ 130.774290][ T6385] BTRFS info (device loop0): enabling ssd optimizations [ 130.781507][ T6385] BTRFS info (device loop0): auto enabling async discard [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6384] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6384] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6384] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6402 attached [pid 6402] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6402] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... clone resumed>, parent_tid=[217], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 217 [pid 6384] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6402] <... futex resumed>) = 0 [pid 6384] <... futex resumed>) = 1 [pid 6402] openat(AT_FDCWD, ".", O_RDONLY [pid 6384] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6402] <... openat resumed>) = 5 [pid 6402] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6402] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6384] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6402] <... futex resumed>) = 0 [pid 6384] <... futex resumed>) = 1 [pid 6402] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 130.837769][ T6385] BTRFS info (device loop0): balance: start -s [ 130.847286][ T6385] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6384] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 130.890060][ T6385] BTRFS info (device loop0): balance: ended with status: 0 [pid 6402] <... ioctl resumed>) = 0 [pid 6402] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6402] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6385] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] close(3) = 0 [pid 6384] close(4) = 0 [pid 6384] close(5) = 0 [pid 6384] close(6) = -1 EBADF (Bad file descriptor) [pid 6384] close(7) = -1 EBADF (Bad file descriptor) [pid 6384] close(8) = -1 EBADF (Bad file descriptor) [pid 6384] close(9) = -1 EBADF (Bad file descriptor) [pid 6384] close(10) = -1 EBADF (Bad file descriptor) [pid 6384] close(11) = -1 EBADF (Bad file descriptor) [pid 6384] close(12) = -1 EBADF (Bad file descriptor) [pid 6384] close(13) = -1 EBADF (Bad file descriptor) [pid 6384] close(14) = -1 EBADF (Bad file descriptor) [pid 6384] close(15) = -1 EBADF (Bad file descriptor) [pid 6384] close(16) = -1 EBADF (Bad file descriptor) [pid 6384] close(17) = -1 EBADF (Bad file descriptor) [pid 6384] close(18) = -1 EBADF (Bad file descriptor) [pid 6384] close(19) = -1 EBADF (Bad file descriptor) [pid 6384] close(20) = -1 EBADF (Bad file descriptor) [pid 6384] close(21) = -1 EBADF (Bad file descriptor) [pid 6384] close(22) = -1 EBADF (Bad file descriptor) [pid 6384] close(23) = -1 EBADF (Bad file descriptor) [pid 6384] close(24) = -1 EBADF (Bad file descriptor) [pid 6384] close(25) = -1 EBADF (Bad file descriptor) [pid 6384] close(26) = -1 EBADF (Bad file descriptor) [pid 6384] close(27) = -1 EBADF (Bad file descriptor) [pid 6384] close(28) = -1 EBADF (Bad file descriptor) [pid 6384] close(29) = -1 EBADF (Bad file descriptor) [pid 6384] exit_group(0 [pid 6402] <... futex resumed>) = ? [pid 6385] <... futex resumed>) = ? [pid 6384] <... exit_group resumed>) = ? [pid 6402] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ [pid 6384] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=215, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./71/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./71/cgroup.cpu") = 0 [pid 5007] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./71/binderfs") = 0 [pid 5007] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./71/file0") = 0 [pid 5007] umount2("./71/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./71/cgroup") = 0 [pid 5007] umount2("./71/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./71/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./71") = 0 [pid 5007] mkdir("./72", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 218 ./strace-static-x86_64: Process 6403 attached [pid 6403] set_robust_list(0x5555571235e0, 24) = 0 [pid 6403] chdir("./72") = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6403] setpgid(0, 0) = 0 [pid 6403] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6403] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6403] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6403] write(3, "1000", 4) = 4 [pid 6403] close(3) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6403] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6404 attached [pid 6404] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6404] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... clone resumed>, parent_tid=[219], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 219 [pid 6403] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = 0 [pid 6403] <... futex resumed>) = 1 [pid 6404] memfd_create("syzkaller", 0 [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6404] <... memfd_create resumed>) = 3 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6404] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6404] close(3) = 0 [pid 6404] mkdir("./file0", 0777) = 0 [ 131.388145][ T6404] loop0: detected capacity change from 0 to 32768 [ 131.399513][ T6404] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6404) [ 131.416150][ T6404] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 131.424905][ T6404] BTRFS info (device loop0): using free space tree [pid 6404] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6404] chdir("./file0") = 0 [pid 6404] ioctl(4, LOOP_CLR_FD) = 0 [pid 6404] close(4) = 0 [pid 6404] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... openat resumed>) = 4 [pid 6404] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... futex resumed>) = 0 [pid 6404] <... futex resumed>) = 1 [pid 6403] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6403] <... futex resumed>) = 0 [ 131.445087][ T6404] BTRFS info (device loop0): enabling ssd optimizations [ 131.452101][ T6404] BTRFS info (device loop0): auto enabling async discard [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6403] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6403] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6421 attached [pid 6421] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6421] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... clone resumed>, parent_tid=[220], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 220 [pid 6403] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6421] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6403] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6421] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6403] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] <... futex resumed>) = 0 [pid 6403] <... futex resumed>) = 1 [pid 6421] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 131.508029][ T6404] BTRFS info (device loop0): balance: start -s [ 131.517465][ T6404] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6403] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 131.564469][ T6404] BTRFS info (device loop0): balance: ended with status: 0 [pid 6404] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6404] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] <... ioctl resumed>) = 0 [pid 6421] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] close(3) = 0 [pid 6403] close(4) = 0 [pid 6403] close(5) = 0 [pid 6403] close(6) = -1 EBADF (Bad file descriptor) [pid 6403] close(7) = -1 EBADF (Bad file descriptor) [pid 6403] close(8) = -1 EBADF (Bad file descriptor) [pid 6403] close(9) = -1 EBADF (Bad file descriptor) [pid 6403] close(10) = -1 EBADF (Bad file descriptor) [pid 6403] close(11) = -1 EBADF (Bad file descriptor) [pid 6403] close(12) = -1 EBADF (Bad file descriptor) [pid 6403] close(13) = -1 EBADF (Bad file descriptor) [pid 6403] close(14) = -1 EBADF (Bad file descriptor) [pid 6403] close(15) = -1 EBADF (Bad file descriptor) [pid 6403] close(16) = -1 EBADF (Bad file descriptor) [pid 6403] close(17) = -1 EBADF (Bad file descriptor) [pid 6403] close(18) = -1 EBADF (Bad file descriptor) [pid 6403] close(19) = -1 EBADF (Bad file descriptor) [pid 6403] close(20) = -1 EBADF (Bad file descriptor) [pid 6403] close(21) = -1 EBADF (Bad file descriptor) [pid 6403] close(22) = -1 EBADF (Bad file descriptor) [pid 6403] close(23) = -1 EBADF (Bad file descriptor) [pid 6403] close(24) = -1 EBADF (Bad file descriptor) [pid 6403] close(25) = -1 EBADF (Bad file descriptor) [pid 6403] close(26) = -1 EBADF (Bad file descriptor) [pid 6403] close(27) = -1 EBADF (Bad file descriptor) [pid 6403] close(28) = -1 EBADF (Bad file descriptor) [pid 6403] close(29) = -1 EBADF (Bad file descriptor) [pid 6403] exit_group(0 [pid 6404] <... futex resumed>) = ? [pid 6421] <... futex resumed>) = ? [pid 6403] <... exit_group resumed>) = ? [pid 6404] +++ exited with 0 +++ [pid 6421] +++ exited with 0 +++ [pid 6403] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=218, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./72/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./72/cgroup.cpu") = 0 [pid 5007] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./72/binderfs") = 0 [pid 5007] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./72/file0") = 0 [pid 5007] umount2("./72/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./72/cgroup") = 0 [pid 5007] umount2("./72/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./72/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./72") = 0 [pid 5007] mkdir("./73", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6422 attached [pid 6422] set_robust_list(0x5555571235e0, 24) = 0 [pid 6422] chdir("./73") = 0 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6422] setpgid(0, 0) = 0 [pid 6422] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 221 [pid 6422] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6422] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6422] write(3, "1000", 4) = 4 [pid 6422] close(3) = 0 [pid 6422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6422] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[222], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 222 ./strace-static-x86_64: Process 6423 attached [pid 6423] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6423] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6423] <... futex resumed>) = 0 [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6423] memfd_create("syzkaller", 0) = 3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6423] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6423] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6423] close(3) = 0 [pid 6423] mkdir("./file0", 0777) = 0 [ 132.103043][ T6423] loop0: detected capacity change from 0 to 32768 [ 132.112795][ T6423] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6423) [ 132.129308][ T6423] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.138119][ T6423] BTRFS info (device loop0): using free space tree [pid 6423] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6423] chdir("./file0") = 0 [pid 6423] ioctl(4, LOOP_CLR_FD) = 0 [pid 6423] close(4) = 0 [pid 6423] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6423] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6423] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6423] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6423] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6422] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.158849][ T6423] BTRFS info (device loop0): enabling ssd optimizations [ 132.166045][ T6423] BTRFS info (device loop0): auto enabling async discard [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6422] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6422] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6440 attached , parent_tid=[223], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 223 [pid 6422] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6440] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6440] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6422] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 132.212977][ T6423] BTRFS info (device loop0): balance: start -s [ 132.221359][ T6423] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6440] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6423] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6423] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.277064][ T6423] BTRFS info (device loop0): balance: ended with status: 0 [pid 6423] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] <... ioctl resumed>) = 0 [pid 6440] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] close(3 [pid 6440] <... futex resumed>) = 0 [pid 6422] <... close resumed>) = 0 [pid 6422] close(4) = 0 [pid 6440] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] close(5) = 0 [pid 6422] close(6) = -1 EBADF (Bad file descriptor) [pid 6422] close(7) = -1 EBADF (Bad file descriptor) [pid 6422] close(8) = -1 EBADF (Bad file descriptor) [pid 6422] close(9) = -1 EBADF (Bad file descriptor) [pid 6422] close(10) = -1 EBADF (Bad file descriptor) [pid 6422] close(11) = -1 EBADF (Bad file descriptor) [pid 6422] close(12) = -1 EBADF (Bad file descriptor) [pid 6422] close(13) = -1 EBADF (Bad file descriptor) [pid 6422] close(14) = -1 EBADF (Bad file descriptor) [pid 6422] close(15) = -1 EBADF (Bad file descriptor) [pid 6422] close(16) = -1 EBADF (Bad file descriptor) [pid 6422] close(17) = -1 EBADF (Bad file descriptor) [pid 6422] close(18) = -1 EBADF (Bad file descriptor) [pid 6422] close(19) = -1 EBADF (Bad file descriptor) [pid 6422] close(20) = -1 EBADF (Bad file descriptor) [pid 6422] close(21) = -1 EBADF (Bad file descriptor) [pid 6422] close(22) = -1 EBADF (Bad file descriptor) [pid 6422] close(23) = -1 EBADF (Bad file descriptor) [pid 6422] close(24) = -1 EBADF (Bad file descriptor) [pid 6422] close(25) = -1 EBADF (Bad file descriptor) [pid 6422] close(26) = -1 EBADF (Bad file descriptor) [pid 6422] close(27) = -1 EBADF (Bad file descriptor) [pid 6422] close(28) = -1 EBADF (Bad file descriptor) [pid 6422] close(29) = -1 EBADF (Bad file descriptor) [pid 6422] exit_group(0 [pid 6440] <... futex resumed>) = ? [pid 6423] <... futex resumed>) = ? [pid 6422] <... exit_group resumed>) = ? [pid 6440] +++ exited with 0 +++ [pid 6423] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=221, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./73/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./73/cgroup.cpu") = 0 [pid 5007] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./73/binderfs") = 0 [pid 5007] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./73/file0") = 0 [pid 5007] umount2("./73/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./73/cgroup") = 0 [pid 5007] umount2("./73/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./73/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./73") = 0 [pid 5007] mkdir("./74", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 224 ./strace-static-x86_64: Process 6441 attached [pid 6441] set_robust_list(0x5555571235e0, 24) = 0 [pid 6441] chdir("./74") = 0 [pid 6441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6441] setpgid(0, 0) = 0 [pid 6441] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6441] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6441] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6441] write(3, "1000", 4) = 4 [pid 6441] close(3) = 0 [pid 6441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6441] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6441] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6442 attached [pid 6442] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] <... clone resumed>, parent_tid=[225], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 225 [pid 6441] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 6441] <... futex resumed>) = 1 [pid 6442] memfd_create("syzkaller", 0) = 3 [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6442] <... mmap resumed>) = 0x7fd088ba7000 [pid 6442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6442] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6442] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6442] close(3) = 0 [pid 6442] mkdir("./file0", 0777) = 0 [ 132.809425][ T6442] loop0: detected capacity change from 0 to 32768 [ 132.820654][ T6442] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6442) [ 132.838140][ T6442] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.846975][ T6442] BTRFS info (device loop0): using free space tree [pid 6442] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6442] chdir("./file0") = 0 [pid 6442] ioctl(4, LOOP_CLR_FD) = 0 [pid 6442] close(4) = 0 [pid 6442] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6442] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] <... futex resumed>) = 0 [pid 6442] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 132.866480][ T6442] BTRFS info (device loop0): enabling ssd optimizations [ 132.873545][ T6442] BTRFS info (device loop0): auto enabling async discard [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6441] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6441] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6459 attached [pid 6459] set_robust_list(0x7fd089ba69e0, 24 [pid 6441] <... clone resumed>, parent_tid=[226], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 226 [pid 6459] <... set_robust_list resumed>) = 0 [pid 6459] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] <... futex resumed>) = 0 [pid 6459] openat(AT_FDCWD, ".", O_RDONLY [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] <... openat resumed>) = 5 [pid 6459] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [ 132.923114][ T6442] BTRFS info (device loop0): balance: start -s [ 132.932005][ T6442] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6459] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6441] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 132.969495][ T6442] BTRFS info (device loop0): balance: ended with status: 0 [pid 6459] <... ioctl resumed>) = 0 [pid 6459] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6459] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] close(3 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] <... close resumed>) = 0 [pid 6441] close(4) = 0 [pid 6441] close(5) = 0 [pid 6441] close(6) = -1 EBADF (Bad file descriptor) [pid 6441] close(7) = -1 EBADF (Bad file descriptor) [pid 6441] close(8) = -1 EBADF (Bad file descriptor) [pid 6441] close(9) = -1 EBADF (Bad file descriptor) [pid 6441] close(10) = -1 EBADF (Bad file descriptor) [pid 6441] close(11) = -1 EBADF (Bad file descriptor) [pid 6441] close(12) = -1 EBADF (Bad file descriptor) [pid 6441] close(13) = -1 EBADF (Bad file descriptor) [pid 6441] close(14) = -1 EBADF (Bad file descriptor) [pid 6441] close(15) = -1 EBADF (Bad file descriptor) [pid 6441] close(16) = -1 EBADF (Bad file descriptor) [pid 6441] close(17) = -1 EBADF (Bad file descriptor) [pid 6441] close(18) = -1 EBADF (Bad file descriptor) [pid 6441] close(19) = -1 EBADF (Bad file descriptor) [pid 6441] close(20) = -1 EBADF (Bad file descriptor) [pid 6441] close(21) = -1 EBADF (Bad file descriptor) [pid 6441] close(22) = -1 EBADF (Bad file descriptor) [pid 6441] close(23) = -1 EBADF (Bad file descriptor) [pid 6441] close(24) = -1 EBADF (Bad file descriptor) [pid 6441] close(25) = -1 EBADF (Bad file descriptor) [pid 6441] close(26) = -1 EBADF (Bad file descriptor) [pid 6441] close(27) = -1 EBADF (Bad file descriptor) [pid 6441] close(28) = -1 EBADF (Bad file descriptor) [pid 6441] close(29) = -1 EBADF (Bad file descriptor) [pid 6441] exit_group(0 [pid 6459] <... futex resumed>) = ? [pid 6442] <... futex resumed>) = ? [pid 6441] <... exit_group resumed>) = ? [pid 6459] +++ exited with 0 +++ [pid 6442] +++ exited with 0 +++ [pid 6441] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=224, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./74/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./74/cgroup.cpu") = 0 [pid 5007] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./74/binderfs") = 0 [pid 5007] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./74/file0") = 0 [pid 5007] umount2("./74/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./74/cgroup") = 0 [pid 5007] umount2("./74/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./74/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./74") = 0 [pid 5007] mkdir("./75", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6460 attached [pid 6460] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 227 [pid 6460] <... set_robust_list resumed>) = 0 [pid 6460] chdir("./75") = 0 [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6460] setpgid(0, 0) = 0 [pid 6460] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6460] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6460] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6460] write(3, "1000", 4) = 4 [pid 6460] close(3) = 0 [pid 6460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6460] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6460] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6461 attached , parent_tid=[228], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 228 [pid 6460] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6461] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6461] memfd_create("syzkaller", 0) = 3 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6461] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6461] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6461] close(3) = 0 [pid 6461] mkdir("./file0", 0777) = 0 [ 133.465737][ T6461] loop0: detected capacity change from 0 to 32768 [ 133.477645][ T6461] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6461) [ 133.494680][ T6461] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 133.503766][ T6461] BTRFS info (device loop0): using free space tree [pid 6461] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6461] chdir("./file0") = 0 [pid 6461] ioctl(4, LOOP_CLR_FD) = 0 [pid 6461] close(4) = 0 [pid 6461] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6461] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = 0 [pid 6460] <... futex resumed>) = 1 [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6461] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6460] <... futex resumed>) = 0 [ 133.524330][ T6461] BTRFS info (device loop0): enabling ssd optimizations [ 133.531838][ T6461] BTRFS info (device loop0): auto enabling async discard [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6460] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6460] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6460] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6478 attached [pid 6478] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6478] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] <... clone resumed>, parent_tid=[229], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 229 [pid 6460] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6460] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... futex resumed>) = 0 [pid 6478] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6478] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = 1 [pid 6460] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6460] <... futex resumed>) = 0 [ 133.576721][ T6461] BTRFS info (device loop0): balance: start -s [ 133.585946][ T6461] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6460] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 133.659358][ T6461] BTRFS info (device loop0): balance: ended with status: 0 [pid 6461] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6461] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] <... ioctl resumed>) = 0 [pid 6478] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] close(3) = 0 [pid 6460] close(4) = 0 [pid 6460] close(5) = 0 [pid 6460] close(6) = -1 EBADF (Bad file descriptor) [pid 6460] close(7) = -1 EBADF (Bad file descriptor) [pid 6460] close(8) = -1 EBADF (Bad file descriptor) [pid 6460] close(9) = -1 EBADF (Bad file descriptor) [pid 6460] close(10) = -1 EBADF (Bad file descriptor) [pid 6460] close(11) = -1 EBADF (Bad file descriptor) [pid 6460] close(12) = -1 EBADF (Bad file descriptor) [pid 6460] close(13) = -1 EBADF (Bad file descriptor) [pid 6460] close(14) = -1 EBADF (Bad file descriptor) [pid 6460] close(15) = -1 EBADF (Bad file descriptor) [pid 6460] close(16) = -1 EBADF (Bad file descriptor) [pid 6460] close(17) = -1 EBADF (Bad file descriptor) [pid 6460] close(18) = -1 EBADF (Bad file descriptor) [pid 6460] close(19) = -1 EBADF (Bad file descriptor) [pid 6460] close(20) = -1 EBADF (Bad file descriptor) [pid 6460] close(21) = -1 EBADF (Bad file descriptor) [pid 6460] close(22) = -1 EBADF (Bad file descriptor) [pid 6460] close(23) = -1 EBADF (Bad file descriptor) [pid 6460] close(24) = -1 EBADF (Bad file descriptor) [pid 6460] close(25) = -1 EBADF (Bad file descriptor) [pid 6460] close(26) = -1 EBADF (Bad file descriptor) [pid 6460] close(27) = -1 EBADF (Bad file descriptor) [pid 6460] close(28) = -1 EBADF (Bad file descriptor) [pid 6460] close(29) = -1 EBADF (Bad file descriptor) [pid 6460] exit_group(0 [pid 6478] <... futex resumed>) = ? [pid 6461] <... futex resumed>) = ? [pid 6460] <... exit_group resumed>) = ? [pid 6478] +++ exited with 0 +++ [pid 6461] +++ exited with 0 +++ [pid 6460] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=227, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./75/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./75/cgroup.cpu") = 0 [pid 5007] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./75/binderfs") = 0 [pid 5007] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./75/file0") = 0 [pid 5007] umount2("./75/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./75/cgroup") = 0 [pid 5007] umount2("./75/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./75/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./75") = 0 [pid 5007] mkdir("./76", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 230 ./strace-static-x86_64: Process 6479 attached [pid 6479] set_robust_list(0x5555571235e0, 24) = 0 [pid 6479] chdir("./76") = 0 [pid 6479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6479] setpgid(0, 0) = 0 [pid 6479] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6479] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6479] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6479] write(3, "1000", 4) = 4 [pid 6479] close(3) = 0 [pid 6479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6479] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6479] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[231], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 231 [pid 6479] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6480 attached [pid 6480] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6480] memfd_create("syzkaller", 0) = 3 [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6480] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6480] close(3) = 0 [pid 6480] mkdir("./file0", 0777) = 0 [ 134.159469][ T6480] loop0: detected capacity change from 0 to 32768 [ 134.170327][ T6480] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6480) [ 134.187122][ T6480] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.195953][ T6480] BTRFS info (device loop0): using free space tree [pid 6480] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6480] chdir("./file0") = 0 [pid 6480] ioctl(4, LOOP_CLR_FD) = 0 [pid 6480] close(4) = 0 [pid 6480] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] <... futex resumed>) = 0 [pid 6480] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6479] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... openat resumed>) = 4 [pid 6480] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = 0 [pid 6479] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... futex resumed>) = 1 [ 134.215924][ T6480] BTRFS info (device loop0): enabling ssd optimizations [ 134.222936][ T6480] BTRFS info (device loop0): auto enabling async discard [pid 6480] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6479] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6479] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[232], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 232 [pid 6479] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6497 attached [pid 6497] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6497] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6497] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = 0 [pid 6479] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = 1 [ 134.267863][ T6480] BTRFS info (device loop0): balance: start -s [ 134.276852][ T6480] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6497] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 134.342421][ T6480] BTRFS info (device loop0): balance: ended with status: 0 [pid 6480] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6480] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6480] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] <... ioctl resumed>) = 0 [pid 6497] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] close(3) = 0 [pid 6479] close(4) = 0 [pid 6479] close(5) = 0 [pid 6479] close(6) = -1 EBADF (Bad file descriptor) [pid 6479] close(7) = -1 EBADF (Bad file descriptor) [pid 6479] close(8) = -1 EBADF (Bad file descriptor) [pid 6479] close(9) = -1 EBADF (Bad file descriptor) [pid 6479] close(10) = -1 EBADF (Bad file descriptor) [pid 6479] close(11) = -1 EBADF (Bad file descriptor) [pid 6479] close(12) = -1 EBADF (Bad file descriptor) [pid 6479] close(13) = -1 EBADF (Bad file descriptor) [pid 6479] close(14) = -1 EBADF (Bad file descriptor) [pid 6479] close(15) = -1 EBADF (Bad file descriptor) [pid 6479] close(16) = -1 EBADF (Bad file descriptor) [pid 6479] close(17) = -1 EBADF (Bad file descriptor) [pid 6479] close(18) = -1 EBADF (Bad file descriptor) [pid 6479] close(19) = -1 EBADF (Bad file descriptor) [pid 6479] close(20) = -1 EBADF (Bad file descriptor) [pid 6479] close(21) = -1 EBADF (Bad file descriptor) [pid 6479] close(22) = -1 EBADF (Bad file descriptor) [pid 6479] close(23) = -1 EBADF (Bad file descriptor) [pid 6479] close(24) = -1 EBADF (Bad file descriptor) [pid 6479] close(25) = -1 EBADF (Bad file descriptor) [pid 6479] close(26) = -1 EBADF (Bad file descriptor) [pid 6479] close(27) = -1 EBADF (Bad file descriptor) [pid 6479] close(28) = -1 EBADF (Bad file descriptor) [pid 6479] close(29) = -1 EBADF (Bad file descriptor) [pid 6479] exit_group(0 [pid 6497] <... futex resumed>) = ? [pid 6480] <... futex resumed>) = ? [pid 6479] <... exit_group resumed>) = ? [pid 6497] +++ exited with 0 +++ [pid 6480] +++ exited with 0 +++ [pid 6479] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=230, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./76/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./76/cgroup.cpu") = 0 [pid 5007] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./76/binderfs") = 0 [pid 5007] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./76/file0") = 0 [pid 5007] umount2("./76/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./76/cgroup") = 0 [pid 5007] umount2("./76/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./76/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./76") = 0 [pid 5007] mkdir("./77", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6498 attached , child_tidptr=0x5555571235d0) = 233 [pid 6498] set_robust_list(0x5555571235e0, 24) = 0 [pid 6498] chdir("./77") = 0 [pid 6498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6498] setpgid(0, 0) = 0 [pid 6498] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6498] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6498] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6498] write(3, "1000", 4) = 4 [pid 6498] close(3) = 0 [pid 6498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6498] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6498] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6499 attached [pid 6499] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6499] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] <... clone resumed>, parent_tid=[234], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 234 [pid 6498] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6499] memfd_create("syzkaller", 0) = 3 [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6499] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6499] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6499] close(3) = 0 [pid 6499] mkdir("./file0", 0777) = 0 [ 134.863275][ T6499] loop0: detected capacity change from 0 to 32768 [ 134.874298][ T6499] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6499) [ 134.891006][ T6499] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.900267][ T6499] BTRFS info (device loop0): using free space tree [pid 6499] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6499] chdir("./file0") = 0 [pid 6499] ioctl(4, LOOP_CLR_FD) = 0 [pid 6499] close(4) = 0 [pid 6499] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... futex resumed>) = 1 [pid 6499] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6499] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] <... futex resumed>) = 1 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 134.921227][ T6499] BTRFS info (device loop0): enabling ssd optimizations [ 134.928692][ T6499] BTRFS info (device loop0): auto enabling async discard [pid 6499] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6498] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6498] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [ 134.964859][ T6499] BTRFS info (device loop0): balance: start -s [ 134.977280][ T6499] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6498] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[235], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 235 [pid 6498] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6516 attached [pid 6516] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6516] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6516] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6498] <... futex resumed>) = 0 [pid 6516] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6498] <... futex resumed>) = 0 [pid 6516] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 135.008613][ T6499] BTRFS info (device loop0): balance: ended with status: 0 [pid 6498] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6499] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6499] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6516] <... ioctl resumed>) = 0 [pid 6516] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] close(3 [pid 6516] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] <... close resumed>) = 0 [pid 6498] close(4) = 0 [pid 6498] close(5) = 0 [pid 6498] close(6) = -1 EBADF (Bad file descriptor) [pid 6498] close(7) = -1 EBADF (Bad file descriptor) [pid 6498] close(8) = -1 EBADF (Bad file descriptor) [pid 6498] close(9) = -1 EBADF (Bad file descriptor) [pid 6498] close(10) = -1 EBADF (Bad file descriptor) [pid 6498] close(11) = -1 EBADF (Bad file descriptor) [pid 6498] close(12) = -1 EBADF (Bad file descriptor) [pid 6498] close(13) = -1 EBADF (Bad file descriptor) [pid 6498] close(14) = -1 EBADF (Bad file descriptor) [pid 6498] close(15) = -1 EBADF (Bad file descriptor) [pid 6498] close(16) = -1 EBADF (Bad file descriptor) [pid 6498] close(17) = -1 EBADF (Bad file descriptor) [pid 6498] close(18) = -1 EBADF (Bad file descriptor) [pid 6498] close(19) = -1 EBADF (Bad file descriptor) [pid 6498] close(20) = -1 EBADF (Bad file descriptor) [pid 6498] close(21) = -1 EBADF (Bad file descriptor) [pid 6498] close(22) = -1 EBADF (Bad file descriptor) [pid 6498] close(23) = -1 EBADF (Bad file descriptor) [pid 6498] close(24) = -1 EBADF (Bad file descriptor) [pid 6498] close(25) = -1 EBADF (Bad file descriptor) [pid 6498] close(26) = -1 EBADF (Bad file descriptor) [pid 6498] close(27) = -1 EBADF (Bad file descriptor) [pid 6498] close(28) = -1 EBADF (Bad file descriptor) [pid 6498] close(29) = -1 EBADF (Bad file descriptor) [pid 6498] exit_group(0 [pid 6516] <... futex resumed>) = ? [pid 6499] <... futex resumed>) = ? [pid 6516] +++ exited with 0 +++ [pid 6499] +++ exited with 0 +++ [pid 6498] <... exit_group resumed>) = ? [pid 6498] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=233, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./77/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./77/cgroup.cpu") = 0 [pid 5007] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./77/binderfs") = 0 [pid 5007] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./77/file0") = 0 [pid 5007] umount2("./77/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./77/cgroup") = 0 [pid 5007] umount2("./77/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./77/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./77") = 0 [pid 5007] mkdir("./78", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6517 attached [pid 6517] set_robust_list(0x5555571235e0, 24) = 0 [pid 6517] chdir("./78" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 236 [pid 6517] <... chdir resumed>) = 0 [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6517] setpgid(0, 0) = 0 [pid 6517] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6517] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6517] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6517] write(3, "1000", 4) = 4 [pid 6517] close(3) = 0 [pid 6517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6517] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6517] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[237], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 237 [pid 6517] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6518 attached [pid 6518] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6518] memfd_create("syzkaller", 0) = 3 [pid 6518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6518] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6518] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6518] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6518] close(3) = 0 [pid 6518] mkdir("./file0", 0777) = 0 [ 135.556533][ T6518] loop0: detected capacity change from 0 to 32768 [ 135.566118][ T6518] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6518) [ 135.582895][ T6518] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 135.591883][ T6518] BTRFS info (device loop0): using free space tree [pid 6518] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6518] chdir("./file0") = 0 [pid 6518] ioctl(4, LOOP_CLR_FD) = 0 [pid 6518] close(4) = 0 [pid 6518] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6517] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... futex resumed>) = 1 [pid 6518] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6518] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6517] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... futex resumed>) = 1 [ 135.612378][ T6518] BTRFS info (device loop0): enabling ssd optimizations [ 135.619485][ T6518] BTRFS info (device loop0): auto enabling async discard [pid 6518] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6517] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6517] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[238], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 238 [pid 6517] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.658952][ T6518] BTRFS info (device loop0): balance: start -s [ 135.668051][ T6518] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6517] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6535 attached [pid 6535] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6535] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6535] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6535] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6535] <... futex resumed>) = 0 [pid 6517] <... futex resumed>) = 1 [pid 6535] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 135.702356][ T6518] BTRFS info (device loop0): balance: ended with status: 0 [pid 6517] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6518] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6518] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6518] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] <... ioctl resumed>) = 0 [pid 6535] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] close(3) = 0 [pid 6517] close(4) = 0 [pid 6517] close(5) = 0 [pid 6517] close(6) = -1 EBADF (Bad file descriptor) [pid 6517] close(7) = -1 EBADF (Bad file descriptor) [pid 6517] close(8) = -1 EBADF (Bad file descriptor) [pid 6517] close(9) = -1 EBADF (Bad file descriptor) [pid 6517] close(10) = -1 EBADF (Bad file descriptor) [pid 6517] close(11) = -1 EBADF (Bad file descriptor) [pid 6517] close(12) = -1 EBADF (Bad file descriptor) [pid 6517] close(13) = -1 EBADF (Bad file descriptor) [pid 6517] close(14) = -1 EBADF (Bad file descriptor) [pid 6517] close(15) = -1 EBADF (Bad file descriptor) [pid 6517] close(16) = -1 EBADF (Bad file descriptor) [pid 6517] close(17) = -1 EBADF (Bad file descriptor) [pid 6517] close(18) = -1 EBADF (Bad file descriptor) [pid 6517] close(19) = -1 EBADF (Bad file descriptor) [pid 6517] close(20) = -1 EBADF (Bad file descriptor) [pid 6517] close(21) = -1 EBADF (Bad file descriptor) [pid 6517] close(22) = -1 EBADF (Bad file descriptor) [pid 6517] close(23) = -1 EBADF (Bad file descriptor) [pid 6517] close(24) = -1 EBADF (Bad file descriptor) [pid 6517] close(25) = -1 EBADF (Bad file descriptor) [pid 6517] close(26) = -1 EBADF (Bad file descriptor) [pid 6517] close(27) = -1 EBADF (Bad file descriptor) [pid 6517] close(28) = -1 EBADF (Bad file descriptor) [pid 6517] close(29) = -1 EBADF (Bad file descriptor) [pid 6517] exit_group(0 [pid 6535] <... futex resumed>) = ? [pid 6518] <... futex resumed>) = ? [pid 6517] <... exit_group resumed>) = ? [pid 6535] +++ exited with 0 +++ [pid 6518] +++ exited with 0 +++ [pid 6517] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=236, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./78/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./78/cgroup.cpu") = 0 [pid 5007] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./78/binderfs") = 0 [pid 5007] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./78/file0") = 0 [pid 5007] umount2("./78/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./78/cgroup") = 0 [pid 5007] umount2("./78/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./78/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./78") = 0 [pid 5007] mkdir("./79", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6536 attached [pid 6536] set_robust_list(0x5555571235e0, 24) = 0 [pid 6536] chdir("./79") = 0 [pid 6536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6536] setpgid(0, 0) = 0 [pid 6536] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6536] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6536] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 239 [pid 6536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6536] write(3, "1000", 4) = 4 [pid 6536] close(3) = 0 [pid 6536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6536] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6536] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6537 attached , parent_tid=[240], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 240 [pid 6537] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6537] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] memfd_create("syzkaller", 0 [pid 6536] <... futex resumed>) = 0 [pid 6537] <... memfd_create resumed>) = 3 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6537] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6537] close(3) = 0 [pid 6537] mkdir("./file0", 0777) = 0 [ 136.237349][ T6537] loop0: detected capacity change from 0 to 32768 [ 136.249441][ T6537] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6537) [ 136.266988][ T6537] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 136.275781][ T6537] BTRFS info (device loop0): using free space tree [pid 6537] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6537] chdir("./file0") = 0 [pid 6537] ioctl(4, LOOP_CLR_FD) = 0 [pid 6537] close(4) = 0 [pid 6537] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6537] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 0 [pid 6537] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6537] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 136.295709][ T6537] BTRFS info (device loop0): enabling ssd optimizations [ 136.302838][ T6537] BTRFS info (device loop0): auto enabling async discard [pid 6537] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6536] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6536] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6536] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[241], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 241 ./strace-static-x86_64: Process 6554 attached [pid 6536] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] set_robust_list(0x7fd089ba69e0, 24 [pid 6536] <... futex resumed>) = 0 [pid 6554] <... set_robust_list resumed>) = 0 [pid 6536] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6554] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... futex resumed>) = 1 [ 136.353089][ T6537] BTRFS info (device loop0): balance: start -s [ 136.362634][ T6537] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6554] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6537] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6537] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 136.423862][ T6537] BTRFS info (device loop0): balance: ended with status: 0 [pid 6537] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... ioctl resumed>) = 0 [pid 6554] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6554] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] close(3) = 0 [pid 6536] close(4) = 0 [pid 6536] close(5) = 0 [pid 6536] close(6) = -1 EBADF (Bad file descriptor) [pid 6536] close(7) = -1 EBADF (Bad file descriptor) [pid 6536] close(8) = -1 EBADF (Bad file descriptor) [pid 6536] close(9) = -1 EBADF (Bad file descriptor) [pid 6536] close(10) = -1 EBADF (Bad file descriptor) [pid 6536] close(11) = -1 EBADF (Bad file descriptor) [pid 6536] close(12) = -1 EBADF (Bad file descriptor) [pid 6536] close(13) = -1 EBADF (Bad file descriptor) [pid 6536] close(14) = -1 EBADF (Bad file descriptor) [pid 6536] close(15) = -1 EBADF (Bad file descriptor) [pid 6536] close(16) = -1 EBADF (Bad file descriptor) [pid 6536] close(17) = -1 EBADF (Bad file descriptor) [pid 6536] close(18) = -1 EBADF (Bad file descriptor) [pid 6536] close(19) = -1 EBADF (Bad file descriptor) [pid 6536] close(20) = -1 EBADF (Bad file descriptor) [pid 6536] close(21) = -1 EBADF (Bad file descriptor) [pid 6536] close(22) = -1 EBADF (Bad file descriptor) [pid 6536] close(23) = -1 EBADF (Bad file descriptor) [pid 6536] close(24) = -1 EBADF (Bad file descriptor) [pid 6536] close(25) = -1 EBADF (Bad file descriptor) [pid 6536] close(26) = -1 EBADF (Bad file descriptor) [pid 6536] close(27) = -1 EBADF (Bad file descriptor) [pid 6536] close(28) = -1 EBADF (Bad file descriptor) [pid 6536] close(29) = -1 EBADF (Bad file descriptor) [pid 6536] exit_group(0 [pid 6554] <... futex resumed>) = ? [pid 6537] <... futex resumed>) = ? [pid 6536] <... exit_group resumed>) = ? [pid 6554] +++ exited with 0 +++ [pid 6537] +++ exited with 0 +++ [pid 6536] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=239, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./79/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./79/cgroup.cpu") = 0 [pid 5007] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./79/binderfs") = 0 [pid 5007] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./79/file0") = 0 [pid 5007] umount2("./79/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./79/cgroup") = 0 [pid 5007] umount2("./79/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./79/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./79") = 0 [pid 5007] mkdir("./80", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 242 ./strace-static-x86_64: Process 6555 attached [pid 6555] set_robust_list(0x5555571235e0, 24) = 0 [pid 6555] chdir("./80") = 0 [pid 6555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6555] setpgid(0, 0) = 0 [pid 6555] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6555] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6555] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6555] write(3, "1000", 4) = 4 [pid 6555] close(3) = 0 [pid 6555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6555] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6555] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6556 attached [pid 6556] set_robust_list(0x7fd090fc79e0, 24 [pid 6555] <... clone resumed>, parent_tid=[243], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 243 [pid 6556] <... set_robust_list resumed>) = 0 [pid 6555] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6556] memfd_create("syzkaller", 0) = 3 [pid 6556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6556] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6556] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6556] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6556] close(3) = 0 [pid 6556] mkdir("./file0", 0777) = 0 [ 136.937482][ T6556] loop0: detected capacity change from 0 to 32768 [ 136.951643][ T6556] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6556) [ 136.968807][ T6556] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 136.977648][ T6556] BTRFS info (device loop0): using free space tree [pid 6556] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6556] chdir("./file0") = 0 [pid 6556] ioctl(4, LOOP_CLR_FD) = 0 [pid 6556] close(4) = 0 [pid 6556] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = 0 [pid 6555] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] <... futex resumed>) = 1 [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6556] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6556] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6555] <... futex resumed>) = 0 [pid 6556] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6555] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 136.997805][ T6556] BTRFS info (device loop0): enabling ssd optimizations [ 137.004894][ T6556] BTRFS info (device loop0): auto enabling async discard [ 137.058259][ T6556] BTRFS info (device loop0): balance: start -s [ 137.066733][ T6556] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6555] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6555] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6555] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6573 attached [pid 6573] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6573] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... clone resumed>, parent_tid=[244], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 244 [pid 6555] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6573] <... futex resumed>) = 0 [pid 6573] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6573] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6573] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6555] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6573] <... futex resumed>) = 0 [pid 6573] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6555] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6556] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6556] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.100993][ T6556] BTRFS info (device loop0): balance: ended with status: 0 [pid 6556] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6573] <... ioctl resumed>) = 0 [pid 6573] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] close(3 [pid 6573] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... close resumed>) = 0 [pid 6555] close(4) = 0 [pid 6555] close(5) = 0 [pid 6555] close(6) = -1 EBADF (Bad file descriptor) [pid 6555] close(7) = -1 EBADF (Bad file descriptor) [pid 6555] close(8) = -1 EBADF (Bad file descriptor) [pid 6555] close(9) = -1 EBADF (Bad file descriptor) [pid 6555] close(10) = -1 EBADF (Bad file descriptor) [pid 6555] close(11) = -1 EBADF (Bad file descriptor) [pid 6555] close(12) = -1 EBADF (Bad file descriptor) [pid 6555] close(13) = -1 EBADF (Bad file descriptor) [pid 6555] close(14) = -1 EBADF (Bad file descriptor) [pid 6555] close(15) = -1 EBADF (Bad file descriptor) [pid 6555] close(16) = -1 EBADF (Bad file descriptor) [pid 6555] close(17) = -1 EBADF (Bad file descriptor) [pid 6555] close(18) = -1 EBADF (Bad file descriptor) [pid 6555] close(19) = -1 EBADF (Bad file descriptor) [pid 6555] close(20) = -1 EBADF (Bad file descriptor) [pid 6555] close(21) = -1 EBADF (Bad file descriptor) [pid 6555] close(22) = -1 EBADF (Bad file descriptor) [pid 6555] close(23) = -1 EBADF (Bad file descriptor) [pid 6555] close(24) = -1 EBADF (Bad file descriptor) [pid 6555] close(25) = -1 EBADF (Bad file descriptor) [pid 6555] close(26) = -1 EBADF (Bad file descriptor) [pid 6555] close(27) = -1 EBADF (Bad file descriptor) [pid 6555] close(28) = -1 EBADF (Bad file descriptor) [pid 6555] close(29) = -1 EBADF (Bad file descriptor) [pid 6555] exit_group(0 [pid 6573] <... futex resumed>) = ? [pid 6556] <... futex resumed>) = ? [pid 6555] <... exit_group resumed>) = ? [pid 6573] +++ exited with 0 +++ [pid 6556] +++ exited with 0 +++ [pid 6555] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=242, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=37 /* 0.37 s */} --- [pid 5007] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./80/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./80/cgroup.cpu") = 0 [pid 5007] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./80/binderfs") = 0 [pid 5007] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./80/file0") = 0 [pid 5007] umount2("./80/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./80/cgroup") = 0 [pid 5007] umount2("./80/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./80/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./80") = 0 [pid 5007] mkdir("./81", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6574 attached [pid 6574] set_robust_list(0x5555571235e0, 24) = 0 [pid 6574] chdir("./81" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 245 [pid 6574] <... chdir resumed>) = 0 [pid 6574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6574] setpgid(0, 0) = 0 [pid 6574] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6574] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6574] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6574] write(3, "1000", 4) = 4 [pid 6574] close(3) = 0 [pid 6574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6574] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6575 attached , parent_tid=[246], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 246 [pid 6575] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6575] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6575] <... futex resumed>) = 0 [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6575] memfd_create("syzkaller", 0) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6575] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6575] close(3) = 0 [pid 6575] mkdir("./file0", 0777) = 0 [ 137.644955][ T6575] loop0: detected capacity change from 0 to 32768 [ 137.656225][ T6575] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6575) [ 137.672790][ T6575] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 137.681641][ T6575] BTRFS info (device loop0): using free space tree [pid 6575] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6575] chdir("./file0") = 0 [pid 6575] ioctl(4, LOOP_CLR_FD) = 0 [pid 6575] close(4) = 0 [pid 6575] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6575] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6574] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] <... openat resumed>) = 4 [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6575] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6574] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.700875][ T6575] BTRFS info (device loop0): enabling ssd optimizations [ 137.708167][ T6575] BTRFS info (device loop0): auto enabling async discard [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6574] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6574] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6592 attached [pid 6592] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6592] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] <... clone resumed>, parent_tid=[247], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 247 [pid 6574] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] <... futex resumed>) = 0 [pid 6592] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6592] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] <... futex resumed>) = 1 [ 137.755226][ T6575] BTRFS info (device loop0): balance: start -s [ 137.764418][ T6575] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6592] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 137.847098][ T6575] BTRFS info (device loop0): balance: ended with status: 0 [pid 6575] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6575] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] <... ioctl resumed>) = 0 [pid 6575] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6592] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] close(3) = 0 [pid 6574] close(4) = 0 [pid 6574] close(5) = 0 [pid 6574] close(6) = -1 EBADF (Bad file descriptor) [pid 6574] close(7) = -1 EBADF (Bad file descriptor) [pid 6574] close(8) = -1 EBADF (Bad file descriptor) [pid 6574] close(9) = -1 EBADF (Bad file descriptor) [pid 6574] close(10) = -1 EBADF (Bad file descriptor) [pid 6574] close(11) = -1 EBADF (Bad file descriptor) [pid 6574] close(12) = -1 EBADF (Bad file descriptor) [pid 6574] close(13) = -1 EBADF (Bad file descriptor) [pid 6574] close(14) = -1 EBADF (Bad file descriptor) [pid 6574] close(15) = -1 EBADF (Bad file descriptor) [pid 6574] close(16) = -1 EBADF (Bad file descriptor) [pid 6574] close(17) = -1 EBADF (Bad file descriptor) [pid 6574] close(18) = -1 EBADF (Bad file descriptor) [pid 6574] close(19) = -1 EBADF (Bad file descriptor) [pid 6574] close(20) = -1 EBADF (Bad file descriptor) [pid 6574] close(21) = -1 EBADF (Bad file descriptor) [pid 6574] close(22) = -1 EBADF (Bad file descriptor) [pid 6574] close(23) = -1 EBADF (Bad file descriptor) [pid 6574] close(24) = -1 EBADF (Bad file descriptor) [pid 6574] close(25) = -1 EBADF (Bad file descriptor) [pid 6574] close(26) = -1 EBADF (Bad file descriptor) [pid 6574] close(27) = -1 EBADF (Bad file descriptor) [pid 6574] close(28) = -1 EBADF (Bad file descriptor) [pid 6574] close(29) = -1 EBADF (Bad file descriptor) [pid 6574] exit_group(0 [pid 6592] <... futex resumed>) = ? [pid 6575] <... futex resumed>) = ? [pid 6574] <... exit_group resumed>) = ? [pid 6592] +++ exited with 0 +++ [pid 6575] +++ exited with 0 +++ [pid 6574] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=245, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./81/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./81/cgroup.cpu") = 0 [pid 5007] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./81/binderfs") = 0 [pid 5007] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./81/file0") = 0 [pid 5007] umount2("./81/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./81/cgroup") = 0 [pid 5007] umount2("./81/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./81/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./81") = 0 [pid 5007] mkdir("./82", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 248 ./strace-static-x86_64: Process 6593 attached [pid 6593] set_robust_list(0x5555571235e0, 24) = 0 [pid 6593] chdir("./82") = 0 [pid 6593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6593] setpgid(0, 0) = 0 [pid 6593] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6593] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6593] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6593] write(3, "1000", 4) = 4 [pid 6593] close(3) = 0 [pid 6593] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6593] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6593] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6594 attached [pid 6594] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... clone resumed>, parent_tid=[249], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 249 [pid 6593] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6594] memfd_create("syzkaller", 0) = 3 [pid 6594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6594] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6594] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6594] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6594] close(3) = 0 [pid 6594] mkdir("./file0", 0777) = 0 [ 138.366044][ T6594] loop0: detected capacity change from 0 to 32768 [ 138.376123][ T6594] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6594) [ 138.393190][ T6594] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 138.402035][ T6594] BTRFS info (device loop0): using free space tree [pid 6594] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6594] chdir("./file0") = 0 [pid 6594] ioctl(4, LOOP_CLR_FD) = 0 [pid 6594] close(4) = 0 [pid 6594] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = 0 [pid 6593] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] <... futex resumed>) = 0 [pid 6594] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6594] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = 0 [ 138.420733][ T6594] BTRFS info (device loop0): enabling ssd optimizations [ 138.427890][ T6594] BTRFS info (device loop0): auto enabling async discard [pid 6593] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6593] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6593] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6593] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6593] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6611 attached [pid 6611] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6611] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... clone resumed>, parent_tid=[250], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 250 [pid 6593] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6611] <... futex resumed>) = 0 [pid 6593] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6611] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 138.496365][ T6594] BTRFS info (device loop0): balance: start -s [ 138.505936][ T6594] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6611] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6593] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6611] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6593] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6594] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 138.550105][ T6594] BTRFS info (device loop0): balance: ended with status: 0 [pid 6611] <... ioctl resumed>) = 0 [pid 6611] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] close(3 [pid 6611] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... close resumed>) = 0 [pid 6593] close(4) = 0 [pid 6593] close(5) = 0 [pid 6593] close(6) = -1 EBADF (Bad file descriptor) [pid 6593] close(7) = -1 EBADF (Bad file descriptor) [pid 6593] close(8) = -1 EBADF (Bad file descriptor) [pid 6593] close(9) = -1 EBADF (Bad file descriptor) [pid 6593] close(10) = -1 EBADF (Bad file descriptor) [pid 6593] close(11) = -1 EBADF (Bad file descriptor) [pid 6593] close(12) = -1 EBADF (Bad file descriptor) [pid 6593] close(13) = -1 EBADF (Bad file descriptor) [pid 6593] close(14) = -1 EBADF (Bad file descriptor) [pid 6593] close(15) = -1 EBADF (Bad file descriptor) [pid 6593] close(16) = -1 EBADF (Bad file descriptor) [pid 6593] close(17) = -1 EBADF (Bad file descriptor) [pid 6593] close(18) = -1 EBADF (Bad file descriptor) [pid 6593] close(19) = -1 EBADF (Bad file descriptor) [pid 6593] close(20) = -1 EBADF (Bad file descriptor) [pid 6593] close(21) = -1 EBADF (Bad file descriptor) [pid 6593] close(22) = -1 EBADF (Bad file descriptor) [pid 6593] close(23) = -1 EBADF (Bad file descriptor) [pid 6593] close(24) = -1 EBADF (Bad file descriptor) [pid 6593] close(25) = -1 EBADF (Bad file descriptor) [pid 6593] close(26) = -1 EBADF (Bad file descriptor) [pid 6593] close(27) = -1 EBADF (Bad file descriptor) [pid 6593] close(28) = -1 EBADF (Bad file descriptor) [pid 6593] close(29) = -1 EBADF (Bad file descriptor) [pid 6593] exit_group(0 [pid 6611] <... futex resumed>) = ? [pid 6594] <... futex resumed>) = ? [pid 6593] <... exit_group resumed>) = ? [pid 6611] +++ exited with 0 +++ [pid 6594] +++ exited with 0 +++ [pid 6593] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=248, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./82/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./82/cgroup.cpu") = 0 [pid 5007] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./82/binderfs") = 0 [pid 5007] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./82/file0") = 0 [pid 5007] umount2("./82/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./82/cgroup") = 0 [pid 5007] umount2("./82/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./82/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./82") = 0 [pid 5007] mkdir("./83", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 251 ./strace-static-x86_64: Process 6612 attached [pid 6612] set_robust_list(0x5555571235e0, 24) = 0 [pid 6612] chdir("./83") = 0 [pid 6612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6612] setpgid(0, 0) = 0 [pid 6612] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6612] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6612] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6612] write(3, "1000", 4) = 4 [pid 6612] close(3) = 0 [pid 6612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6612] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6612] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6613 attached [pid 6613] set_robust_list(0x7fd090fc79e0, 24 [pid 6612] <... clone resumed>, parent_tid=[252], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 252 [pid 6613] <... set_robust_list resumed>) = 0 [pid 6612] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] memfd_create("syzkaller", 0 [pid 6612] <... futex resumed>) = 0 [pid 6613] <... memfd_create resumed>) = 3 [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6613] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6613] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6613] close(3) = 0 [pid 6613] mkdir("./file0", 0777) = 0 [ 139.076706][ T6613] loop0: detected capacity change from 0 to 32768 [ 139.088420][ T6613] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6613) [ 139.105325][ T6613] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.114074][ T6613] BTRFS info (device loop0): using free space tree [pid 6613] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6613] chdir("./file0") = 0 [pid 6613] ioctl(4, LOOP_CLR_FD) = 0 [pid 6613] close(4) = 0 [pid 6613] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6613] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6612] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... openat resumed>) = 4 [pid 6612] <... futex resumed>) = 0 [pid 6613] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... futex resumed>) = 0 [pid 6612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6612] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.134913][ T6613] BTRFS info (device loop0): enabling ssd optimizations [ 139.142294][ T6613] BTRFS info (device loop0): auto enabling async discard [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6612] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6612] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6612] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6630 attached [pid 6630] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6630] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] <... clone resumed>, parent_tid=[253], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 253 [pid 6612] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... futex resumed>) = 0 [pid 6630] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6630] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] <... futex resumed>) = 0 [pid 6612] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.182249][ T6613] BTRFS info (device loop0): balance: start -s [ 139.191082][ T6613] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6612] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... futex resumed>) = 1 [pid 6630] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 139.248407][ T6613] BTRFS info (device loop0): balance: ended with status: 0 [pid 6613] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6613] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6630] <... ioctl resumed>) = 0 [pid 6630] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6630] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] close(3) = 0 [pid 6612] close(4) = 0 [pid 6612] close(5) = 0 [pid 6612] close(6) = -1 EBADF (Bad file descriptor) [pid 6612] close(7) = -1 EBADF (Bad file descriptor) [pid 6612] close(8) = -1 EBADF (Bad file descriptor) [pid 6612] close(9) = -1 EBADF (Bad file descriptor) [pid 6612] close(10) = -1 EBADF (Bad file descriptor) [pid 6612] close(11) = -1 EBADF (Bad file descriptor) [pid 6612] close(12) = -1 EBADF (Bad file descriptor) [pid 6612] close(13) = -1 EBADF (Bad file descriptor) [pid 6612] close(14) = -1 EBADF (Bad file descriptor) [pid 6612] close(15) = -1 EBADF (Bad file descriptor) [pid 6612] close(16) = -1 EBADF (Bad file descriptor) [pid 6612] close(17) = -1 EBADF (Bad file descriptor) [pid 6612] close(18) = -1 EBADF (Bad file descriptor) [pid 6612] close(19) = -1 EBADF (Bad file descriptor) [pid 6612] close(20) = -1 EBADF (Bad file descriptor) [pid 6612] close(21) = -1 EBADF (Bad file descriptor) [pid 6612] close(22) = -1 EBADF (Bad file descriptor) [pid 6612] close(23) = -1 EBADF (Bad file descriptor) [pid 6612] close(24) = -1 EBADF (Bad file descriptor) [pid 6612] close(25) = -1 EBADF (Bad file descriptor) [pid 6612] close(26) = -1 EBADF (Bad file descriptor) [pid 6612] close(27) = -1 EBADF (Bad file descriptor) [pid 6612] close(28) = -1 EBADF (Bad file descriptor) [pid 6612] close(29) = -1 EBADF (Bad file descriptor) [pid 6612] exit_group(0 [pid 6630] <... futex resumed>) = ? [pid 6613] <... futex resumed>) = ? [pid 6612] <... exit_group resumed>) = ? [pid 6630] +++ exited with 0 +++ [pid 6613] +++ exited with 0 +++ [pid 6612] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=251, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./83/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./83/cgroup.cpu") = 0 [pid 5007] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./83/binderfs") = 0 [pid 5007] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./83/file0") = 0 [pid 5007] umount2("./83/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./83/cgroup") = 0 [pid 5007] umount2("./83/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./83/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./83") = 0 [pid 5007] mkdir("./84", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6631 attached [pid 6631] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 254 [pid 6631] <... set_robust_list resumed>) = 0 [pid 6631] chdir("./84") = 0 [pid 6631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6631] setpgid(0, 0) = 0 [pid 6631] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6631] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6631] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6631] write(3, "1000", 4) = 4 [pid 6631] close(3) = 0 [pid 6631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6631] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6632 attached , parent_tid=[255], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 255 [pid 6632] set_robust_list(0x7fd090fc79e0, 24 [pid 6631] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] <... set_robust_list resumed>) = 0 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6632] memfd_create("syzkaller", 0) = 3 [pid 6632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6632] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6632] close(3) = 0 [pid 6632] mkdir("./file0", 0777) = 0 [ 139.753746][ T6632] loop0: detected capacity change from 0 to 32768 [ 139.765496][ T6632] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6632) [ 139.782859][ T6632] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.791888][ T6632] BTRFS info (device loop0): using free space tree [pid 6632] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6632] chdir("./file0") = 0 [pid 6632] ioctl(4, LOOP_CLR_FD) = 0 [pid 6632] close(4) = 0 [pid 6632] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6632] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6631] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... openat resumed>) = 4 [pid 6632] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6631] <... futex resumed>) = 0 [ 139.812273][ T6632] BTRFS info (device loop0): enabling ssd optimizations [ 139.819627][ T6632] BTRFS info (device loop0): auto enabling async discard [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6631] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6631] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6649 attached [pid 6649] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6649] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... clone resumed>, parent_tid=[256], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 256 [pid 6631] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6631] <... futex resumed>) = 1 [pid 6649] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6631] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6649] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6649] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6631] <... futex resumed>) = 1 [pid 6649] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6631] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6632] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.873170][ T6632] BTRFS info (device loop0): balance: start -s [ 139.882118][ T6632] BTRFS info (device loop0): relocating block group 1048576 flags system [ 139.911111][ T6632] BTRFS info (device loop0): balance: ended with status: 0 [pid 6632] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6649] <... ioctl resumed>) = 0 [pid 6649] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] close(3 [pid 6649] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... close resumed>) = 0 [pid 6631] close(4) = 0 [pid 6631] close(5) = 0 [pid 6631] close(6) = -1 EBADF (Bad file descriptor) [pid 6631] close(7) = -1 EBADF (Bad file descriptor) [pid 6631] close(8) = -1 EBADF (Bad file descriptor) [pid 6631] close(9) = -1 EBADF (Bad file descriptor) [pid 6631] close(10) = -1 EBADF (Bad file descriptor) [pid 6631] close(11) = -1 EBADF (Bad file descriptor) [pid 6631] close(12) = -1 EBADF (Bad file descriptor) [pid 6631] close(13) = -1 EBADF (Bad file descriptor) [pid 6631] close(14) = -1 EBADF (Bad file descriptor) [pid 6631] close(15) = -1 EBADF (Bad file descriptor) [pid 6631] close(16) = -1 EBADF (Bad file descriptor) [pid 6631] close(17) = -1 EBADF (Bad file descriptor) [pid 6631] close(18) = -1 EBADF (Bad file descriptor) [pid 6631] close(19) = -1 EBADF (Bad file descriptor) [pid 6631] close(20) = -1 EBADF (Bad file descriptor) [pid 6631] close(21) = -1 EBADF (Bad file descriptor) [pid 6631] close(22) = -1 EBADF (Bad file descriptor) [pid 6631] close(23) = -1 EBADF (Bad file descriptor) [pid 6631] close(24) = -1 EBADF (Bad file descriptor) [pid 6631] close(25) = -1 EBADF (Bad file descriptor) [pid 6631] close(26) = -1 EBADF (Bad file descriptor) [pid 6631] close(27) = -1 EBADF (Bad file descriptor) [pid 6631] close(28) = -1 EBADF (Bad file descriptor) [pid 6631] close(29) = -1 EBADF (Bad file descriptor) [pid 6631] exit_group(0 [pid 6649] <... futex resumed>) = ? [pid 6632] <... futex resumed>) = ? [pid 6631] <... exit_group resumed>) = ? [pid 6649] +++ exited with 0 +++ [pid 6632] +++ exited with 0 +++ [pid 6631] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=254, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./84/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./84/cgroup.cpu") = 0 [pid 5007] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./84/binderfs") = 0 [pid 5007] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./84/file0") = 0 [pid 5007] umount2("./84/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./84/cgroup") = 0 [pid 5007] umount2("./84/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./84/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./84") = 0 [pid 5007] mkdir("./85", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 257 ./strace-static-x86_64: Process 6650 attached [pid 6650] set_robust_list(0x5555571235e0, 24) = 0 [pid 6650] chdir("./85") = 0 [pid 6650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6650] setpgid(0, 0) = 0 [pid 6650] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6650] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6650] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6650] write(3, "1000", 4) = 4 [pid 6650] close(3) = 0 [pid 6650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6650] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6650] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6651 attached [pid 6651] set_robust_list(0x7fd090fc79e0, 24 [pid 6650] <... clone resumed>, parent_tid=[258], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 258 [pid 6651] <... set_robust_list resumed>) = 0 [pid 6650] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6651] memfd_create("syzkaller", 0) = 3 [pid 6651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6651] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6651] close(3) = 0 [pid 6651] mkdir("./file0", 0777) = 0 [ 140.452885][ T6651] loop0: detected capacity change from 0 to 32768 [ 140.463174][ T6651] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6651) [ 140.479961][ T6651] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 140.488797][ T6651] BTRFS info (device loop0): using free space tree [pid 6651] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6651] chdir("./file0") = 0 [pid 6651] ioctl(4, LOOP_CLR_FD) = 0 [pid 6651] close(4) = 0 [pid 6651] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... futex resumed>) = 0 [pid 6650] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... futex resumed>) = 1 [pid 6651] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6651] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... futex resumed>) = 0 [pid 6650] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... futex resumed>) = 1 [ 140.508333][ T6651] BTRFS info (device loop0): enabling ssd optimizations [ 140.515456][ T6651] BTRFS info (device loop0): auto enabling async discard [ 140.547012][ T6651] BTRFS info (device loop0): balance: start -s [pid 6651] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6650] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6650] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6650] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6668 attached [pid 6668] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6668] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] <... clone resumed>, parent_tid=[259], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 259 [pid 6650] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] <... futex resumed>) = 0 [pid 6650] <... futex resumed>) = 1 [pid 6668] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6668] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6668] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6650] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] <... futex resumed>) = 0 [pid 6650] <... futex resumed>) = 1 [pid 6668] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 140.557672][ T6651] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6650] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6651] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6651] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 140.634365][ T6651] BTRFS info (device loop0): balance: ended with status: 0 [pid 6651] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6668] <... ioctl resumed>) = 0 [pid 6668] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6668] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] close(3) = 0 [pid 6650] close(4) = 0 [pid 6650] close(5) = 0 [pid 6650] close(6) = -1 EBADF (Bad file descriptor) [pid 6650] close(7) = -1 EBADF (Bad file descriptor) [pid 6650] close(8) = -1 EBADF (Bad file descriptor) [pid 6650] close(9) = -1 EBADF (Bad file descriptor) [pid 6650] close(10) = -1 EBADF (Bad file descriptor) [pid 6650] close(11) = -1 EBADF (Bad file descriptor) [pid 6650] close(12) = -1 EBADF (Bad file descriptor) [pid 6650] close(13) = -1 EBADF (Bad file descriptor) [pid 6650] close(14) = -1 EBADF (Bad file descriptor) [pid 6650] close(15) = -1 EBADF (Bad file descriptor) [pid 6650] close(16) = -1 EBADF (Bad file descriptor) [pid 6650] close(17) = -1 EBADF (Bad file descriptor) [pid 6650] close(18) = -1 EBADF (Bad file descriptor) [pid 6650] close(19) = -1 EBADF (Bad file descriptor) [pid 6650] close(20) = -1 EBADF (Bad file descriptor) [pid 6650] close(21) = -1 EBADF (Bad file descriptor) [pid 6650] close(22) = -1 EBADF (Bad file descriptor) [pid 6650] close(23) = -1 EBADF (Bad file descriptor) [pid 6650] close(24) = -1 EBADF (Bad file descriptor) [pid 6650] close(25) = -1 EBADF (Bad file descriptor) [pid 6650] close(26) = -1 EBADF (Bad file descriptor) [pid 6650] close(27) = -1 EBADF (Bad file descriptor) [pid 6650] close(28) = -1 EBADF (Bad file descriptor) [pid 6650] close(29) = -1 EBADF (Bad file descriptor) [pid 6650] exit_group(0 [pid 6668] <... futex resumed>) = ? [pid 6651] <... futex resumed>) = ? [pid 6650] <... exit_group resumed>) = ? [pid 6668] +++ exited with 0 +++ [pid 6651] +++ exited with 0 +++ [pid 6650] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=257, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./85/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./85/cgroup.cpu") = 0 [pid 5007] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./85/binderfs") = 0 [pid 5007] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./85/file0") = 0 [pid 5007] umount2("./85/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./85/cgroup") = 0 [pid 5007] umount2("./85/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./85/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./85") = 0 [pid 5007] mkdir("./86", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 260 ./strace-static-x86_64: Process 6669 attached [pid 6669] set_robust_list(0x5555571235e0, 24) = 0 [pid 6669] chdir("./86") = 0 [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6669] setpgid(0, 0) = 0 [pid 6669] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6669] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6669] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6669] write(3, "1000", 4) = 4 [pid 6669] close(3) = 0 [pid 6669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6669] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6670 attached , parent_tid=[261], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 261 [pid 6669] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6670] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6670] memfd_create("syzkaller", 0) = 3 [pid 6670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6670] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6670] close(3) = 0 [pid 6670] mkdir("./file0", 0777) = 0 [ 141.117103][ T6670] loop0: detected capacity change from 0 to 32768 [ 141.128442][ T6670] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6670) [ 141.146250][ T6670] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.155086][ T6670] BTRFS info (device loop0): using free space tree [pid 6670] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6670] chdir("./file0") = 0 [pid 6670] ioctl(4, LOOP_CLR_FD) = 0 [pid 6670] close(4) = 0 [pid 6670] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6670] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6670] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 141.175255][ T6670] BTRFS info (device loop0): enabling ssd optimizations [ 141.182262][ T6670] BTRFS info (device loop0): auto enabling async discard [pid 6670] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6669] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[262], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 262 [pid 6669] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6687 attached [pid 6687] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6687] openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 141.227633][ T6670] BTRFS info (device loop0): balance: start -s [ 141.236731][ T6670] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6687] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6687] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 141.277914][ T6670] BTRFS info (device loop0): balance: ended with status: 0 [pid 6670] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6670] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6670] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6687] <... ioctl resumed>) = 0 [pid 6687] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] close(3 [pid 6687] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] <... close resumed>) = 0 [pid 6669] close(4) = 0 [pid 6669] close(5) = 0 [pid 6669] close(6) = -1 EBADF (Bad file descriptor) [pid 6669] close(7) = -1 EBADF (Bad file descriptor) [pid 6669] close(8) = -1 EBADF (Bad file descriptor) [pid 6669] close(9) = -1 EBADF (Bad file descriptor) [pid 6669] close(10) = -1 EBADF (Bad file descriptor) [pid 6669] close(11) = -1 EBADF (Bad file descriptor) [pid 6669] close(12) = -1 EBADF (Bad file descriptor) [pid 6669] close(13) = -1 EBADF (Bad file descriptor) [pid 6669] close(14) = -1 EBADF (Bad file descriptor) [pid 6669] close(15) = -1 EBADF (Bad file descriptor) [pid 6669] close(16) = -1 EBADF (Bad file descriptor) [pid 6669] close(17) = -1 EBADF (Bad file descriptor) [pid 6669] close(18) = -1 EBADF (Bad file descriptor) [pid 6669] close(19) = -1 EBADF (Bad file descriptor) [pid 6669] close(20) = -1 EBADF (Bad file descriptor) [pid 6669] close(21) = -1 EBADF (Bad file descriptor) [pid 6669] close(22) = -1 EBADF (Bad file descriptor) [pid 6669] close(23) = -1 EBADF (Bad file descriptor) [pid 6669] close(24) = -1 EBADF (Bad file descriptor) [pid 6669] close(25) = -1 EBADF (Bad file descriptor) [pid 6669] close(26) = -1 EBADF (Bad file descriptor) [pid 6669] close(27) = -1 EBADF (Bad file descriptor) [pid 6669] close(28) = -1 EBADF (Bad file descriptor) [pid 6669] close(29) = -1 EBADF (Bad file descriptor) [pid 6669] exit_group(0 [pid 6687] <... futex resumed>) = ? [pid 6670] <... futex resumed>) = ? [pid 6669] <... exit_group resumed>) = ? [pid 6687] +++ exited with 0 +++ [pid 6670] +++ exited with 0 +++ [pid 6669] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=260, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./86/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./86/cgroup.cpu") = 0 [pid 5007] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./86/binderfs") = 0 [pid 5007] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./86/file0") = 0 [pid 5007] umount2("./86/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./86/cgroup") = 0 [pid 5007] umount2("./86/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./86/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./86") = 0 [pid 5007] mkdir("./87", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 263 ./strace-static-x86_64: Process 6688 attached [pid 6688] set_robust_list(0x5555571235e0, 24) = 0 [pid 6688] chdir("./87") = 0 [pid 6688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6688] setpgid(0, 0) = 0 [pid 6688] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6688] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6688] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6688] write(3, "1000", 4) = 4 [pid 6688] close(3) = 0 [pid 6688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6688] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6688] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6689 attached , parent_tid=[264], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 264 [pid 6689] set_robust_list(0x7fd090fc79e0, 24 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... set_robust_list resumed>) = 0 [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6689] memfd_create("syzkaller", 0) = 3 [pid 6689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6689] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6689] close(3) = 0 [pid 6689] mkdir("./file0", 0777) = 0 [ 141.798781][ T6689] loop0: detected capacity change from 0 to 32768 [ 141.808857][ T6689] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6689) [ 141.826020][ T6689] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.834780][ T6689] BTRFS info (device loop0): using free space tree [pid 6689] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6689] chdir("./file0") = 0 [pid 6689] ioctl(4, LOOP_CLR_FD) = 0 [pid 6689] close(4) = 0 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] <... futex resumed>) = 0 [pid 6689] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... openat resumed>) = 4 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... futex resumed>) = 0 [pid 6689] <... futex resumed>) = 1 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [ 141.855956][ T6689] BTRFS info (device loop0): enabling ssd optimizations [ 141.863111][ T6689] BTRFS info (device loop0): auto enabling async discard [pid 6689] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6688] <... futex resumed>) = 0 [ 141.926815][ T6689] BTRFS info (device loop0): balance: start -s [ 141.935205][ T6689] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6688] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6688] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6688] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[265], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 265 [pid 6688] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6706 attached ) = 0 [pid 6688] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6706] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6706] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6706] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 6688] <... futex resumed>) = 1 [pid 6689] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] <... futex resumed>) = 1 [ 141.967633][ T6689] BTRFS info (device loop0): balance: ended with status: 0 [pid 6706] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] <... ioctl resumed>) = 0 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] close(3) = 0 [pid 6688] close(4) = 0 [pid 6688] close(5) = 0 [pid 6688] close(6) = -1 EBADF (Bad file descriptor) [pid 6688] close(7) = -1 EBADF (Bad file descriptor) [pid 6688] close(8) = -1 EBADF (Bad file descriptor) [pid 6688] close(9) = -1 EBADF (Bad file descriptor) [pid 6688] close(10) = -1 EBADF (Bad file descriptor) [pid 6688] close(11) = -1 EBADF (Bad file descriptor) [pid 6688] close(12) = -1 EBADF (Bad file descriptor) [pid 6688] close(13) = -1 EBADF (Bad file descriptor) [pid 6688] close(14) = -1 EBADF (Bad file descriptor) [pid 6688] close(15) = -1 EBADF (Bad file descriptor) [pid 6688] close(16) = -1 EBADF (Bad file descriptor) [pid 6688] close(17) = -1 EBADF (Bad file descriptor) [pid 6688] close(18) = -1 EBADF (Bad file descriptor) [pid 6688] close(19) = -1 EBADF (Bad file descriptor) [pid 6688] close(20) = -1 EBADF (Bad file descriptor) [pid 6688] close(21) = -1 EBADF (Bad file descriptor) [pid 6688] close(22) = -1 EBADF (Bad file descriptor) [pid 6688] close(23) = -1 EBADF (Bad file descriptor) [pid 6688] close(24) = -1 EBADF (Bad file descriptor) [pid 6688] close(25) = -1 EBADF (Bad file descriptor) [pid 6688] close(26) = -1 EBADF (Bad file descriptor) [pid 6688] close(27) = -1 EBADF (Bad file descriptor) [pid 6688] close(28) = -1 EBADF (Bad file descriptor) [pid 6688] close(29) = -1 EBADF (Bad file descriptor) [pid 6688] exit_group(0 [pid 6706] <... futex resumed>) = ? [pid 6689] <... futex resumed>) = ? [pid 6688] <... exit_group resumed>) = ? [pid 6706] +++ exited with 0 +++ [pid 6689] +++ exited with 0 +++ [pid 6688] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=263, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./87/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./87/cgroup.cpu") = 0 [pid 5007] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./87/binderfs") = 0 [pid 5007] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./87/file0") = 0 [pid 5007] umount2("./87/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./87/cgroup") = 0 [pid 5007] umount2("./87/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./87/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./87") = 0 [pid 5007] mkdir("./88", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 266 ./strace-static-x86_64: Process 6707 attached [pid 6707] set_robust_list(0x5555571235e0, 24) = 0 [pid 6707] chdir("./88") = 0 [pid 6707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6707] setpgid(0, 0) = 0 [pid 6707] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6707] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6707] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6707] write(3, "1000", 4) = 4 [pid 6707] close(3) = 0 [pid 6707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6707] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6707] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[267], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 267 [pid 6707] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6708 attached [pid 6708] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6708] memfd_create("syzkaller", 0) = 3 [pid 6708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6708] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6708] close(3) = 0 [pid 6708] mkdir("./file0", 0777) = 0 [ 142.488952][ T6708] loop0: detected capacity change from 0 to 32768 [ 142.500220][ T6708] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6708) [ 142.518697][ T6708] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 142.527715][ T6708] BTRFS info (device loop0): using free space tree [pid 6708] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6708] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6708] chdir("./file0") = 0 [pid 6708] ioctl(4, LOOP_CLR_FD) = 0 [pid 6708] close(4) = 0 [pid 6708] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6708] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6707] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] <... openat resumed>) = 4 [pid 6707] <... futex resumed>) = 0 [pid 6708] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6708] <... futex resumed>) = 0 [pid 6707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6708] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6707] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 142.547425][ T6708] BTRFS info (device loop0): enabling ssd optimizations [ 142.555703][ T6708] BTRFS info (device loop0): auto enabling async discard [ 142.588938][ T6708] BTRFS info (device loop0): balance: start -s [ 142.597902][ T6708] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6707] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6707] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6707] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6725 attached , parent_tid=[268], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 268 [pid 6707] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] set_robust_list(0x7fd089ba69e0, 24 [pid 6707] <... futex resumed>) = 0 [pid 6725] <... set_robust_list resumed>) = 0 [pid 6707] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6725] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6725] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6707] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 142.630945][ T6708] BTRFS info (device loop0): balance: ended with status: 0 [pid 6707] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6708] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6708] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6708] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] <... ioctl resumed>) = 0 [pid 6725] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6707] close(3) = 0 [pid 6707] close(4) = 0 [pid 6707] close(5) = 0 [pid 6707] close(6) = -1 EBADF (Bad file descriptor) [pid 6707] close(7) = -1 EBADF (Bad file descriptor) [pid 6707] close(8) = -1 EBADF (Bad file descriptor) [pid 6707] close(9) = -1 EBADF (Bad file descriptor) [pid 6707] close(10) = -1 EBADF (Bad file descriptor) [pid 6707] close(11) = -1 EBADF (Bad file descriptor) [pid 6707] close(12) = -1 EBADF (Bad file descriptor) [pid 6707] close(13) = -1 EBADF (Bad file descriptor) [pid 6707] close(14) = -1 EBADF (Bad file descriptor) [pid 6707] close(15) = -1 EBADF (Bad file descriptor) [pid 6707] close(16) = -1 EBADF (Bad file descriptor) [pid 6707] close(17) = -1 EBADF (Bad file descriptor) [pid 6707] close(18) = -1 EBADF (Bad file descriptor) [pid 6707] close(19) = -1 EBADF (Bad file descriptor) [pid 6707] close(20) = -1 EBADF (Bad file descriptor) [pid 6707] close(21) = -1 EBADF (Bad file descriptor) [pid 6707] close(22) = -1 EBADF (Bad file descriptor) [pid 6707] close(23) = -1 EBADF (Bad file descriptor) [pid 6707] close(24) = -1 EBADF (Bad file descriptor) [pid 6707] close(25) = -1 EBADF (Bad file descriptor) [pid 6707] close(26) = -1 EBADF (Bad file descriptor) [pid 6707] close(27) = -1 EBADF (Bad file descriptor) [pid 6707] close(28) = -1 EBADF (Bad file descriptor) [pid 6707] close(29) = -1 EBADF (Bad file descriptor) [pid 6707] exit_group(0 [pid 6708] <... futex resumed>) = ? [pid 6725] <... futex resumed>) = ? [pid 6707] <... exit_group resumed>) = ? [pid 6708] +++ exited with 0 +++ [pid 6725] +++ exited with 0 +++ [pid 6707] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=266, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./88/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./88/cgroup.cpu") = 0 [pid 5007] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./88/binderfs") = 0 [pid 5007] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./88/file0") = 0 [pid 5007] umount2("./88/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./88/cgroup") = 0 [pid 5007] umount2("./88/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./88/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./88") = 0 [pid 5007] mkdir("./89", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 269 ./strace-static-x86_64: Process 6726 attached [pid 6726] set_robust_list(0x5555571235e0, 24) = 0 [pid 6726] chdir("./89") = 0 [pid 6726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6726] setpgid(0, 0) = 0 [pid 6726] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6726] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6726] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6726] write(3, "1000", 4) = 4 [pid 6726] close(3) = 0 [pid 6726] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6726] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6726] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[270], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 270 [pid 6726] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6727 attached [pid 6727] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6727] memfd_create("syzkaller", 0) = 3 [pid 6727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6727] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6727] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6727] close(3) = 0 [pid 6727] mkdir("./file0", 0777) = 0 [ 143.131394][ T6727] loop0: detected capacity change from 0 to 32768 [ 143.145085][ T6727] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6727) [ 143.162955][ T6727] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.171974][ T6727] BTRFS info (device loop0): using free space tree [pid 6727] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6727] chdir("./file0") = 0 [pid 6727] ioctl(4, LOOP_CLR_FD) = 0 [pid 6727] close(4) = 0 [pid 6727] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6727] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6726] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... openat resumed>) = 4 [pid 6726] <... futex resumed>) = 0 [pid 6727] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] <... futex resumed>) = 0 [pid 6726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6727] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6726] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 143.190447][ T6727] BTRFS info (device loop0): enabling ssd optimizations [ 143.197715][ T6727] BTRFS info (device loop0): auto enabling async discard [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6726] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6726] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6726] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[271], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 271 [pid 6726] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6744 attached [pid 6744] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6744] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6744] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6726] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6726] <... futex resumed>) = 0 [ 143.231781][ T6727] BTRFS info (device loop0): balance: start -s [ 143.241154][ T6727] BTRFS info (device loop0): relocating block group 1048576 flags system [ 143.270166][ T6727] BTRFS info (device loop0): balance: ended with status: 0 [pid 6726] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6727] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6726] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6744] <... ioctl resumed>) = 0 [pid 6744] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] close(3 [pid 6744] <... futex resumed>) = 0 [pid 6744] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6726] <... close resumed>) = 0 [pid 6726] close(4) = 0 [pid 6726] close(5) = 0 [pid 6726] close(6) = -1 EBADF (Bad file descriptor) [pid 6726] close(7) = -1 EBADF (Bad file descriptor) [pid 6726] close(8) = -1 EBADF (Bad file descriptor) [pid 6726] close(9) = -1 EBADF (Bad file descriptor) [pid 6726] close(10) = -1 EBADF (Bad file descriptor) [pid 6726] close(11) = -1 EBADF (Bad file descriptor) [pid 6726] close(12) = -1 EBADF (Bad file descriptor) [pid 6726] close(13) = -1 EBADF (Bad file descriptor) [pid 6726] close(14) = -1 EBADF (Bad file descriptor) [pid 6726] close(15) = -1 EBADF (Bad file descriptor) [pid 6726] close(16) = -1 EBADF (Bad file descriptor) [pid 6726] close(17) = -1 EBADF (Bad file descriptor) [pid 6726] close(18) = -1 EBADF (Bad file descriptor) [pid 6726] close(19) = -1 EBADF (Bad file descriptor) [pid 6726] close(20) = -1 EBADF (Bad file descriptor) [pid 6726] close(21) = -1 EBADF (Bad file descriptor) [pid 6726] close(22) = -1 EBADF (Bad file descriptor) [pid 6726] close(23) = -1 EBADF (Bad file descriptor) [pid 6726] close(24) = -1 EBADF (Bad file descriptor) [pid 6726] close(25) = -1 EBADF (Bad file descriptor) [pid 6726] close(26) = -1 EBADF (Bad file descriptor) [pid 6726] close(27) = -1 EBADF (Bad file descriptor) [pid 6726] close(28) = -1 EBADF (Bad file descriptor) [pid 6726] close(29) = -1 EBADF (Bad file descriptor) [pid 6726] exit_group(0 [pid 6727] <... futex resumed>) = ? [pid 6744] <... futex resumed>) = ? [pid 6726] <... exit_group resumed>) = ? [pid 6727] +++ exited with 0 +++ [pid 6744] +++ exited with 0 +++ [pid 6726] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=269, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./89/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./89/cgroup.cpu") = 0 [pid 5007] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./89/binderfs") = 0 [pid 5007] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./89/file0") = 0 [pid 5007] umount2("./89/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./89/cgroup") = 0 [pid 5007] umount2("./89/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./89/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./89") = 0 [pid 5007] mkdir("./90", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6745 attached , child_tidptr=0x5555571235d0) = 272 [pid 6745] set_robust_list(0x5555571235e0, 24) = 0 [pid 6745] chdir("./90") = 0 [pid 6745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6745] setpgid(0, 0) = 0 [pid 6745] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6745] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6745] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6745] write(3, "1000", 4) = 4 [pid 6745] close(3) = 0 [pid 6745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6745] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6746 attached , parent_tid=[273], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 273 [pid 6746] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6745] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6746] memfd_create("syzkaller", 0) = 3 [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6746] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6746] close(3) = 0 [pid 6746] mkdir("./file0", 0777) = 0 [ 143.824914][ T6746] loop0: detected capacity change from 0 to 32768 [ 143.836646][ T6746] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6746) [ 143.854105][ T6746] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.862980][ T6746] BTRFS info (device loop0): using free space tree [pid 6746] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6746] chdir("./file0") = 0 [pid 6746] ioctl(4, LOOP_CLR_FD) = 0 [pid 6746] close(4) = 0 [pid 6746] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6746] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 143.882151][ T6746] BTRFS info (device loop0): enabling ssd optimizations [ 143.889308][ T6746] BTRFS info (device loop0): auto enabling async discard [pid 6746] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6745] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6745] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[274], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 274 [pid 6745] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6763 attached [pid 6763] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6763] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6763] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6763] <... futex resumed>) = 1 [ 143.932706][ T6746] BTRFS info (device loop0): balance: start -s [ 143.942001][ T6746] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6763] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 144.017217][ T6746] BTRFS info (device loop0): balance: ended with status: 0 [pid 6763] <... ioctl resumed>) = 0 [pid 6746] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6746] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6763] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] close(3) = 0 [pid 6745] close(4) = 0 [pid 6745] close(5) = 0 [pid 6745] close(6) = -1 EBADF (Bad file descriptor) [pid 6745] close(7) = -1 EBADF (Bad file descriptor) [pid 6745] close(8) = -1 EBADF (Bad file descriptor) [pid 6745] close(9) = -1 EBADF (Bad file descriptor) [pid 6745] close(10) = -1 EBADF (Bad file descriptor) [pid 6745] close(11) = -1 EBADF (Bad file descriptor) [pid 6745] close(12) = -1 EBADF (Bad file descriptor) [pid 6745] close(13) = -1 EBADF (Bad file descriptor) [pid 6745] close(14) = -1 EBADF (Bad file descriptor) [pid 6745] close(15) = -1 EBADF (Bad file descriptor) [pid 6745] close(16) = -1 EBADF (Bad file descriptor) [pid 6745] close(17) = -1 EBADF (Bad file descriptor) [pid 6745] close(18) = -1 EBADF (Bad file descriptor) [pid 6745] close(19) = -1 EBADF (Bad file descriptor) [pid 6745] close(20) = -1 EBADF (Bad file descriptor) [pid 6745] close(21) = -1 EBADF (Bad file descriptor) [pid 6745] close(22) = -1 EBADF (Bad file descriptor) [pid 6745] close(23) = -1 EBADF (Bad file descriptor) [pid 6745] close(24) = -1 EBADF (Bad file descriptor) [pid 6745] close(25) = -1 EBADF (Bad file descriptor) [pid 6745] close(26) = -1 EBADF (Bad file descriptor) [pid 6745] close(27) = -1 EBADF (Bad file descriptor) [pid 6745] close(28) = -1 EBADF (Bad file descriptor) [pid 6745] close(29) = -1 EBADF (Bad file descriptor) [pid 6745] exit_group(0 [pid 6746] <... futex resumed>) = ? [pid 6745] <... exit_group resumed>) = ? [pid 6746] +++ exited with 0 +++ [pid 6763] <... futex resumed>) = ? [pid 6763] +++ exited with 0 +++ [pid 6745] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=272, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./90/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./90/cgroup.cpu") = 0 [pid 5007] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./90/binderfs") = 0 [pid 5007] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./90/file0") = 0 [pid 5007] umount2("./90/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./90/cgroup") = 0 [pid 5007] umount2("./90/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./90/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./90") = 0 [pid 5007] mkdir("./91", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6764 attached [pid 6764] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 275 [pid 6764] <... set_robust_list resumed>) = 0 [pid 6764] chdir("./91") = 0 [pid 6764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6764] setpgid(0, 0) = 0 [pid 6764] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6764] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6764] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6764] write(3, "1000", 4) = 4 [pid 6764] close(3) = 0 [pid 6764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6764] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6765 attached [pid 6765] set_robust_list(0x7fd090fc79e0, 24 [pid 6764] <... clone resumed>, parent_tid=[276], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 276 [pid 6765] <... set_robust_list resumed>) = 0 [pid 6764] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6765] memfd_create("syzkaller", 0) = 3 [pid 6765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6765] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6765] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6765] close(3) = 0 [pid 6765] mkdir("./file0", 0777) = 0 [ 144.492932][ T6765] loop0: detected capacity change from 0 to 32768 [ 144.504065][ T6765] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6765) [ 144.521971][ T6765] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 144.531117][ T6765] BTRFS info (device loop0): using free space tree [pid 6765] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6765] chdir("./file0") = 0 [pid 6765] ioctl(4, LOOP_CLR_FD) = 0 [pid 6765] close(4) = 0 [pid 6765] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... futex resumed>) = 0 [pid 6765] <... futex resumed>) = 1 [pid 6765] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6764] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6765] <... openat resumed>) = 4 [pid 6765] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... futex resumed>) = 0 [pid 6765] <... futex resumed>) = 1 [pid 6764] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6765] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6764] <... futex resumed>) = 0 [ 144.551605][ T6765] BTRFS info (device loop0): enabling ssd optimizations [ 144.558882][ T6765] BTRFS info (device loop0): auto enabling async discard [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6764] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6764] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6782 attached [pid 6782] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6782] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6764] <... clone resumed>, parent_tid=[277], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 277 [ 144.603033][ T6765] BTRFS info (device loop0): balance: start -s [ 144.611988][ T6765] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6764] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6764] <... futex resumed>) = 1 [pid 6782] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6782] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6764] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6764] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6764] <... futex resumed>) = 1 [pid 6782] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 144.654550][ T6765] BTRFS info (device loop0): balance: ended with status: 0 [pid 6764] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6765] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6765] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6765] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] <... ioctl resumed>) = 0 [pid 6782] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6764] close(3) = 0 [pid 6764] close(4) = 0 [pid 6764] close(5) = 0 [pid 6764] close(6) = -1 EBADF (Bad file descriptor) [pid 6764] close(7) = -1 EBADF (Bad file descriptor) [pid 6764] close(8) = -1 EBADF (Bad file descriptor) [pid 6764] close(9) = -1 EBADF (Bad file descriptor) [pid 6764] close(10) = -1 EBADF (Bad file descriptor) [pid 6764] close(11) = -1 EBADF (Bad file descriptor) [pid 6764] close(12) = -1 EBADF (Bad file descriptor) [pid 6764] close(13) = -1 EBADF (Bad file descriptor) [pid 6764] close(14) = -1 EBADF (Bad file descriptor) [pid 6764] close(15) = -1 EBADF (Bad file descriptor) [pid 6764] close(16) = -1 EBADF (Bad file descriptor) [pid 6764] close(17) = -1 EBADF (Bad file descriptor) [pid 6764] close(18) = -1 EBADF (Bad file descriptor) [pid 6764] close(19) = -1 EBADF (Bad file descriptor) [pid 6764] close(20) = -1 EBADF (Bad file descriptor) [pid 6764] close(21) = -1 EBADF (Bad file descriptor) [pid 6764] close(22) = -1 EBADF (Bad file descriptor) [pid 6764] close(23) = -1 EBADF (Bad file descriptor) [pid 6764] close(24) = -1 EBADF (Bad file descriptor) [pid 6764] close(25) = -1 EBADF (Bad file descriptor) [pid 6764] close(26) = -1 EBADF (Bad file descriptor) [pid 6764] close(27) = -1 EBADF (Bad file descriptor) [pid 6764] close(28) = -1 EBADF (Bad file descriptor) [pid 6764] close(29) = -1 EBADF (Bad file descriptor) [pid 6764] exit_group(0 [pid 6782] <... futex resumed>) = ? [pid 6765] <... futex resumed>) = ? [pid 6764] <... exit_group resumed>) = ? [pid 6782] +++ exited with 0 +++ [pid 6765] +++ exited with 0 +++ [pid 6764] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=275, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./91/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./91/cgroup.cpu") = 0 [pid 5007] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./91/binderfs") = 0 [pid 5007] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./91/file0") = 0 [pid 5007] umount2("./91/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./91/cgroup") = 0 [pid 5007] umount2("./91/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./91/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./91") = 0 [pid 5007] mkdir("./92", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 278 ./strace-static-x86_64: Process 6783 attached [pid 6783] set_robust_list(0x5555571235e0, 24) = 0 [pid 6783] chdir("./92") = 0 [pid 6783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6783] setpgid(0, 0) = 0 [pid 6783] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6783] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6783] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6783] write(3, "1000", 4) = 4 [pid 6783] close(3) = 0 [pid 6783] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6783] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6783] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6783] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[279], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 279 [pid 6783] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6784 attached [pid 6784] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6784] memfd_create("syzkaller", 0) = 3 [pid 6784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6784] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6784] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6784] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6784] close(3) = 0 [pid 6784] mkdir("./file0", 0777) = 0 [ 145.132860][ T6784] loop0: detected capacity change from 0 to 32768 [ 145.143978][ T6784] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6784) [ 145.161216][ T6784] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 145.170317][ T6784] BTRFS info (device loop0): using free space tree [pid 6784] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6784] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6784] chdir("./file0") = 0 [pid 6784] ioctl(4, LOOP_CLR_FD) = 0 [pid 6784] close(4) = 0 [pid 6784] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] <... futex resumed>) = 0 [pid 6783] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6784] <... futex resumed>) = 1 [pid 6784] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6784] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] <... futex resumed>) = 0 [pid 6783] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6784] <... futex resumed>) = 1 [ 145.189764][ T6784] BTRFS info (device loop0): enabling ssd optimizations [ 145.196943][ T6784] BTRFS info (device loop0): auto enabling async discard [pid 6784] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6783] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6783] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6783] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6783] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6801 attached , parent_tid=[280], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 280 [pid 6783] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6801] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6801] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6801] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6783] <... futex resumed>) = 0 [pid 6783] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6801] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6783] <... futex resumed>) = 0 [ 145.251257][ T6784] BTRFS info (device loop0): balance: start -s [ 145.260237][ T6784] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6783] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 145.342521][ T6784] BTRFS info (device loop0): balance: ended with status: 0 [pid 6801] <... ioctl resumed>) = 0 [pid 6801] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6801] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6784] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6784] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] close(3 [pid 6784] <... futex resumed>) = 0 [pid 6784] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6783] <... close resumed>) = 0 [pid 6783] close(4) = 0 [pid 6783] close(5) = 0 [pid 6783] close(6) = -1 EBADF (Bad file descriptor) [pid 6783] close(7) = -1 EBADF (Bad file descriptor) [pid 6783] close(8) = -1 EBADF (Bad file descriptor) [pid 6783] close(9) = -1 EBADF (Bad file descriptor) [pid 6783] close(10) = -1 EBADF (Bad file descriptor) [pid 6783] close(11) = -1 EBADF (Bad file descriptor) [pid 6783] close(12) = -1 EBADF (Bad file descriptor) [pid 6783] close(13) = -1 EBADF (Bad file descriptor) [pid 6783] close(14) = -1 EBADF (Bad file descriptor) [pid 6783] close(15) = -1 EBADF (Bad file descriptor) [pid 6783] close(16) = -1 EBADF (Bad file descriptor) [pid 6783] close(17) = -1 EBADF (Bad file descriptor) [pid 6783] close(18) = -1 EBADF (Bad file descriptor) [pid 6783] close(19) = -1 EBADF (Bad file descriptor) [pid 6783] close(20) = -1 EBADF (Bad file descriptor) [pid 6783] close(21) = -1 EBADF (Bad file descriptor) [pid 6783] close(22) = -1 EBADF (Bad file descriptor) [pid 6783] close(23) = -1 EBADF (Bad file descriptor) [pid 6783] close(24) = -1 EBADF (Bad file descriptor) [pid 6783] close(25) = -1 EBADF (Bad file descriptor) [pid 6783] close(26) = -1 EBADF (Bad file descriptor) [pid 6783] close(27) = -1 EBADF (Bad file descriptor) [pid 6783] close(28) = -1 EBADF (Bad file descriptor) [pid 6783] close(29) = -1 EBADF (Bad file descriptor) [pid 6783] exit_group(0 [pid 6801] <... futex resumed>) = ? [pid 6784] <... futex resumed>) = ? [pid 6783] <... exit_group resumed>) = ? [pid 6801] +++ exited with 0 +++ [pid 6784] +++ exited with 0 +++ [pid 6783] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=278, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./92/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./92/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./92/cgroup.cpu") = 0 [pid 5007] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./92/binderfs") = 0 [pid 5007] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./92/file0") = 0 [pid 5007] umount2("./92/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./92/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./92/cgroup") = 0 [pid 5007] umount2("./92/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./92/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./92/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./92") = 0 [pid 5007] mkdir("./93", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 281 ./strace-static-x86_64: Process 6802 attached [pid 6802] set_robust_list(0x5555571235e0, 24) = 0 [pid 6802] chdir("./93") = 0 [pid 6802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6802] setpgid(0, 0) = 0 [pid 6802] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6802] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6802] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6802] write(3, "1000", 4) = 4 [pid 6802] close(3) = 0 [pid 6802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6802] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6802] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6802] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6803 attached [pid 6803] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6803] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6802] <... clone resumed>, parent_tid=[282], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 282 [pid 6802] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6803] <... futex resumed>) = 0 [pid 6802] <... futex resumed>) = 1 [pid 6803] memfd_create("syzkaller", 0) = 3 [pid 6802] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6803] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6803] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6803] close(3) = 0 [pid 6803] mkdir("./file0", 0777) = 0 [ 145.826569][ T6803] loop0: detected capacity change from 0 to 32768 [ 145.836790][ T6803] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6803) [ 145.852889][ T6803] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 145.862065][ T6803] BTRFS info (device loop0): using free space tree [pid 6803] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6803] chdir("./file0") = 0 [pid 6803] ioctl(4, LOOP_CLR_FD) = 0 [pid 6803] close(4) = 0 [pid 6803] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6803] <... futex resumed>) = 1 [pid 6803] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6803] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6803] <... futex resumed>) = 1 [ 145.882846][ T6803] BTRFS info (device loop0): enabling ssd optimizations [ 145.890083][ T6803] BTRFS info (device loop0): auto enabling async discard [pid 6803] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6802] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6802] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6802] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6802] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6802] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6802] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[283], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 283 ./strace-static-x86_64: Process 6820 attached [pid 6802] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] set_robust_list(0x7fd089ba69e0, 24 [pid 6802] <... futex resumed>) = 0 [pid 6820] <... set_robust_list resumed>) = 0 [pid 6802] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6820] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6820] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] <... futex resumed>) = 0 [pid 6802] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6820] <... futex resumed>) = 1 [ 145.941560][ T6803] BTRFS info (device loop0): balance: start -s [ 145.950512][ T6803] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6820] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6802] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6802] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6803] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6803] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 146.010227][ T6803] BTRFS info (device loop0): balance: ended with status: 0 [pid 6803] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6820] <... ioctl resumed>) = 0 [pid 6820] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] close(3) = 0 [pid 6802] close(4) = 0 [pid 6802] close(5) = 0 [pid 6802] close(6) = -1 EBADF (Bad file descriptor) [pid 6820] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6802] close(7) = -1 EBADF (Bad file descriptor) [pid 6802] close(8) = -1 EBADF (Bad file descriptor) [pid 6802] close(9) = -1 EBADF (Bad file descriptor) [pid 6802] close(10) = -1 EBADF (Bad file descriptor) [pid 6802] close(11) = -1 EBADF (Bad file descriptor) [pid 6802] close(12) = -1 EBADF (Bad file descriptor) [pid 6802] close(13) = -1 EBADF (Bad file descriptor) [pid 6802] close(14) = -1 EBADF (Bad file descriptor) [pid 6802] close(15) = -1 EBADF (Bad file descriptor) [pid 6802] close(16) = -1 EBADF (Bad file descriptor) [pid 6802] close(17) = -1 EBADF (Bad file descriptor) [pid 6802] close(18) = -1 EBADF (Bad file descriptor) [pid 6802] close(19) = -1 EBADF (Bad file descriptor) [pid 6802] close(20) = -1 EBADF (Bad file descriptor) [pid 6802] close(21) = -1 EBADF (Bad file descriptor) [pid 6802] close(22) = -1 EBADF (Bad file descriptor) [pid 6802] close(23) = -1 EBADF (Bad file descriptor) [pid 6802] close(24) = -1 EBADF (Bad file descriptor) [pid 6802] close(25) = -1 EBADF (Bad file descriptor) [pid 6802] close(26) = -1 EBADF (Bad file descriptor) [pid 6802] close(27) = -1 EBADF (Bad file descriptor) [pid 6802] close(28) = -1 EBADF (Bad file descriptor) [pid 6802] close(29) = -1 EBADF (Bad file descriptor) [pid 6802] exit_group(0 [pid 6803] <... futex resumed>) = ? [pid 6802] <... exit_group resumed>) = ? [pid 6820] <... futex resumed>) = ? [pid 6803] +++ exited with 0 +++ [pid 6820] +++ exited with 0 +++ [pid 6802] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=281, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./93/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./93/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./93/cgroup.cpu") = 0 [pid 5007] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./93/binderfs") = 0 [pid 5007] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./93/file0") = 0 [pid 5007] umount2("./93/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./93/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./93/cgroup") = 0 [pid 5007] umount2("./93/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./93/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./93/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./93") = 0 [pid 5007] mkdir("./94", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 284 ./strace-static-x86_64: Process 6821 attached [pid 6821] set_robust_list(0x5555571235e0, 24) = 0 [pid 6821] chdir("./94") = 0 [pid 6821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6821] setpgid(0, 0) = 0 [pid 6821] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6821] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6821] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6821] write(3, "1000", 4) = 4 [pid 6821] close(3) = 0 [pid 6821] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6821] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6821] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6821] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6822 attached [pid 6822] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6822] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] <... clone resumed>, parent_tid=[285], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 285 [pid 6821] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... futex resumed>) = 0 [pid 6821] <... futex resumed>) = 1 [pid 6822] memfd_create("syzkaller", 0 [pid 6821] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6822] <... memfd_create resumed>) = 3 [pid 6822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6822] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6822] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6822] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6822] close(3) = 0 [pid 6822] mkdir("./file0", 0777) = 0 [ 146.505509][ T6822] loop0: detected capacity change from 0 to 32768 [ 146.514919][ T6822] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6822) [ 146.532738][ T6822] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 146.541779][ T6822] BTRFS info (device loop0): using free space tree [pid 6822] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6822] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6822] chdir("./file0") = 0 [pid 6822] ioctl(4, LOOP_CLR_FD) = 0 [pid 6822] close(4) = 0 [pid 6822] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6821] <... futex resumed>) = 0 [pid 6822] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6821] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... openat resumed>) = 4 [pid 6822] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... futex resumed>) = 0 [pid 6822] <... futex resumed>) = 0 [pid 6821] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6822] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6821] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... futex resumed>) = 0 [pid 6821] <... futex resumed>) = 1 [pid 6822] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 146.562014][ T6822] BTRFS info (device loop0): enabling ssd optimizations [ 146.569479][ T6822] BTRFS info (device loop0): auto enabling async discard [pid 6821] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6821] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [ 146.617482][ T6822] BTRFS info (device loop0): balance: start -s [ 146.626213][ T6822] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6821] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6821] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[286], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 286 [pid 6821] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6839 attached [pid 6839] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6839] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6839] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6839] <... futex resumed>) = 1 [pid 6821] <... futex resumed>) = 0 [pid 6822] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6839] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6822] <... futex resumed>) = 0 [pid 6821] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6821] <... futex resumed>) = 0 [ 146.662478][ T6822] BTRFS info (device loop0): balance: ended with status: 0 [pid 6821] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6822] <... ioctl resumed>) = 0 [pid 6822] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6822] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] close(3) = 0 [pid 6821] close(4) = 0 [pid 6821] close(5) = 0 [pid 6821] close(6) = -1 EBADF (Bad file descriptor) [pid 6821] close(7) = -1 EBADF (Bad file descriptor) [pid 6821] close(8) = -1 EBADF (Bad file descriptor) [pid 6821] close(9) = -1 EBADF (Bad file descriptor) [pid 6821] close(10) = -1 EBADF (Bad file descriptor) [pid 6821] close(11) = -1 EBADF (Bad file descriptor) [pid 6821] close(12) = -1 EBADF (Bad file descriptor) [pid 6821] close(13) = -1 EBADF (Bad file descriptor) [pid 6821] close(14) = -1 EBADF (Bad file descriptor) [pid 6821] close(15) = -1 EBADF (Bad file descriptor) [pid 6821] close(16) = -1 EBADF (Bad file descriptor) [pid 6821] close(17) = -1 EBADF (Bad file descriptor) [pid 6821] close(18) = -1 EBADF (Bad file descriptor) [pid 6821] close(19) = -1 EBADF (Bad file descriptor) [pid 6821] close(20) = -1 EBADF (Bad file descriptor) [pid 6821] close(21) = -1 EBADF (Bad file descriptor) [pid 6821] close(22) = -1 EBADF (Bad file descriptor) [pid 6821] close(23) = -1 EBADF (Bad file descriptor) [pid 6821] close(24) = -1 EBADF (Bad file descriptor) [pid 6821] close(25) = -1 EBADF (Bad file descriptor) [pid 6821] close(26) = -1 EBADF (Bad file descriptor) [pid 6821] close(27) = -1 EBADF (Bad file descriptor) [pid 6821] close(28) = -1 EBADF (Bad file descriptor) [pid 6821] close(29) = -1 EBADF (Bad file descriptor) [pid 6821] exit_group(0 [pid 6839] <... futex resumed>) = ? [pid 6822] <... futex resumed>) = ? [pid 6821] <... exit_group resumed>) = ? [pid 6839] +++ exited with 0 +++ [pid 6822] +++ exited with 0 +++ [pid 6821] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=284, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./94/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./94/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./94/cgroup.cpu") = 0 [pid 5007] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./94/binderfs") = 0 [pid 5007] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./94/file0") = 0 [pid 5007] umount2("./94/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./94/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./94/cgroup") = 0 [pid 5007] umount2("./94/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./94/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./94/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./94") = 0 [pid 5007] mkdir("./95", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 287 ./strace-static-x86_64: Process 6840 attached [pid 6840] set_robust_list(0x5555571235e0, 24) = 0 [pid 6840] chdir("./95") = 0 [pid 6840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6840] setpgid(0, 0) = 0 [pid 6840] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6840] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6840] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6840] write(3, "1000", 4) = 4 [pid 6840] close(3) = 0 [pid 6840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6840] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6840] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6840] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[288], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 288 [pid 6840] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6841 attached [pid 6841] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6841] memfd_create("syzkaller", 0) = 3 [pid 6841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6841] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6841] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6841] close(3) = 0 [pid 6841] mkdir("./file0", 0777) = 0 [ 147.156677][ T6841] loop0: detected capacity change from 0 to 32768 [ 147.168426][ T6841] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6841) [ 147.185984][ T6841] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.194715][ T6841] BTRFS info (device loop0): using free space tree [pid 6841] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6841] chdir("./file0") = 0 [pid 6841] ioctl(4, LOOP_CLR_FD) = 0 [pid 6841] close(4) = 0 [pid 6841] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] <... futex resumed>) = 0 [pid 6840] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6841] <... futex resumed>) = 1 [pid 6841] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6841] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] <... futex resumed>) = 0 [pid 6840] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6841] <... futex resumed>) = 1 [ 147.215522][ T6841] BTRFS info (device loop0): enabling ssd optimizations [ 147.222524][ T6841] BTRFS info (device loop0): auto enabling async discard [ 147.246793][ T6841] BTRFS info (device loop0): balance: start -s [ 147.255714][ T6841] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6841] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6840] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6840] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6840] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6840] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6858 attached , parent_tid=[289], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 289 [pid 6858] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6840] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6858] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6840] <... futex resumed>) = 0 [pid 6858] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6840] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6858] <... futex resumed>) = 1 [pid 6840] <... futex resumed>) = 0 [pid 6858] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 147.283966][ T6841] BTRFS info (device loop0): balance: ended with status: 0 [pid 6840] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6841] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6841] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6841] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6858] <... ioctl resumed>) = 0 [pid 6858] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6858] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6840] close(3) = 0 [pid 6840] close(4) = 0 [pid 6840] close(5) = 0 [pid 6840] close(6) = -1 EBADF (Bad file descriptor) [pid 6840] close(7) = -1 EBADF (Bad file descriptor) [pid 6840] close(8) = -1 EBADF (Bad file descriptor) [pid 6840] close(9) = -1 EBADF (Bad file descriptor) [pid 6840] close(10) = -1 EBADF (Bad file descriptor) [pid 6840] close(11) = -1 EBADF (Bad file descriptor) [pid 6840] close(12) = -1 EBADF (Bad file descriptor) [pid 6840] close(13) = -1 EBADF (Bad file descriptor) [pid 6840] close(14) = -1 EBADF (Bad file descriptor) [pid 6840] close(15) = -1 EBADF (Bad file descriptor) [pid 6840] close(16) = -1 EBADF (Bad file descriptor) [pid 6840] close(17) = -1 EBADF (Bad file descriptor) [pid 6840] close(18) = -1 EBADF (Bad file descriptor) [pid 6840] close(19) = -1 EBADF (Bad file descriptor) [pid 6840] close(20) = -1 EBADF (Bad file descriptor) [pid 6840] close(21) = -1 EBADF (Bad file descriptor) [pid 6840] close(22) = -1 EBADF (Bad file descriptor) [pid 6840] close(23) = -1 EBADF (Bad file descriptor) [pid 6840] close(24) = -1 EBADF (Bad file descriptor) [pid 6840] close(25) = -1 EBADF (Bad file descriptor) [pid 6840] close(26) = -1 EBADF (Bad file descriptor) [pid 6840] close(27) = -1 EBADF (Bad file descriptor) [pid 6840] close(28) = -1 EBADF (Bad file descriptor) [pid 6840] close(29) = -1 EBADF (Bad file descriptor) [pid 6840] exit_group(0 [pid 6858] <... futex resumed>) = ? [pid 6840] <... exit_group resumed>) = ? [pid 6841] <... futex resumed>) = ? [pid 6858] +++ exited with 0 +++ [pid 6841] +++ exited with 0 +++ [pid 6840] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=287, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./95/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./95/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./95/cgroup.cpu") = 0 [pid 5007] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./95/binderfs") = 0 [pid 5007] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./95/file0") = 0 [pid 5007] umount2("./95/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./95/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./95/cgroup") = 0 [pid 5007] umount2("./95/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./95/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./95/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./95") = 0 [pid 5007] mkdir("./96", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 290 ./strace-static-x86_64: Process 6859 attached [pid 6859] set_robust_list(0x5555571235e0, 24) = 0 [pid 6859] chdir("./96") = 0 [pid 6859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6859] setpgid(0, 0) = 0 [pid 6859] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6859] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6859] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6859] write(3, "1000", 4) = 4 [pid 6859] close(3) = 0 [pid 6859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6859] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6859] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6859] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6860 attached [pid 6860] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6859] <... clone resumed>, parent_tid=[291], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 291 [pid 6860] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6860] memfd_create("syzkaller", 0) = 3 [pid 6860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6860] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6860] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6860] close(3) = 0 [pid 6860] mkdir("./file0", 0777) = 0 [ 147.803604][ T6860] loop0: detected capacity change from 0 to 32768 [ 147.814816][ T6860] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6860) [ 147.832415][ T6860] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.841519][ T6860] BTRFS info (device loop0): using free space tree [pid 6860] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6860] chdir("./file0") = 0 [pid 6860] ioctl(4, LOOP_CLR_FD) = 0 [pid 6860] close(4) = 0 [pid 6860] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6860] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... futex resumed>) = 0 [pid 6859] <... futex resumed>) = 1 [pid 6860] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6859] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] <... openat resumed>) = 4 [pid 6860] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6859] <... futex resumed>) = 0 [pid 6860] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6859] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.862217][ T6860] BTRFS info (device loop0): enabling ssd optimizations [ 147.869416][ T6860] BTRFS info (device loop0): auto enabling async discard [pid 6859] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6859] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6859] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6859] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6877 attached [pid 6877] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6877] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] <... clone resumed>, parent_tid=[292], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 292 [pid 6859] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 147.927017][ T6860] BTRFS info (device loop0): balance: start -s [ 147.935939][ T6860] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6859] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6877] <... futex resumed>) = 0 [pid 6877] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6877] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6859] <... futex resumed>) = 0 [pid 6877] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6859] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.977382][ T6860] BTRFS info (device loop0): balance: ended with status: 0 [pid 6859] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6877] <... ioctl resumed>) = 0 [pid 6877] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6877] <... futex resumed>) = 0 [pid 6877] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6860] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] close(3 [pid 6860] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] <... close resumed>) = 0 [pid 6859] close(4) = 0 [pid 6859] close(5) = 0 [pid 6859] close(6) = -1 EBADF (Bad file descriptor) [pid 6859] close(7) = -1 EBADF (Bad file descriptor) [pid 6859] close(8) = -1 EBADF (Bad file descriptor) [pid 6859] close(9) = -1 EBADF (Bad file descriptor) [pid 6859] close(10) = -1 EBADF (Bad file descriptor) [pid 6859] close(11) = -1 EBADF (Bad file descriptor) [pid 6859] close(12) = -1 EBADF (Bad file descriptor) [pid 6859] close(13) = -1 EBADF (Bad file descriptor) [pid 6859] close(14) = -1 EBADF (Bad file descriptor) [pid 6859] close(15) = -1 EBADF (Bad file descriptor) [pid 6859] close(16) = -1 EBADF (Bad file descriptor) [pid 6859] close(17) = -1 EBADF (Bad file descriptor) [pid 6859] close(18) = -1 EBADF (Bad file descriptor) [pid 6859] close(19) = -1 EBADF (Bad file descriptor) [pid 6859] close(20) = -1 EBADF (Bad file descriptor) [pid 6859] close(21) = -1 EBADF (Bad file descriptor) [pid 6859] close(22) = -1 EBADF (Bad file descriptor) [pid 6859] close(23) = -1 EBADF (Bad file descriptor) [pid 6859] close(24) = -1 EBADF (Bad file descriptor) [pid 6859] close(25) = -1 EBADF (Bad file descriptor) [pid 6859] close(26) = -1 EBADF (Bad file descriptor) [pid 6859] close(27) = -1 EBADF (Bad file descriptor) [pid 6859] close(28) = -1 EBADF (Bad file descriptor) [pid 6859] close(29) = -1 EBADF (Bad file descriptor) [pid 6859] exit_group(0 [pid 6877] <... futex resumed>) = ? [pid 6860] <... futex resumed>) = ? [pid 6859] <... exit_group resumed>) = ? [pid 6877] +++ exited with 0 +++ [pid 6860] +++ exited with 0 +++ [pid 6859] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./96/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./96/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./96/cgroup.cpu") = 0 [pid 5007] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./96/binderfs") = 0 [pid 5007] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./96/file0") = 0 [pid 5007] umount2("./96/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./96/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./96/cgroup") = 0 [pid 5007] umount2("./96/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./96/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./96/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./96") = 0 [pid 5007] mkdir("./97", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 293 ./strace-static-x86_64: Process 6878 attached [pid 6878] set_robust_list(0x5555571235e0, 24) = 0 [pid 6878] chdir("./97") = 0 [pid 6878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6878] setpgid(0, 0) = 0 [pid 6878] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6878] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6878] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6878] write(3, "1000", 4) = 4 [pid 6878] close(3) = 0 [pid 6878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6878] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6878] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6878] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6879 attached [pid 6879] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6879] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6878] <... clone resumed>, parent_tid=[294], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 294 [pid 6878] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6879] <... futex resumed>) = 0 [pid 6879] memfd_create("syzkaller", 0) = 3 [pid 6878] <... futex resumed>) = 1 [pid 6878] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6879] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6879] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6879] close(3) = 0 [pid 6879] mkdir("./file0", 0777) = 0 [ 148.745581][ T6879] loop0: detected capacity change from 0 to 32768 [ 148.759897][ T6879] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6879) [ 148.777251][ T6879] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 148.786079][ T6879] BTRFS info (device loop0): using free space tree [pid 6879] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6879] chdir("./file0") = 0 [pid 6879] ioctl(4, LOOP_CLR_FD) = 0 [pid 6879] close(4) = 0 [pid 6879] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6878] <... futex resumed>) = 0 [pid 6879] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6878] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] <... openat resumed>) = 4 [pid 6878] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6879] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6878] <... futex resumed>) = 0 [pid 6878] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6879] <... futex resumed>) = 1 [pid 6878] <... futex resumed>) = 0 [pid 6878] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 148.806496][ T6879] BTRFS info (device loop0): enabling ssd optimizations [ 148.813597][ T6879] BTRFS info (device loop0): auto enabling async discard [pid 6879] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6878] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6878] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6878] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6878] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[295], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 295 [pid 6878] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 148.856216][ T6879] BTRFS info (device loop0): balance: start -s [ 148.864676][ T6879] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6878] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6896 attached [pid 6896] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6896] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6896] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6896] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6878] <... futex resumed>) = 0 [pid 6878] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6896] <... futex resumed>) = 0 [pid 6896] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 148.903853][ T6879] BTRFS info (device loop0): balance: ended with status: 0 [pid 6878] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6896] <... ioctl resumed>) = 0 [pid 6896] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6879] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6878] close(3 [pid 6896] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6879] <... futex resumed>) = 0 [pid 6878] <... close resumed>) = 0 [pid 6879] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6878] close(4) = 0 [pid 6878] close(5) = 0 [pid 6878] close(6) = -1 EBADF (Bad file descriptor) [pid 6878] close(7) = -1 EBADF (Bad file descriptor) [pid 6878] close(8) = -1 EBADF (Bad file descriptor) [pid 6878] close(9) = -1 EBADF (Bad file descriptor) [pid 6878] close(10) = -1 EBADF (Bad file descriptor) [pid 6878] close(11) = -1 EBADF (Bad file descriptor) [pid 6878] close(12) = -1 EBADF (Bad file descriptor) [pid 6878] close(13) = -1 EBADF (Bad file descriptor) [pid 6878] close(14) = -1 EBADF (Bad file descriptor) [pid 6878] close(15) = -1 EBADF (Bad file descriptor) [pid 6878] close(16) = -1 EBADF (Bad file descriptor) [pid 6878] close(17) = -1 EBADF (Bad file descriptor) [pid 6878] close(18) = -1 EBADF (Bad file descriptor) [pid 6878] close(19) = -1 EBADF (Bad file descriptor) [pid 6878] close(20) = -1 EBADF (Bad file descriptor) [pid 6878] close(21) = -1 EBADF (Bad file descriptor) [pid 6878] close(22) = -1 EBADF (Bad file descriptor) [pid 6878] close(23) = -1 EBADF (Bad file descriptor) [pid 6878] close(24) = -1 EBADF (Bad file descriptor) [pid 6878] close(25) = -1 EBADF (Bad file descriptor) [pid 6878] close(26) = -1 EBADF (Bad file descriptor) [pid 6878] close(27) = -1 EBADF (Bad file descriptor) [pid 6878] close(28) = -1 EBADF (Bad file descriptor) [pid 6878] close(29) = -1 EBADF (Bad file descriptor) [pid 6878] exit_group(0 [pid 6896] <... futex resumed>) = ? [pid 6879] <... futex resumed>) = ? [pid 6878] <... exit_group resumed>) = ? [pid 6896] +++ exited with 0 +++ [pid 6879] +++ exited with 0 +++ [pid 6878] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5007] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./97/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./97/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./97/cgroup.cpu") = 0 [pid 5007] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./97/binderfs") = 0 [pid 5007] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./97/file0") = 0 [pid 5007] umount2("./97/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./97/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./97/cgroup") = 0 [pid 5007] umount2("./97/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./97/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./97/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./97") = 0 [pid 5007] mkdir("./98", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6897 attached [pid 6897] set_robust_list(0x5555571235e0, 24) = 0 [pid 6897] chdir("./98") = 0 [pid 6897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6897] setpgid(0, 0) = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 296 [pid 6897] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6897] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6897] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6897] write(3, "1000", 4) = 4 [pid 6897] close(3) = 0 [pid 6897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6897] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6897] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6897] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6898 attached [pid 6898] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6897] <... clone resumed>, parent_tid=[297], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 297 [pid 6898] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... futex resumed>) = 0 [pid 6897] <... futex resumed>) = 1 [pid 6897] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6898] memfd_create("syzkaller", 0) = 3 [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6898] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6898] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6898] close(3) = 0 [pid 6898] mkdir("./file0", 0777) = 0 [ 149.428531][ T6898] loop0: detected capacity change from 0 to 32768 [ 149.439526][ T6898] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6898) [ 149.456769][ T6898] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 149.465675][ T6898] BTRFS info (device loop0): using free space tree [pid 6898] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6898] chdir("./file0") = 0 [pid 6898] ioctl(4, LOOP_CLR_FD) = 0 [pid 6898] close(4) = 0 [pid 6898] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6897] <... futex resumed>) = 0 [pid 6898] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6898] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6897] <... futex resumed>) = 0 [pid 6898] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6897] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6898] <... openat resumed>) = 4 [pid 6898] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6897] <... futex resumed>) = 0 [pid 6898] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6897] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 149.486802][ T6898] BTRFS info (device loop0): enabling ssd optimizations [ 149.493814][ T6898] BTRFS info (device loop0): auto enabling async discard [pid 6897] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6897] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 149.536956][ T6898] BTRFS info (device loop0): balance: start -s [ 149.545268][ T6898] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6897] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6897] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6897] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[298], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 298 [pid 6897] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6897] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6915 attached [pid 6915] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6915] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6915] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6897] <... futex resumed>) = 0 [pid 6915] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6897] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6915] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6898] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6898] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 149.579901][ T6898] BTRFS info (device loop0): balance: ended with status: 0 [pid 6898] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6915] <... ioctl resumed>) = 0 [pid 6915] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6897] close(3 [pid 6915] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] <... close resumed>) = 0 [pid 6897] close(4) = 0 [pid 6897] close(5) = 0 [pid 6897] close(6) = -1 EBADF (Bad file descriptor) [pid 6897] close(7) = -1 EBADF (Bad file descriptor) [pid 6897] close(8) = -1 EBADF (Bad file descriptor) [pid 6897] close(9) = -1 EBADF (Bad file descriptor) [pid 6897] close(10) = -1 EBADF (Bad file descriptor) [pid 6897] close(11) = -1 EBADF (Bad file descriptor) [pid 6897] close(12) = -1 EBADF (Bad file descriptor) [pid 6897] close(13) = -1 EBADF (Bad file descriptor) [pid 6897] close(14) = -1 EBADF (Bad file descriptor) [pid 6897] close(15) = -1 EBADF (Bad file descriptor) [pid 6897] close(16) = -1 EBADF (Bad file descriptor) [pid 6897] close(17) = -1 EBADF (Bad file descriptor) [pid 6897] close(18) = -1 EBADF (Bad file descriptor) [pid 6897] close(19) = -1 EBADF (Bad file descriptor) [pid 6897] close(20) = -1 EBADF (Bad file descriptor) [pid 6897] close(21) = -1 EBADF (Bad file descriptor) [pid 6897] close(22) = -1 EBADF (Bad file descriptor) [pid 6897] close(23) = -1 EBADF (Bad file descriptor) [pid 6897] close(24) = -1 EBADF (Bad file descriptor) [pid 6897] close(25) = -1 EBADF (Bad file descriptor) [pid 6897] close(26) = -1 EBADF (Bad file descriptor) [pid 6897] close(27) = -1 EBADF (Bad file descriptor) [pid 6897] close(28) = -1 EBADF (Bad file descriptor) [pid 6897] close(29) = -1 EBADF (Bad file descriptor) [pid 6897] exit_group(0 [pid 6915] <... futex resumed>) = ? [pid 6898] <... futex resumed>) = ? [pid 6897] <... exit_group resumed>) = ? [pid 6915] +++ exited with 0 +++ [pid 6898] +++ exited with 0 +++ [pid 6897] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./98/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./98/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./98/cgroup.cpu") = 0 [pid 5007] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./98/binderfs") = 0 [pid 5007] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./98/file0") = 0 [pid 5007] umount2("./98/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./98/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./98/cgroup") = 0 [pid 5007] umount2("./98/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./98/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./98/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./98") = 0 [pid 5007] mkdir("./99", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6916 attached [pid 6916] set_robust_list(0x5555571235e0, 24) = 0 [pid 6916] chdir("./99" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 299 [pid 6916] <... chdir resumed>) = 0 [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6916] setpgid(0, 0) = 0 [pid 6916] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6916] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6916] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6916] write(3, "1000", 4) = 4 [pid 6916] close(3) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6916] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6916] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6916] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6917 attached [pid 6917] set_robust_list(0x7fd090fc79e0, 24 [pid 6916] <... clone resumed>, parent_tid=[300], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 300 [pid 6917] <... set_robust_list resumed>) = 0 [pid 6916] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] memfd_create("syzkaller", 0 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6917] <... memfd_create resumed>) = 3 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6917] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6917] close(3) = 0 [pid 6917] mkdir("./file0", 0777) = 0 [ 150.098050][ T6917] loop0: detected capacity change from 0 to 32768 [ 150.108577][ T6917] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6917) [ 150.126088][ T6917] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 150.134929][ T6917] BTRFS info (device loop0): using free space tree [pid 6917] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6917] chdir("./file0") = 0 [pid 6917] ioctl(4, LOOP_CLR_FD) = 0 [pid 6917] close(4) = 0 [pid 6917] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6916] <... futex resumed>) = 0 [pid 6917] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6916] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6917] <... openat resumed>) = 4 [pid 6917] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6916] <... futex resumed>) = 0 [pid 6917] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6916] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 150.154546][ T6917] BTRFS info (device loop0): enabling ssd optimizations [ 150.162264][ T6917] BTRFS info (device loop0): auto enabling async discard [ 150.202022][ T6917] BTRFS info (device loop0): balance: start -s [ 150.209895][ T6917] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6916] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6916] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6916] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6916] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6934 attached [pid 6934] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6934] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6916] <... clone resumed>, parent_tid=[301], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 301 [pid 6916] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6934] <... futex resumed>) = 0 [pid 6934] openat(AT_FDCWD, ".", O_RDONLY [pid 6916] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6934] <... openat resumed>) = 5 [pid 6934] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... futex resumed>) = 0 [pid 6916] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6934] <... futex resumed>) = 1 [ 150.244401][ T6917] BTRFS info (device loop0): balance: ended with status: 0 [pid 6934] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6916] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6917] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6917] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6917] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6934] <... ioctl resumed>) = 0 [pid 6934] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6916] close(3) = 0 [pid 6916] close(4) = 0 [pid 6916] close(5) = 0 [pid 6916] close(6) = -1 EBADF (Bad file descriptor) [pid 6916] close(7) = -1 EBADF (Bad file descriptor) [pid 6916] close(8) = -1 EBADF (Bad file descriptor) [pid 6916] close(9) = -1 EBADF (Bad file descriptor) [pid 6916] close(10) = -1 EBADF (Bad file descriptor) [pid 6916] close(11) = -1 EBADF (Bad file descriptor) [pid 6916] close(12) = -1 EBADF (Bad file descriptor) [pid 6916] close(13) = -1 EBADF (Bad file descriptor) [pid 6916] close(14) = -1 EBADF (Bad file descriptor) [pid 6916] close(15) = -1 EBADF (Bad file descriptor) [pid 6916] close(16) = -1 EBADF (Bad file descriptor) [pid 6916] close(17) = -1 EBADF (Bad file descriptor) [pid 6916] close(18) = -1 EBADF (Bad file descriptor) [pid 6916] close(19) = -1 EBADF (Bad file descriptor) [pid 6916] close(20) = -1 EBADF (Bad file descriptor) [pid 6916] close(21) = -1 EBADF (Bad file descriptor) [pid 6916] close(22) = -1 EBADF (Bad file descriptor) [pid 6916] close(23) = -1 EBADF (Bad file descriptor) [pid 6916] close(24) = -1 EBADF (Bad file descriptor) [pid 6916] close(25) = -1 EBADF (Bad file descriptor) [pid 6916] close(26) = -1 EBADF (Bad file descriptor) [pid 6916] close(27) = -1 EBADF (Bad file descriptor) [pid 6916] close(28) = -1 EBADF (Bad file descriptor) [pid 6916] close(29) = -1 EBADF (Bad file descriptor) [pid 6916] exit_group(0 [pid 6934] <... futex resumed>) = ? [pid 6917] <... futex resumed>) = ? [pid 6916] <... exit_group resumed>) = ? [pid 6934] +++ exited with 0 +++ [pid 6917] +++ exited with 0 +++ [pid 6916] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./99/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./99/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./99/cgroup.cpu") = 0 [pid 5007] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./99/binderfs") = 0 [pid 5007] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./99/file0") = 0 [pid 5007] umount2("./99/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./99/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./99/cgroup") = 0 [pid 5007] umount2("./99/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./99/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./99/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./99") = 0 [pid 5007] mkdir("./100", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6935 attached [pid 6935] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 302 [pid 6935] <... set_robust_list resumed>) = 0 [pid 6935] chdir("./100") = 0 [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6935] setpgid(0, 0) = 0 [pid 6935] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6935] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6935] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6935] write(3, "1000", 4) = 4 [pid 6935] close(3) = 0 [pid 6935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6935] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6935] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6935] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6936 attached , parent_tid=[303], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 303 [pid 6935] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6936] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6936] memfd_create("syzkaller", 0) = 3 [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6936] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6936] close(3) = 0 [pid 6936] mkdir("./file0", 0777) = 0 [ 150.832745][ T6936] loop0: detected capacity change from 0 to 32768 [ 150.843627][ T6936] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6936) [ 150.861676][ T6936] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 150.870697][ T6936] BTRFS info (device loop0): using free space tree [pid 6936] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6936] chdir("./file0") = 0 [pid 6936] ioctl(4, LOOP_CLR_FD) = 0 [pid 6936] close(4) = 0 [pid 6936] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 6935] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6936] <... futex resumed>) = 1 [pid 6936] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6936] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 6935] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6936] <... futex resumed>) = 1 [ 150.889705][ T6936] BTRFS info (device loop0): enabling ssd optimizations [ 150.896970][ T6936] BTRFS info (device loop0): auto enabling async discard [pid 6936] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6935] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6935] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6935] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6935] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6953 attached [pid 6953] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6953] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6935] <... clone resumed>, parent_tid=[304], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 304 [pid 6935] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6935] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... futex resumed>) = 0 [pid 6953] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6953] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 6935] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... futex resumed>) = 1 [ 150.944340][ T6936] BTRFS info (device loop0): balance: start -s [ 150.953390][ T6936] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6953] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6935] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 151.034463][ T6936] BTRFS info (device loop0): balance: ended with status: 0 [pid 6953] <... ioctl resumed>) = 0 [pid 6953] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6936] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6936] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6935] close(3) = 0 [pid 6935] close(4) = 0 [pid 6935] close(5) = 0 [pid 6935] close(6) = -1 EBADF (Bad file descriptor) [pid 6935] close(7) = -1 EBADF (Bad file descriptor) [pid 6935] close(8) = -1 EBADF (Bad file descriptor) [pid 6935] close(9) = -1 EBADF (Bad file descriptor) [pid 6935] close(10) = -1 EBADF (Bad file descriptor) [pid 6935] close(11) = -1 EBADF (Bad file descriptor) [pid 6935] close(12) = -1 EBADF (Bad file descriptor) [pid 6935] close(13) = -1 EBADF (Bad file descriptor) [pid 6935] close(14) = -1 EBADF (Bad file descriptor) [pid 6935] close(15) = -1 EBADF (Bad file descriptor) [pid 6935] close(16) = -1 EBADF (Bad file descriptor) [pid 6935] close(17) = -1 EBADF (Bad file descriptor) [pid 6935] close(18) = -1 EBADF (Bad file descriptor) [pid 6935] close(19) = -1 EBADF (Bad file descriptor) [pid 6935] close(20) = -1 EBADF (Bad file descriptor) [pid 6935] close(21) = -1 EBADF (Bad file descriptor) [pid 6935] close(22) = -1 EBADF (Bad file descriptor) [pid 6935] close(23) = -1 EBADF (Bad file descriptor) [pid 6935] close(24) = -1 EBADF (Bad file descriptor) [pid 6935] close(25) = -1 EBADF (Bad file descriptor) [pid 6935] close(26) = -1 EBADF (Bad file descriptor) [pid 6935] close(27) = -1 EBADF (Bad file descriptor) [pid 6935] close(28) = -1 EBADF (Bad file descriptor) [pid 6935] close(29) = -1 EBADF (Bad file descriptor) [pid 6935] exit_group(0 [pid 6953] <... futex resumed>) = ? [pid 6936] <... futex resumed>) = ? [pid 6935] <... exit_group resumed>) = ? [pid 6953] +++ exited with 0 +++ [pid 6936] +++ exited with 0 +++ [pid 6935] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./100/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./100/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./100/cgroup.cpu") = 0 [pid 5007] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./100/binderfs") = 0 [pid 5007] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./100/file0") = 0 [pid 5007] umount2("./100/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./100/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./100/cgroup") = 0 [pid 5007] umount2("./100/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./100/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./100/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./100") = 0 [pid 5007] mkdir("./101", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6954 attached , child_tidptr=0x5555571235d0) = 305 [pid 6954] set_robust_list(0x5555571235e0, 24) = 0 [pid 6954] chdir("./101") = 0 [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6954] setpgid(0, 0) = 0 [pid 6954] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6954] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6954] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6954] write(3, "1000", 4) = 4 [pid 6954] close(3) = 0 [pid 6954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6954] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6954] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6954] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6955 attached [pid 6955] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6955] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6954] <... clone resumed>, parent_tid=[306], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 306 [pid 6954] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6955] <... futex resumed>) = 0 [pid 6954] <... futex resumed>) = 1 [pid 6955] memfd_create("syzkaller", 0 [pid 6954] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6955] <... memfd_create resumed>) = 3 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6955] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6955] close(3) = 0 [pid 6955] mkdir("./file0", 0777) = 0 [ 151.551651][ T6955] loop0: detected capacity change from 0 to 32768 [ 151.562996][ T6955] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6955) [ 151.580519][ T6955] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 151.589371][ T6955] BTRFS info (device loop0): using free space tree [pid 6955] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6955] chdir("./file0") = 0 [pid 6955] ioctl(4, LOOP_CLR_FD) = 0 [pid 6955] close(4) = 0 [pid 6955] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6955] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6954] <... futex resumed>) = 0 [pid 6954] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6954] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6955] <... futex resumed>) = 0 [pid 6955] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6955] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6954] <... futex resumed>) = 0 [pid 6954] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6955] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 151.609924][ T6955] BTRFS info (device loop0): enabling ssd optimizations [ 151.617125][ T6955] BTRFS info (device loop0): auto enabling async discard [pid 6954] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6954] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6954] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6954] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6972 attached [pid 6972] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6972] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6954] <... clone resumed>, parent_tid=[307], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 307 [pid 6954] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6954] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6972] <... futex resumed>) = 0 [pid 6972] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6972] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6954] <... futex resumed>) = 0 [pid 6954] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6972] <... futex resumed>) = 1 [pid 6954] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 151.669279][ T6955] BTRFS info (device loop0): balance: start -s [ 151.678328][ T6955] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6972] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6954] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 151.758963][ T6955] BTRFS info (device loop0): balance: ended with status: 0 [pid 6955] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6955] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6955] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6972] <... ioctl resumed>) = 0 [pid 6972] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6972] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6954] close(3) = 0 [pid 6954] close(4) = 0 [pid 6954] close(5) = 0 [pid 6954] close(6) = -1 EBADF (Bad file descriptor) [pid 6954] close(7) = -1 EBADF (Bad file descriptor) [pid 6954] close(8) = -1 EBADF (Bad file descriptor) [pid 6954] close(9) = -1 EBADF (Bad file descriptor) [pid 6954] close(10) = -1 EBADF (Bad file descriptor) [pid 6954] close(11) = -1 EBADF (Bad file descriptor) [pid 6954] close(12) = -1 EBADF (Bad file descriptor) [pid 6954] close(13) = -1 EBADF (Bad file descriptor) [pid 6954] close(14) = -1 EBADF (Bad file descriptor) [pid 6954] close(15) = -1 EBADF (Bad file descriptor) [pid 6954] close(16) = -1 EBADF (Bad file descriptor) [pid 6954] close(17) = -1 EBADF (Bad file descriptor) [pid 6954] close(18) = -1 EBADF (Bad file descriptor) [pid 6954] close(19) = -1 EBADF (Bad file descriptor) [pid 6954] close(20) = -1 EBADF (Bad file descriptor) [pid 6954] close(21) = -1 EBADF (Bad file descriptor) [pid 6954] close(22) = -1 EBADF (Bad file descriptor) [pid 6954] close(23) = -1 EBADF (Bad file descriptor) [pid 6954] close(24) = -1 EBADF (Bad file descriptor) [pid 6954] close(25) = -1 EBADF (Bad file descriptor) [pid 6954] close(26) = -1 EBADF (Bad file descriptor) [pid 6954] close(27) = -1 EBADF (Bad file descriptor) [pid 6954] close(28) = -1 EBADF (Bad file descriptor) [pid 6954] close(29) = -1 EBADF (Bad file descriptor) [pid 6954] exit_group(0 [pid 6972] <... futex resumed>) = ? [pid 6955] <... futex resumed>) = ? [pid 6954] <... exit_group resumed>) = ? [pid 6972] +++ exited with 0 +++ [pid 6955] +++ exited with 0 +++ [pid 6954] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./101/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./101/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./101/cgroup.cpu") = 0 [pid 5007] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./101/binderfs") = 0 [pid 5007] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./101/file0") = 0 [pid 5007] umount2("./101/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./101/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./101/cgroup") = 0 [pid 5007] umount2("./101/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./101/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./101/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./101") = 0 [pid 5007] mkdir("./102", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 308 ./strace-static-x86_64: Process 6973 attached [pid 6973] set_robust_list(0x5555571235e0, 24) = 0 [pid 6973] chdir("./102") = 0 [pid 6973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6973] setpgid(0, 0) = 0 [pid 6973] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6973] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6973] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6973] write(3, "1000", 4) = 4 [pid 6973] close(3) = 0 [pid 6973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6973] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6973] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6973] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[309], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 309 [pid 6973] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6974 attached [pid 6974] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6974] memfd_create("syzkaller", 0) = 3 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6974] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6974] close(3) = 0 [pid 6974] mkdir("./file0", 0777) = 0 [ 152.208069][ T6974] loop0: detected capacity change from 0 to 32768 [ 152.220257][ T6974] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6974) [ 152.235831][ T6974] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 152.244891][ T6974] BTRFS info (device loop0): using free space tree [pid 6974] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6974] chdir("./file0") = 0 [pid 6974] ioctl(4, LOOP_CLR_FD) = 0 [pid 6974] close(4) = 0 [pid 6974] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6973] <... futex resumed>) = 0 [pid 6974] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6973] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] <... openat resumed>) = 4 [pid 6974] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6973] <... futex resumed>) = 0 [pid 6973] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6973] <... futex resumed>) = 0 [ 152.265675][ T6974] BTRFS info (device loop0): enabling ssd optimizations [ 152.272746][ T6974] BTRFS info (device loop0): auto enabling async discard [pid 6973] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6973] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6973] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6973] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[310], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 310 [pid 6973] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6991 attached [pid 6991] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6991] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6991] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] <... futex resumed>) = 0 [pid 6991] <... futex resumed>) = 1 [pid 6991] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6974] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6973] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6973] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6974] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 152.313878][ T6974] BTRFS info (device loop0): balance: start -s [ 152.322657][ T6974] BTRFS info (device loop0): relocating block group 1048576 flags system [ 152.352751][ T6974] BTRFS info (device loop0): balance: ended with status: 0 [pid 6974] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6991] <... ioctl resumed>) = 0 [pid 6991] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] close(3 [pid 6991] <... futex resumed>) = 0 [pid 6973] <... close resumed>) = 0 [pid 6991] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6973] close(4) = 0 [pid 6973] close(5) = 0 [pid 6973] close(6) = -1 EBADF (Bad file descriptor) [pid 6973] close(7) = -1 EBADF (Bad file descriptor) [pid 6973] close(8) = -1 EBADF (Bad file descriptor) [pid 6973] close(9) = -1 EBADF (Bad file descriptor) [pid 6973] close(10) = -1 EBADF (Bad file descriptor) [pid 6973] close(11) = -1 EBADF (Bad file descriptor) [pid 6973] close(12) = -1 EBADF (Bad file descriptor) [pid 6973] close(13) = -1 EBADF (Bad file descriptor) [pid 6973] close(14) = -1 EBADF (Bad file descriptor) [pid 6973] close(15) = -1 EBADF (Bad file descriptor) [pid 6973] close(16) = -1 EBADF (Bad file descriptor) [pid 6973] close(17) = -1 EBADF (Bad file descriptor) [pid 6973] close(18) = -1 EBADF (Bad file descriptor) [pid 6973] close(19) = -1 EBADF (Bad file descriptor) [pid 6973] close(20) = -1 EBADF (Bad file descriptor) [pid 6973] close(21) = -1 EBADF (Bad file descriptor) [pid 6973] close(22) = -1 EBADF (Bad file descriptor) [pid 6973] close(23) = -1 EBADF (Bad file descriptor) [pid 6973] close(24) = -1 EBADF (Bad file descriptor) [pid 6973] close(25) = -1 EBADF (Bad file descriptor) [pid 6973] close(26) = -1 EBADF (Bad file descriptor) [pid 6973] close(27) = -1 EBADF (Bad file descriptor) [pid 6973] close(28) = -1 EBADF (Bad file descriptor) [pid 6973] close(29) = -1 EBADF (Bad file descriptor) [pid 6973] exit_group(0 [pid 6991] <... futex resumed>) = ? [pid 6974] <... futex resumed>) = ? [pid 6973] <... exit_group resumed>) = ? [pid 6991] +++ exited with 0 +++ [pid 6974] +++ exited with 0 +++ [pid 6973] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./102/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./102/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./102/cgroup.cpu") = 0 [pid 5007] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./102/binderfs") = 0 [pid 5007] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./102/file0") = 0 [pid 5007] umount2("./102/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./102/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./102/cgroup") = 0 [pid 5007] umount2("./102/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./102/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./102/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./102") = 0 [pid 5007] mkdir("./103", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6992 attached [pid 6992] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 311 [pid 6992] chdir("./103") = 0 [pid 6992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6992] setpgid(0, 0) = 0 [pid 6992] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6992] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6992] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6992] write(3, "1000", 4) = 4 [pid 6992] close(3) = 0 [pid 6992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6992] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6992] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6992] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[312], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 312 [pid 6992] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6993 attached [pid 6993] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6993] memfd_create("syzkaller", 0) = 3 [pid 6993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6993] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6993] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6993] close(3) = 0 [pid 6993] mkdir("./file0", 0777) = 0 [ 152.898326][ T6993] loop0: detected capacity change from 0 to 32768 [ 152.907830][ T6993] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6993) [ 152.925593][ T6993] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 152.934422][ T6993] BTRFS info (device loop0): using free space tree [pid 6993] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6993] chdir("./file0") = 0 [pid 6993] ioctl(4, LOOP_CLR_FD) = 0 [pid 6993] close(4) = 0 [pid 6993] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] <... futex resumed>) = 0 [pid 6992] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6993] <... futex resumed>) = 1 [pid 6993] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6993] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] <... futex resumed>) = 0 [pid 6992] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6993] <... futex resumed>) = 1 [ 152.955855][ T6993] BTRFS info (device loop0): enabling ssd optimizations [ 152.963025][ T6993] BTRFS info (device loop0): auto enabling async discard [pid 6993] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6992] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6992] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6992] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6992] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7010 attached [pid 7010] set_robust_list(0x7fd089ba69e0, 24 [pid 6992] <... clone resumed>, parent_tid=[313], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 313 [pid 6992] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] <... set_robust_list resumed>) = 0 [pid 7010] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7010] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 153.002166][ T6993] BTRFS info (device loop0): balance: start -s [ 153.011141][ T6993] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6992] <... futex resumed>) = 0 [pid 7010] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7010] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6993] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6993] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6993] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6992] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 153.048688][ T6993] BTRFS info (device loop0): balance: ended with status: 0 [pid 7010] <... ioctl resumed>) = 0 [pid 7010] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7010] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] close(3) = 0 [pid 6992] close(4) = 0 [pid 6992] close(5) = 0 [pid 6992] close(6) = -1 EBADF (Bad file descriptor) [pid 6992] close(7) = -1 EBADF (Bad file descriptor) [pid 6992] close(8) = -1 EBADF (Bad file descriptor) [pid 6992] close(9) = -1 EBADF (Bad file descriptor) [pid 6992] close(10) = -1 EBADF (Bad file descriptor) [pid 6992] close(11) = -1 EBADF (Bad file descriptor) [pid 6992] close(12) = -1 EBADF (Bad file descriptor) [pid 6992] close(13) = -1 EBADF (Bad file descriptor) [pid 6992] close(14) = -1 EBADF (Bad file descriptor) [pid 6992] close(15) = -1 EBADF (Bad file descriptor) [pid 6992] close(16) = -1 EBADF (Bad file descriptor) [pid 6992] close(17) = -1 EBADF (Bad file descriptor) [pid 6992] close(18) = -1 EBADF (Bad file descriptor) [pid 6992] close(19) = -1 EBADF (Bad file descriptor) [pid 6992] close(20) = -1 EBADF (Bad file descriptor) [pid 6992] close(21) = -1 EBADF (Bad file descriptor) [pid 6992] close(22) = -1 EBADF (Bad file descriptor) [pid 6992] close(23) = -1 EBADF (Bad file descriptor) [pid 6992] close(24) = -1 EBADF (Bad file descriptor) [pid 6992] close(25) = -1 EBADF (Bad file descriptor) [pid 6992] close(26) = -1 EBADF (Bad file descriptor) [pid 6992] close(27) = -1 EBADF (Bad file descriptor) [pid 6992] close(28) = -1 EBADF (Bad file descriptor) [pid 6992] close(29) = -1 EBADF (Bad file descriptor) [pid 6992] exit_group(0 [pid 6993] <... futex resumed>) = ? [pid 7010] <... futex resumed>) = ? [pid 6992] <... exit_group resumed>) = ? [pid 7010] +++ exited with 0 +++ [pid 6993] +++ exited with 0 +++ [pid 6992] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./103/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./103/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./103/cgroup.cpu") = 0 [pid 5007] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./103/binderfs") = 0 [pid 5007] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./103/file0") = 0 [pid 5007] umount2("./103/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./103/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./103/cgroup") = 0 [pid 5007] umount2("./103/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./103/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./103/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./103") = 0 [pid 5007] mkdir("./104", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 314 ./strace-static-x86_64: Process 7011 attached [pid 7011] set_robust_list(0x5555571235e0, 24) = 0 [pid 7011] chdir("./104") = 0 [pid 7011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7011] setpgid(0, 0) = 0 [pid 7011] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7011] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7011] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7011] write(3, "1000", 4) = 4 [pid 7011] close(3) = 0 [pid 7011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7011] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7011] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7011] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7012 attached [pid 7012] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7012] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7011] <... clone resumed>, parent_tid=[315], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 315 [pid 7011] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = 0 [pid 7011] <... futex resumed>) = 1 [pid 7012] memfd_create("syzkaller", 0 [pid 7011] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7012] <... memfd_create resumed>) = 3 [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7012] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7012] close(3) = 0 [pid 7012] mkdir("./file0", 0777) = 0 [ 153.582435][ T7012] loop0: detected capacity change from 0 to 32768 [ 153.593790][ T7012] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7012) [ 153.611130][ T7012] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 153.620171][ T7012] BTRFS info (device loop0): using free space tree [pid 7012] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7012] chdir("./file0") = 0 [pid 7012] ioctl(4, LOOP_CLR_FD) = 0 [pid 7012] close(4) = 0 [pid 7012] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7012] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7011] <... futex resumed>) = 0 [pid 7011] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... futex resumed>) = 0 [pid 7011] <... futex resumed>) = 1 [pid 7012] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7011] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7012] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7011] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7012] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 153.639781][ T7012] BTRFS info (device loop0): enabling ssd optimizations [ 153.646928][ T7012] BTRFS info (device loop0): auto enabling async discard [ 153.691767][ T7012] BTRFS info (device loop0): balance: start -s [ 153.700756][ T7012] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7011] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7011] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7011] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7011] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7029 attached , parent_tid=[316], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 316 [pid 7029] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7011] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] openat(AT_FDCWD, ".", O_RDONLY [pid 7011] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7029] <... openat resumed>) = 5 [pid 7029] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7011] <... futex resumed>) = 0 [pid 7029] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7011] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7011] <... futex resumed>) = 0 [pid 7012] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 153.732787][ T7012] BTRFS info (device loop0): balance: ended with status: 0 [pid 7011] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7029] <... ioctl resumed>) = 0 [pid 7029] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7011] close(3) = 0 [pid 7011] close(4) = 0 [pid 7011] close(5) = 0 [pid 7011] close(6) = -1 EBADF (Bad file descriptor) [pid 7011] close(7) = -1 EBADF (Bad file descriptor) [pid 7011] close(8) = -1 EBADF (Bad file descriptor) [pid 7011] close(9) = -1 EBADF (Bad file descriptor) [pid 7011] close(10) = -1 EBADF (Bad file descriptor) [pid 7011] close(11) = -1 EBADF (Bad file descriptor) [pid 7011] close(12) = -1 EBADF (Bad file descriptor) [pid 7011] close(13) = -1 EBADF (Bad file descriptor) [pid 7011] close(14) = -1 EBADF (Bad file descriptor) [pid 7011] close(15) = -1 EBADF (Bad file descriptor) [pid 7011] close(16) = -1 EBADF (Bad file descriptor) [pid 7011] close(17) = -1 EBADF (Bad file descriptor) [pid 7011] close(18) = -1 EBADF (Bad file descriptor) [pid 7011] close(19) = -1 EBADF (Bad file descriptor) [pid 7011] close(20) = -1 EBADF (Bad file descriptor) [pid 7011] close(21) = -1 EBADF (Bad file descriptor) [pid 7011] close(22) = -1 EBADF (Bad file descriptor) [pid 7011] close(23) = -1 EBADF (Bad file descriptor) [pid 7011] close(24) = -1 EBADF (Bad file descriptor) [pid 7011] close(25) = -1 EBADF (Bad file descriptor) [pid 7011] close(26) = -1 EBADF (Bad file descriptor) [pid 7011] close(27) = -1 EBADF (Bad file descriptor) [pid 7011] close(28) = -1 EBADF (Bad file descriptor) [pid 7011] close(29) = -1 EBADF (Bad file descriptor) [pid 7011] exit_group(0 [pid 7029] <... futex resumed>) = ? [pid 7012] <... futex resumed>) = ? [pid 7011] <... exit_group resumed>) = ? [pid 7029] +++ exited with 0 +++ [pid 7012] +++ exited with 0 +++ [pid 7011] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./104/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./104/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./104/cgroup.cpu") = 0 [pid 5007] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./104/binderfs") = 0 [pid 5007] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./104/file0") = 0 [pid 5007] umount2("./104/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./104/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./104/cgroup") = 0 [pid 5007] umount2("./104/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./104/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./104/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./104") = 0 [pid 5007] mkdir("./105", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 317 ./strace-static-x86_64: Process 7030 attached [pid 7030] set_robust_list(0x5555571235e0, 24) = 0 [pid 7030] chdir("./105") = 0 [pid 7030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7030] setpgid(0, 0) = 0 [pid 7030] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7030] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7030] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7030] write(3, "1000", 4) = 4 [pid 7030] close(3) = 0 [pid 7030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7030] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7030] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7030] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7031 attached [pid 7031] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7031] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7030] <... clone resumed>, parent_tid=[318], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 318 [pid 7030] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7031] <... futex resumed>) = 0 [pid 7030] <... futex resumed>) = 1 [pid 7031] memfd_create("syzkaller", 0) = 3 [pid 7030] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7031] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7031] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7031] close(3) = 0 [pid 7031] mkdir("./file0", 0777) = 0 [ 154.266204][ T7031] loop0: detected capacity change from 0 to 32768 [ 154.276312][ T7031] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7031) [ 154.293987][ T7031] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.302904][ T7031] BTRFS info (device loop0): using free space tree [pid 7031] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7031] chdir("./file0") = 0 [pid 7031] ioctl(4, LOOP_CLR_FD) = 0 [pid 7031] close(4) = 0 [pid 7031] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7030] <... futex resumed>) = 0 [pid 7031] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7030] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7031] <... openat resumed>) = 4 [pid 7030] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7031] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7030] <... futex resumed>) = 0 [pid 7031] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7030] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7031] <... futex resumed>) = 0 [pid 7031] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 154.323155][ T7031] BTRFS info (device loop0): enabling ssd optimizations [ 154.330561][ T7031] BTRFS info (device loop0): auto enabling async discard [pid 7030] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7030] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7030] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7030] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7048 attached [pid 7048] set_robust_list(0x7fd089ba69e0, 24 [pid 7030] <... clone resumed>, parent_tid=[319], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 319 [pid 7048] <... set_robust_list resumed>) = 0 [pid 7030] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7048] openat(AT_FDCWD, ".", O_RDONLY [pid 7030] <... futex resumed>) = 0 [pid 7030] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7048] <... openat resumed>) = 5 [pid 7048] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7030] <... futex resumed>) = 0 [pid 7048] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7030] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 154.374579][ T7031] BTRFS info (device loop0): balance: start -s [ 154.387228][ T7031] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7030] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7031] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7031] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 154.446308][ T7031] BTRFS info (device loop0): balance: ended with status: 0 [pid 7031] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7048] <... ioctl resumed>) = 0 [pid 7048] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7030] close(3 [pid 7048] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7030] <... close resumed>) = 0 [pid 7030] close(4) = 0 [pid 7030] close(5) = 0 [pid 7030] close(6) = -1 EBADF (Bad file descriptor) [pid 7030] close(7) = -1 EBADF (Bad file descriptor) [pid 7030] close(8) = -1 EBADF (Bad file descriptor) [pid 7030] close(9) = -1 EBADF (Bad file descriptor) [pid 7030] close(10) = -1 EBADF (Bad file descriptor) [pid 7030] close(11) = -1 EBADF (Bad file descriptor) [pid 7030] close(12) = -1 EBADF (Bad file descriptor) [pid 7030] close(13) = -1 EBADF (Bad file descriptor) [pid 7030] close(14) = -1 EBADF (Bad file descriptor) [pid 7030] close(15) = -1 EBADF (Bad file descriptor) [pid 7030] close(16) = -1 EBADF (Bad file descriptor) [pid 7030] close(17) = -1 EBADF (Bad file descriptor) [pid 7030] close(18) = -1 EBADF (Bad file descriptor) [pid 7030] close(19) = -1 EBADF (Bad file descriptor) [pid 7030] close(20) = -1 EBADF (Bad file descriptor) [pid 7030] close(21) = -1 EBADF (Bad file descriptor) [pid 7030] close(22) = -1 EBADF (Bad file descriptor) [pid 7030] close(23) = -1 EBADF (Bad file descriptor) [pid 7030] close(24) = -1 EBADF (Bad file descriptor) [pid 7030] close(25) = -1 EBADF (Bad file descriptor) [pid 7030] close(26) = -1 EBADF (Bad file descriptor) [pid 7030] close(27) = -1 EBADF (Bad file descriptor) [pid 7030] close(28) = -1 EBADF (Bad file descriptor) [pid 7030] close(29) = -1 EBADF (Bad file descriptor) [pid 7030] exit_group(0 [pid 7048] <... futex resumed>) = ? [pid 7031] <... futex resumed>) = ? [pid 7030] <... exit_group resumed>) = ? [pid 7048] +++ exited with 0 +++ [pid 7031] +++ exited with 0 +++ [pid 7030] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./105/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./105/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./105/cgroup.cpu") = 0 [pid 5007] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./105/binderfs") = 0 [pid 5007] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./105/file0") = 0 [pid 5007] umount2("./105/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./105/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./105/cgroup") = 0 [pid 5007] umount2("./105/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./105/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./105/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./105") = 0 [pid 5007] mkdir("./106", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7049 attached , child_tidptr=0x5555571235d0) = 320 [pid 7049] set_robust_list(0x5555571235e0, 24) = 0 [pid 7049] chdir("./106") = 0 [pid 7049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7049] setpgid(0, 0) = 0 [pid 7049] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7049] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7049] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7049] write(3, "1000", 4) = 4 [pid 7049] close(3) = 0 [pid 7049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7049] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7049] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7050 attached [pid 7050] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7050] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7049] <... clone resumed>, parent_tid=[321], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 321 [pid 7049] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7050] <... futex resumed>) = 0 [pid 7049] <... futex resumed>) = 1 [pid 7050] memfd_create("syzkaller", 0 [pid 7049] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7050] <... memfd_create resumed>) = 3 [pid 7050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7050] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7050] close(3) = 0 [pid 7050] mkdir("./file0", 0777) = 0 [ 154.971980][ T7050] loop0: detected capacity change from 0 to 32768 [ 154.981790][ T7050] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7050) [ 155.000169][ T7050] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 155.009055][ T7050] BTRFS info (device loop0): using free space tree [pid 7050] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7050] chdir("./file0") = 0 [pid 7050] ioctl(4, LOOP_CLR_FD) = 0 [pid 7050] close(4) = 0 [pid 7050] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7049] <... futex resumed>) = 0 [pid 7050] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7049] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7050] <... openat resumed>) = 4 [pid 7049] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7049] <... futex resumed>) = 0 [pid 7049] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] <... futex resumed>) = 1 [ 155.027955][ T7050] BTRFS info (device loop0): enabling ssd optimizations [ 155.034965][ T7050] BTRFS info (device loop0): auto enabling async discard [pid 7050] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7049] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7049] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[322], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 322 [pid 7049] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7067 attached [pid 7067] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7067] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7067] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7049] <... futex resumed>) = 0 [pid 7049] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7067] <... futex resumed>) = 1 [ 155.084975][ T7050] BTRFS info (device loop0): balance: start -s [ 155.095679][ T7050] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7067] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7050] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7050] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 155.155308][ T7050] BTRFS info (device loop0): balance: ended with status: 0 [pid 7050] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7067] <... ioctl resumed>) = 0 [pid 7067] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7067] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7049] close(3) = 0 [pid 7049] close(4) = 0 [pid 7049] close(5) = 0 [pid 7049] close(6) = -1 EBADF (Bad file descriptor) [pid 7049] close(7) = -1 EBADF (Bad file descriptor) [pid 7049] close(8) = -1 EBADF (Bad file descriptor) [pid 7049] close(9) = -1 EBADF (Bad file descriptor) [pid 7049] close(10) = -1 EBADF (Bad file descriptor) [pid 7049] close(11) = -1 EBADF (Bad file descriptor) [pid 7049] close(12) = -1 EBADF (Bad file descriptor) [pid 7049] close(13) = -1 EBADF (Bad file descriptor) [pid 7049] close(14) = -1 EBADF (Bad file descriptor) [pid 7049] close(15) = -1 EBADF (Bad file descriptor) [pid 7049] close(16) = -1 EBADF (Bad file descriptor) [pid 7049] close(17) = -1 EBADF (Bad file descriptor) [pid 7049] close(18) = -1 EBADF (Bad file descriptor) [pid 7049] close(19) = -1 EBADF (Bad file descriptor) [pid 7049] close(20) = -1 EBADF (Bad file descriptor) [pid 7049] close(21) = -1 EBADF (Bad file descriptor) [pid 7049] close(22) = -1 EBADF (Bad file descriptor) [pid 7049] close(23) = -1 EBADF (Bad file descriptor) [pid 7049] close(24) = -1 EBADF (Bad file descriptor) [pid 7049] close(25) = -1 EBADF (Bad file descriptor) [pid 7049] close(26) = -1 EBADF (Bad file descriptor) [pid 7049] close(27) = -1 EBADF (Bad file descriptor) [pid 7049] close(28) = -1 EBADF (Bad file descriptor) [pid 7049] close(29) = -1 EBADF (Bad file descriptor) [pid 7049] exit_group(0 [pid 7067] <... futex resumed>) = ? [pid 7050] <... futex resumed>) = ? [pid 7049] <... exit_group resumed>) = ? [pid 7067] +++ exited with 0 +++ [pid 7050] +++ exited with 0 +++ [pid 7049] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./106/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./106/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./106/cgroup.cpu") = 0 [pid 5007] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./106/binderfs") = 0 [pid 5007] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./106/file0") = 0 [pid 5007] umount2("./106/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./106/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./106/cgroup") = 0 [pid 5007] umount2("./106/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./106/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./106/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./106") = 0 [pid 5007] mkdir("./107", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7068 attached [pid 7068] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 323 [pid 7068] <... set_robust_list resumed>) = 0 [pid 7068] chdir("./107") = 0 [pid 7068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7068] setpgid(0, 0) = 0 [pid 7068] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7068] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7068] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7068] write(3, "1000", 4) = 4 [pid 7068] close(3) = 0 [pid 7068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7068] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7068] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7068] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[324], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 324 [pid 7068] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7069 attached [pid 7069] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7069] memfd_create("syzkaller", 0) = 3 [pid 7069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7069] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7069] close(3) = 0 [pid 7069] mkdir("./file0", 0777) = 0 [ 155.682004][ T7069] loop0: detected capacity change from 0 to 32768 [ 155.692359][ T7069] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7069) [ 155.708876][ T7069] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 155.717673][ T7069] BTRFS info (device loop0): using free space tree [pid 7069] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7069] chdir("./file0") = 0 [pid 7069] ioctl(4, LOOP_CLR_FD) = 0 [pid 7069] close(4) = 0 [pid 7069] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] <... futex resumed>) = 0 [pid 7068] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7069] <... futex resumed>) = 1 [pid 7069] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7069] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] <... futex resumed>) = 0 [pid 7068] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7069] <... futex resumed>) = 1 [ 155.740801][ T7069] BTRFS info (device loop0): enabling ssd optimizations [ 155.747989][ T7069] BTRFS info (device loop0): auto enabling async discard [pid 7069] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7068] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7068] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7068] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[325], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 325 ./strace-static-x86_64: Process 7086 attached [pid 7068] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] set_robust_list(0x7fd089ba69e0, 24 [pid 7068] <... futex resumed>) = 0 [pid 7086] <... set_robust_list resumed>) = 0 [pid 7068] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7086] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7086] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] <... futex resumed>) = 0 [pid 7068] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7086] <... futex resumed>) = 1 [ 155.786853][ T7069] BTRFS info (device loop0): balance: start -s [ 155.795256][ T7069] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7086] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 155.857747][ T7069] BTRFS info (device loop0): balance: ended with status: 0 [pid 7086] <... ioctl resumed>) = 0 [pid 7086] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7069] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7068] close(3 [pid 7086] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7068] <... close resumed>) = 0 [pid 7068] close(4) = 0 [pid 7068] close(5) = 0 [pid 7068] close(6) = -1 EBADF (Bad file descriptor) [pid 7068] close(7) = -1 EBADF (Bad file descriptor) [pid 7068] close(8) = -1 EBADF (Bad file descriptor) [pid 7068] close(9) = -1 EBADF (Bad file descriptor) [pid 7068] close(10) = -1 EBADF (Bad file descriptor) [pid 7068] close(11) = -1 EBADF (Bad file descriptor) [pid 7068] close(12) = -1 EBADF (Bad file descriptor) [pid 7068] close(13) = -1 EBADF (Bad file descriptor) [pid 7068] close(14) = -1 EBADF (Bad file descriptor) [pid 7068] close(15) = -1 EBADF (Bad file descriptor) [pid 7068] close(16) = -1 EBADF (Bad file descriptor) [pid 7068] close(17) = -1 EBADF (Bad file descriptor) [pid 7068] close(18) = -1 EBADF (Bad file descriptor) [pid 7068] close(19) = -1 EBADF (Bad file descriptor) [pid 7068] close(20) = -1 EBADF (Bad file descriptor) [pid 7068] close(21) = -1 EBADF (Bad file descriptor) [pid 7068] close(22) = -1 EBADF (Bad file descriptor) [pid 7068] close(23) = -1 EBADF (Bad file descriptor) [pid 7068] close(24) = -1 EBADF (Bad file descriptor) [pid 7068] close(25) = -1 EBADF (Bad file descriptor) [pid 7068] close(26) = -1 EBADF (Bad file descriptor) [pid 7068] close(27) = -1 EBADF (Bad file descriptor) [pid 7068] close(28) = -1 EBADF (Bad file descriptor) [pid 7068] close(29) = -1 EBADF (Bad file descriptor) [pid 7068] exit_group(0) = ? [pid 7086] <... futex resumed>) = ? [pid 7069] <... futex resumed>) = ? [pid 7086] +++ exited with 0 +++ [pid 7069] +++ exited with 0 +++ [pid 7068] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./107/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./107/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./107/cgroup.cpu") = 0 [pid 5007] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./107/binderfs") = 0 [pid 5007] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./107/file0") = 0 [pid 5007] umount2("./107/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./107/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./107/cgroup") = 0 [pid 5007] umount2("./107/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./107/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./107/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./107") = 0 [pid 5007] mkdir("./108", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 326 ./strace-static-x86_64: Process 7087 attached [pid 7087] set_robust_list(0x5555571235e0, 24) = 0 [pid 7087] chdir("./108") = 0 [pid 7087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7087] setpgid(0, 0) = 0 [pid 7087] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7087] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7087] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7087] write(3, "1000", 4) = 4 [pid 7087] close(3) = 0 [pid 7087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7087] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7087] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7087] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[327], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 327 ./strace-static-x86_64: Process 7088 attached [pid 7088] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7088] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7088] memfd_create("syzkaller", 0 [pid 7087] <... futex resumed>) = 0 [pid 7088] <... memfd_create resumed>) = 3 [pid 7088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7087] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7088] <... mmap resumed>) = 0x7fd088ba7000 [pid 7088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7088] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7088] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7088] close(3) = 0 [pid 7088] mkdir("./file0", 0777) = 0 [ 156.317065][ T7088] loop0: detected capacity change from 0 to 32768 [ 156.327705][ T7088] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7088) [ 156.343151][ T7088] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 156.352153][ T7088] BTRFS info (device loop0): using free space tree [pid 7088] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7088] chdir("./file0") = 0 [pid 7088] ioctl(4, LOOP_CLR_FD) = 0 [pid 7088] close(4) = 0 [pid 7088] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7087] <... futex resumed>) = 0 [pid 7088] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7087] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... openat resumed>) = 4 [pid 7087] <... futex resumed>) = 0 [pid 7087] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7088] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7087] <... futex resumed>) = 0 [pid 7087] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7087] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7088] <... futex resumed>) = 1 [ 156.371929][ T7088] BTRFS info (device loop0): enabling ssd optimizations [ 156.379526][ T7088] BTRFS info (device loop0): auto enabling async discard [pid 7088] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7087] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7087] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7087] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7105 attached [pid 7105] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7105] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] <... clone resumed>, parent_tid=[328], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 328 [pid 7087] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7087] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7105] <... futex resumed>) = 0 [pid 7105] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7105] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7087] <... futex resumed>) = 0 [pid 7087] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7087] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7105] <... futex resumed>) = 1 [ 156.426416][ T7088] BTRFS info (device loop0): balance: start -s [ 156.436555][ T7088] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7105] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7105] <... ioctl resumed>) = 0 [pid 7105] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7088] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7088] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7088] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] close(3) = 0 [pid 7087] close(4) = 0 [pid 7087] close(5) = 0 [pid 7087] close(6) = -1 EBADF (Bad file descriptor) [pid 7087] close(7) = -1 EBADF (Bad file descriptor) [pid 7087] close(8) = -1 EBADF (Bad file descriptor) [pid 7087] close(9) = -1 EBADF (Bad file descriptor) [pid 7087] close(10) = -1 EBADF (Bad file descriptor) [pid 7087] close(11) = -1 EBADF (Bad file descriptor) [pid 7087] close(12) = -1 EBADF (Bad file descriptor) [pid 7087] close(13) = -1 EBADF (Bad file descriptor) [pid 7087] close(14) = -1 EBADF (Bad file descriptor) [pid 7087] close(15) = -1 EBADF (Bad file descriptor) [pid 7087] close(16) = -1 EBADF (Bad file descriptor) [pid 7087] close(17) = -1 EBADF (Bad file descriptor) [pid 7087] close(18) = -1 EBADF (Bad file descriptor) [pid 7087] close(19) = -1 EBADF (Bad file descriptor) [pid 7087] close(20) = -1 EBADF (Bad file descriptor) [pid 7087] close(21) = -1 EBADF (Bad file descriptor) [pid 7087] close(22) = -1 EBADF (Bad file descriptor) [pid 7087] close(23) = -1 EBADF (Bad file descriptor) [pid 7087] close(24) = -1 EBADF (Bad file descriptor) [pid 7087] close(25) = -1 EBADF (Bad file descriptor) [pid 7087] close(26) = -1 EBADF (Bad file descriptor) [pid 7087] close(27) = -1 EBADF (Bad file descriptor) [pid 7087] close(28) = -1 EBADF (Bad file descriptor) [pid 7087] close(29) = -1 EBADF (Bad file descriptor) [pid 7087] exit_group(0 [pid 7105] <... futex resumed>) = ? [pid 7087] <... exit_group resumed>) = ? [pid 7105] +++ exited with 0 +++ [pid 7088] <... futex resumed>) = ? [pid 7088] +++ exited with 0 +++ [pid 7087] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./108/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./108/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./108/cgroup.cpu") = 0 [pid 5007] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./108/binderfs") = 0 [ 156.603435][ T7088] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./108/file0") = 0 [pid 5007] umount2("./108/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./108/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./108/cgroup") = 0 [pid 5007] umount2("./108/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./108/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./108/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./108") = 0 [pid 5007] mkdir("./109", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 329 ./strace-static-x86_64: Process 7106 attached [pid 7106] set_robust_list(0x5555571235e0, 24) = 0 [pid 7106] chdir("./109") = 0 [pid 7106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7106] setpgid(0, 0) = 0 [pid 7106] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7106] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7106] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7106] write(3, "1000", 4) = 4 [pid 7106] close(3) = 0 [pid 7106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7106] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7106] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7106] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7107 attached [pid 7107] set_robust_list(0x7fd090fc79e0, 24 [pid 7106] <... clone resumed>, parent_tid=[330], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 330 [pid 7107] <... set_robust_list resumed>) = 0 [pid 7107] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7106] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] <... futex resumed>) = 0 [pid 7106] <... futex resumed>) = 1 [pid 7106] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7107] memfd_create("syzkaller", 0) = 3 [pid 7107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7107] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7107] close(3) = 0 [pid 7107] mkdir("./file0", 0777) = 0 [ 157.085569][ T7107] loop0: detected capacity change from 0 to 32768 [ 157.096661][ T7107] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7107) [ 157.113922][ T7107] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 157.122831][ T7107] BTRFS info (device loop0): using free space tree [pid 7107] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7107] chdir("./file0") = 0 [pid 7107] ioctl(4, LOOP_CLR_FD) = 0 [pid 7107] close(4) = 0 [pid 7107] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7106] <... futex resumed>) = 0 [pid 7107] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7106] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] <... openat resumed>) = 4 [pid 7106] <... futex resumed>) = 0 [pid 7107] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7107] <... futex resumed>) = 0 [pid 7106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7107] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7106] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 157.142399][ T7107] BTRFS info (device loop0): enabling ssd optimizations [ 157.149810][ T7107] BTRFS info (device loop0): auto enabling async discard [ 157.180545][ T7107] BTRFS info (device loop0): balance: start -s [pid 7106] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7106] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7106] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7106] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7124 attached , parent_tid=[331], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 331 [pid 7124] set_robust_list(0x7fd089ba69e0, 24 [pid 7106] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] <... set_robust_list resumed>) = 0 [pid 7124] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7124] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7106] <... futex resumed>) = 0 [pid 7124] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7106] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 157.189861][ T7107] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7106] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 157.246375][ T7107] BTRFS info (device loop0): balance: ended with status: 0 [pid 7107] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7107] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7107] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7124] <... ioctl resumed>) = 0 [pid 7124] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7124] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7106] close(3) = 0 [pid 7106] close(4) = 0 [pid 7106] close(5) = 0 [pid 7106] close(6) = -1 EBADF (Bad file descriptor) [pid 7106] close(7) = -1 EBADF (Bad file descriptor) [pid 7106] close(8) = -1 EBADF (Bad file descriptor) [pid 7106] close(9) = -1 EBADF (Bad file descriptor) [pid 7106] close(10) = -1 EBADF (Bad file descriptor) [pid 7106] close(11) = -1 EBADF (Bad file descriptor) [pid 7106] close(12) = -1 EBADF (Bad file descriptor) [pid 7106] close(13) = -1 EBADF (Bad file descriptor) [pid 7106] close(14) = -1 EBADF (Bad file descriptor) [pid 7106] close(15) = -1 EBADF (Bad file descriptor) [pid 7106] close(16) = -1 EBADF (Bad file descriptor) [pid 7106] close(17) = -1 EBADF (Bad file descriptor) [pid 7106] close(18) = -1 EBADF (Bad file descriptor) [pid 7106] close(19) = -1 EBADF (Bad file descriptor) [pid 7106] close(20) = -1 EBADF (Bad file descriptor) [pid 7106] close(21) = -1 EBADF (Bad file descriptor) [pid 7106] close(22) = -1 EBADF (Bad file descriptor) [pid 7106] close(23) = -1 EBADF (Bad file descriptor) [pid 7106] close(24) = -1 EBADF (Bad file descriptor) [pid 7106] close(25) = -1 EBADF (Bad file descriptor) [pid 7106] close(26) = -1 EBADF (Bad file descriptor) [pid 7106] close(27) = -1 EBADF (Bad file descriptor) [pid 7106] close(28) = -1 EBADF (Bad file descriptor) [pid 7106] close(29) = -1 EBADF (Bad file descriptor) [pid 7106] exit_group(0 [pid 7124] <... futex resumed>) = ? [pid 7107] <... futex resumed>) = ? [pid 7106] <... exit_group resumed>) = ? [pid 7124] +++ exited with 0 +++ [pid 7107] +++ exited with 0 +++ [pid 7106] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./109/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./109/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./109/cgroup.cpu") = 0 [pid 5007] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./109/binderfs") = 0 [pid 5007] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./109/file0") = 0 [pid 5007] umount2("./109/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./109/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./109/cgroup") = 0 [pid 5007] umount2("./109/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./109/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./109/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./109") = 0 [pid 5007] mkdir("./110", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 332 ./strace-static-x86_64: Process 7125 attached [pid 7125] set_robust_list(0x5555571235e0, 24) = 0 [pid 7125] chdir("./110") = 0 [pid 7125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7125] setpgid(0, 0) = 0 [pid 7125] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7125] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7125] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7125] write(3, "1000", 4) = 4 [pid 7125] close(3) = 0 [pid 7125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7125] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7125] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7125] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[333], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 333 [pid 7125] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7126 attached [pid 7126] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7126] memfd_create("syzkaller", 0) = 3 [pid 7126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7126] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7126] close(3) = 0 [pid 7126] mkdir("./file0", 0777) = 0 [ 157.765047][ T7126] loop0: detected capacity change from 0 to 32768 [ 157.774506][ T7126] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7126) [ 157.791386][ T7126] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 157.800184][ T7126] BTRFS info (device loop0): using free space tree [pid 7126] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7126] chdir("./file0") = 0 [pid 7126] ioctl(4, LOOP_CLR_FD) = 0 [pid 7126] close(4) = 0 [pid 7126] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7125] <... futex resumed>) = 0 [pid 7125] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7126] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7126] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7125] <... futex resumed>) = 0 [pid 7125] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 7125] <... futex resumed>) = 1 [pid 7126] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 157.820106][ T7126] BTRFS info (device loop0): enabling ssd optimizations [ 157.827323][ T7126] BTRFS info (device loop0): auto enabling async discard [pid 7125] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7125] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7125] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7125] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[334], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 334 [pid 7125] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7143 attached [ 157.868657][ T7126] BTRFS info (device loop0): balance: start -s [ 157.884032][ T7126] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7143] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7143] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7143] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7125] <... futex resumed>) = 0 [pid 7143] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7125] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7125] <... futex resumed>) = 0 [pid 7143] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 157.918844][ T7126] BTRFS info (device loop0): balance: ended with status: 0 [pid 7125] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7143] <... ioctl resumed>) = 0 [pid 7143] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7143] <... futex resumed>) = 0 [pid 7126] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7125] close(3) = 0 [pid 7125] close(4) = 0 [pid 7125] close(5) = 0 [pid 7125] close(6) = -1 EBADF (Bad file descriptor) [pid 7125] close(7) = -1 EBADF (Bad file descriptor) [pid 7125] close(8) = -1 EBADF (Bad file descriptor) [pid 7125] close(9) = -1 EBADF (Bad file descriptor) [pid 7125] close(10) = -1 EBADF (Bad file descriptor) [pid 7125] close(11) = -1 EBADF (Bad file descriptor) [pid 7125] close(12) = -1 EBADF (Bad file descriptor) [pid 7125] close(13) = -1 EBADF (Bad file descriptor) [pid 7125] close(14) = -1 EBADF (Bad file descriptor) [pid 7125] close(15) = -1 EBADF (Bad file descriptor) [pid 7125] close(16) = -1 EBADF (Bad file descriptor) [pid 7125] close(17) = -1 EBADF (Bad file descriptor) [pid 7125] close(18) = -1 EBADF (Bad file descriptor) [pid 7125] close(19) = -1 EBADF (Bad file descriptor) [pid 7125] close(20) = -1 EBADF (Bad file descriptor) [pid 7125] close(21) = -1 EBADF (Bad file descriptor) [pid 7125] close(22) = -1 EBADF (Bad file descriptor) [pid 7125] close(23) = -1 EBADF (Bad file descriptor) [pid 7125] close(24) = -1 EBADF (Bad file descriptor) [pid 7125] close(25) = -1 EBADF (Bad file descriptor) [pid 7125] close(26) = -1 EBADF (Bad file descriptor) [pid 7125] close(27) = -1 EBADF (Bad file descriptor) [pid 7125] close(28) = -1 EBADF (Bad file descriptor) [pid 7125] close(29) = -1 EBADF (Bad file descriptor) [pid 7125] exit_group(0 [pid 7143] <... futex resumed>) = ? [pid 7126] <... futex resumed>) = ? [pid 7125] <... exit_group resumed>) = ? [pid 7143] +++ exited with 0 +++ [pid 7126] +++ exited with 0 +++ [pid 7125] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./110/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./110/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./110/cgroup.cpu") = 0 [pid 5007] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./110/binderfs") = 0 [pid 5007] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./110/file0") = 0 [pid 5007] umount2("./110/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./110/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./110/cgroup") = 0 [pid 5007] umount2("./110/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./110/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./110/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./110") = 0 [pid 5007] mkdir("./111", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7144 attached [pid 7144] set_robust_list(0x5555571235e0, 24) = 0 [pid 7144] chdir("./111") = 0 [pid 7144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7144] setpgid(0, 0) = 0 [pid 7144] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 335 [pid 7144] <... symlink resumed>) = 0 [pid 7144] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7144] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7144] write(3, "1000", 4) = 4 [pid 7144] close(3) = 0 [pid 7144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7144] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7144] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7144] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[336], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 336 [pid 7144] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7145 attached [pid 7145] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7145] memfd_create("syzkaller", 0) = 3 [pid 7145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7145] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7145] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7145] close(3) = 0 [pid 7145] mkdir("./file0", 0777) = 0 [ 158.434637][ T7145] loop0: detected capacity change from 0 to 32768 [ 158.446090][ T7145] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7145) [ 158.463012][ T7145] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 158.471889][ T7145] BTRFS info (device loop0): using free space tree [pid 7145] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7145] chdir("./file0") = 0 [pid 7145] ioctl(4, LOOP_CLR_FD) = 0 [pid 7145] close(4) = 0 [pid 7145] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] <... futex resumed>) = 0 [pid 7144] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] <... futex resumed>) = 1 [pid 7144] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7145] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7145] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] <... futex resumed>) = 0 [pid 7144] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7145] <... futex resumed>) = 1 [ 158.492488][ T7145] BTRFS info (device loop0): enabling ssd optimizations [ 158.499759][ T7145] BTRFS info (device loop0): auto enabling async discard [pid 7145] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7144] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7144] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [ 158.536858][ T7145] BTRFS info (device loop0): balance: start -s [ 158.547700][ T7145] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7144] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[337], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 337 [pid 7144] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7162 attached [pid 7162] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7162] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7162] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7162] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7144] <... futex resumed>) = 0 [pid 7144] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7162] <... futex resumed>) = 0 [pid 7144] <... futex resumed>) = 1 [pid 7162] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7144] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7145] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7145] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 158.578332][ T7145] BTRFS info (device loop0): balance: ended with status: 0 [pid 7145] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7162] <... ioctl resumed>) = 0 [pid 7162] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] close(3 [pid 7162] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7144] <... close resumed>) = 0 [pid 7144] close(4) = 0 [pid 7144] close(5) = 0 [pid 7144] close(6) = -1 EBADF (Bad file descriptor) [pid 7144] close(7) = -1 EBADF (Bad file descriptor) [pid 7144] close(8) = -1 EBADF (Bad file descriptor) [pid 7144] close(9) = -1 EBADF (Bad file descriptor) [pid 7144] close(10) = -1 EBADF (Bad file descriptor) [pid 7144] close(11) = -1 EBADF (Bad file descriptor) [pid 7144] close(12) = -1 EBADF (Bad file descriptor) [pid 7144] close(13) = -1 EBADF (Bad file descriptor) [pid 7144] close(14) = -1 EBADF (Bad file descriptor) [pid 7144] close(15) = -1 EBADF (Bad file descriptor) [pid 7144] close(16) = -1 EBADF (Bad file descriptor) [pid 7144] close(17) = -1 EBADF (Bad file descriptor) [pid 7144] close(18) = -1 EBADF (Bad file descriptor) [pid 7144] close(19) = -1 EBADF (Bad file descriptor) [pid 7144] close(20) = -1 EBADF (Bad file descriptor) [pid 7144] close(21) = -1 EBADF (Bad file descriptor) [pid 7144] close(22) = -1 EBADF (Bad file descriptor) [pid 7144] close(23) = -1 EBADF (Bad file descriptor) [pid 7144] close(24) = -1 EBADF (Bad file descriptor) [pid 7144] close(25) = -1 EBADF (Bad file descriptor) [pid 7144] close(26) = -1 EBADF (Bad file descriptor) [pid 7144] close(27) = -1 EBADF (Bad file descriptor) [pid 7144] close(28) = -1 EBADF (Bad file descriptor) [pid 7144] close(29) = -1 EBADF (Bad file descriptor) [pid 7144] exit_group(0 [pid 7162] <... futex resumed>) = ? [pid 7145] <... futex resumed>) = ? [pid 7144] <... exit_group resumed>) = ? [pid 7162] +++ exited with 0 +++ [pid 7145] +++ exited with 0 +++ [pid 7144] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./111/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./111/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./111/cgroup.cpu") = 0 [pid 5007] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./111/binderfs") = 0 [pid 5007] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./111/file0") = 0 [pid 5007] umount2("./111/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./111/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./111/cgroup") = 0 [pid 5007] umount2("./111/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./111/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./111/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./111") = 0 [pid 5007] mkdir("./112", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 338 ./strace-static-x86_64: Process 7163 attached [pid 7163] set_robust_list(0x5555571235e0, 24) = 0 [pid 7163] chdir("./112") = 0 [pid 7163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7163] setpgid(0, 0) = 0 [pid 7163] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7163] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7163] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7163] write(3, "1000", 4) = 4 [pid 7163] close(3) = 0 [pid 7163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7163] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7163] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7163] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[339], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 339 [pid 7163] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7164 attached [pid 7164] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7164] memfd_create("syzkaller", 0) = 3 [pid 7164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7164] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7164] close(3) = 0 [pid 7164] mkdir("./file0", 0777) = 0 [ 159.072392][ T7164] loop0: detected capacity change from 0 to 32768 [ 159.083505][ T7164] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7164) [ 159.099154][ T7164] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.107970][ T7164] BTRFS info (device loop0): using free space tree [pid 7164] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7164] chdir("./file0") = 0 [pid 7164] ioctl(4, LOOP_CLR_FD) = 0 [pid 7164] close(4) = 0 [pid 7164] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7163] <... futex resumed>) = 0 [pid 7164] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [ 159.131521][ T7164] BTRFS info (device loop0): enabling ssd optimizations [ 159.138847][ T7164] BTRFS info (device loop0): auto enabling async discard [pid 7163] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... openat resumed>) = 4 [pid 7163] <... futex resumed>) = 0 [pid 7164] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7163] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7164] <... futex resumed>) = 0 [pid 7163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7164] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7163] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7163] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7163] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [ 159.179024][ T7164] BTRFS info (device loop0): balance: start -s [ 159.189560][ T7164] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7163] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7163] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[340], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 340 [pid 7163] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7181 attached [pid 7181] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7181] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7181] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7181] <... futex resumed>) = 1 [pid 7163] <... futex resumed>) = 0 [pid 7181] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7164] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7163] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... futex resumed>) = 0 [pid 7163] <... futex resumed>) = 0 [pid 7164] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 159.220328][ T7164] BTRFS info (device loop0): balance: ended with status: 0 [pid 7163] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7164] <... ioctl resumed>) = 0 [pid 7164] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7163] close(3) = 0 [pid 7163] close(4) = 0 [pid 7163] close(5) = 0 [pid 7163] close(6) = -1 EBADF (Bad file descriptor) [pid 7163] close(7) = -1 EBADF (Bad file descriptor) [pid 7163] close(8) = -1 EBADF (Bad file descriptor) [pid 7163] close(9) = -1 EBADF (Bad file descriptor) [pid 7163] close(10) = -1 EBADF (Bad file descriptor) [pid 7163] close(11) = -1 EBADF (Bad file descriptor) [pid 7163] close(12) = -1 EBADF (Bad file descriptor) [pid 7163] close(13) = -1 EBADF (Bad file descriptor) [pid 7163] close(14) = -1 EBADF (Bad file descriptor) [pid 7163] close(15) = -1 EBADF (Bad file descriptor) [pid 7163] close(16) = -1 EBADF (Bad file descriptor) [pid 7163] close(17) = -1 EBADF (Bad file descriptor) [pid 7163] close(18) = -1 EBADF (Bad file descriptor) [pid 7163] close(19) = -1 EBADF (Bad file descriptor) [pid 7163] close(20) = -1 EBADF (Bad file descriptor) [pid 7163] close(21) = -1 EBADF (Bad file descriptor) [pid 7163] close(22) = -1 EBADF (Bad file descriptor) [pid 7163] close(23) = -1 EBADF (Bad file descriptor) [pid 7163] close(24) = -1 EBADF (Bad file descriptor) [pid 7163] close(25) = -1 EBADF (Bad file descriptor) [pid 7163] close(26) = -1 EBADF (Bad file descriptor) [pid 7163] close(27) = -1 EBADF (Bad file descriptor) [pid 7163] close(28) = -1 EBADF (Bad file descriptor) [pid 7163] close(29) = -1 EBADF (Bad file descriptor) [pid 7163] exit_group(0 [pid 7181] <... futex resumed>) = ? [pid 7164] <... futex resumed>) = ? [pid 7163] <... exit_group resumed>) = ? [pid 7181] +++ exited with 0 +++ [pid 7164] +++ exited with 0 +++ [pid 7163] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./112/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./112/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./112/cgroup.cpu") = 0 [pid 5007] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./112/binderfs") = 0 [pid 5007] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./112/file0") = 0 [pid 5007] umount2("./112/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./112/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./112/cgroup") = 0 [pid 5007] umount2("./112/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./112/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./112/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./112") = 0 [pid 5007] mkdir("./113", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 341 ./strace-static-x86_64: Process 7182 attached [pid 7182] set_robust_list(0x5555571235e0, 24) = 0 [pid 7182] chdir("./113") = 0 [pid 7182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7182] setpgid(0, 0) = 0 [pid 7182] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7182] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7182] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7182] write(3, "1000", 4) = 4 [pid 7182] close(3) = 0 [pid 7182] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7182] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7182] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7182] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7183 attached [pid 7183] set_robust_list(0x7fd090fc79e0, 24 [pid 7182] <... clone resumed>, parent_tid=[342], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 342 [pid 7183] <... set_robust_list resumed>) = 0 [pid 7182] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] memfd_create("syzkaller", 0 [pid 7182] <... futex resumed>) = 0 [pid 7183] <... memfd_create resumed>) = 3 [pid 7182] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7183] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7183] close(3) = 0 [pid 7183] mkdir("./file0", 0777) = 0 [ 159.741889][ T7183] loop0: detected capacity change from 0 to 32768 [ 159.754090][ T7183] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7183) [ 159.770905][ T7183] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.779777][ T7183] BTRFS info (device loop0): using free space tree [pid 7183] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7183] chdir("./file0") = 0 [pid 7183] ioctl(4, LOOP_CLR_FD) = 0 [pid 7183] close(4) = 0 [pid 7183] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7183] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7182] <... futex resumed>) = 0 [pid 7182] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] <... futex resumed>) = 0 [pid 7182] <... futex resumed>) = 1 [pid 7183] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7182] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7183] <... openat resumed>) = 4 [pid 7183] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7182] <... futex resumed>) = 0 [pid 7183] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7182] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 159.800731][ T7183] BTRFS info (device loop0): enabling ssd optimizations [ 159.807870][ T7183] BTRFS info (device loop0): auto enabling async discard [pid 7182] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7182] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7182] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7182] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7200 attached [pid 7200] set_robust_list(0x7fd089ba69e0, 24 [pid 7182] <... clone resumed>, parent_tid=[343], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 343 [pid 7200] <... set_robust_list resumed>) = 0 [pid 7182] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7200] openat(AT_FDCWD, ".", O_RDONLY [pid 7182] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7200] <... openat resumed>) = 5 [pid 7200] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7182] <... futex resumed>) = 0 [pid 7200] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7183] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7182] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7182] <... futex resumed>) = 0 [pid 7183] <... futex resumed>) = 0 [pid 7182] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 159.862368][ T7183] BTRFS info (device loop0): balance: start -s [ 159.871068][ T7183] BTRFS info (device loop0): relocating block group 1048576 flags system [ 159.901851][ T7183] BTRFS info (device loop0): balance: ended with status: 0 [pid 7183] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7182] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7200] <... ioctl resumed>) = 0 [pid 7200] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7182] close(3) = 0 [pid 7182] close(4) = 0 [pid 7182] close(5) = 0 [pid 7182] close(6) = -1 EBADF (Bad file descriptor) [pid 7182] close(7) = -1 EBADF (Bad file descriptor) [pid 7182] close(8) = -1 EBADF (Bad file descriptor) [pid 7182] close(9) = -1 EBADF (Bad file descriptor) [pid 7182] close(10) = -1 EBADF (Bad file descriptor) [pid 7182] close(11) = -1 EBADF (Bad file descriptor) [pid 7182] close(12) = -1 EBADF (Bad file descriptor) [pid 7182] close(13) = -1 EBADF (Bad file descriptor) [pid 7182] close(14) = -1 EBADF (Bad file descriptor) [pid 7182] close(15) = -1 EBADF (Bad file descriptor) [pid 7182] close(16) = -1 EBADF (Bad file descriptor) [pid 7182] close(17) = -1 EBADF (Bad file descriptor) [pid 7182] close(18) = -1 EBADF (Bad file descriptor) [pid 7182] close(19) = -1 EBADF (Bad file descriptor) [pid 7182] close(20) = -1 EBADF (Bad file descriptor) [pid 7182] close(21) = -1 EBADF (Bad file descriptor) [pid 7182] close(22) = -1 EBADF (Bad file descriptor) [pid 7182] close(23) = -1 EBADF (Bad file descriptor) [pid 7182] close(24) = -1 EBADF (Bad file descriptor) [pid 7182] close(25) = -1 EBADF (Bad file descriptor) [pid 7182] close(26) = -1 EBADF (Bad file descriptor) [pid 7182] close(27) = -1 EBADF (Bad file descriptor) [pid 7182] close(28) = -1 EBADF (Bad file descriptor) [pid 7182] close(29) = -1 EBADF (Bad file descriptor) [pid 7182] exit_group(0 [pid 7183] <... futex resumed>) = ? [pid 7182] <... exit_group resumed>) = ? [pid 7183] +++ exited with 0 +++ [pid 7200] <... futex resumed>) = ? [pid 7200] +++ exited with 0 +++ [pid 7182] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./113/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./113/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./113/cgroup.cpu") = 0 [pid 5007] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./113/binderfs") = 0 [pid 5007] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./113/file0") = 0 [pid 5007] umount2("./113/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./113/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./113/cgroup") = 0 [pid 5007] umount2("./113/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./113/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./113/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./113") = 0 [pid 5007] mkdir("./114", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 344 ./strace-static-x86_64: Process 7201 attached [pid 7201] set_robust_list(0x5555571235e0, 24) = 0 [pid 7201] chdir("./114") = 0 [pid 7201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7201] setpgid(0, 0) = 0 [pid 7201] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7201] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7201] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7201] write(3, "1000", 4) = 4 [pid 7201] close(3) = 0 [pid 7201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7201] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7201] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7201] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7202 attached , parent_tid=[345], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 345 [pid 7202] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7202] memfd_create("syzkaller", 0 [pid 7201] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... memfd_create resumed>) = 3 [pid 7201] <... futex resumed>) = 0 [pid 7202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7201] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7202] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7202] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7202] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7202] close(3) = 0 [pid 7202] mkdir("./file0", 0777) = 0 [ 160.448922][ T7202] loop0: detected capacity change from 0 to 32768 [ 160.459846][ T7202] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7202) [ 160.477866][ T7202] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 160.486787][ T7202] BTRFS info (device loop0): using free space tree [pid 7202] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7202] chdir("./file0") = 0 [pid 7202] ioctl(4, LOOP_CLR_FD) = 0 [pid 7202] close(4) = 0 [pid 7202] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7201] <... futex resumed>) = 0 [pid 7202] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7201] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7201] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7202] <... openat resumed>) = 4 [pid 7202] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] <... futex resumed>) = 0 [pid 7202] <... futex resumed>) = 1 [pid 7202] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7201] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 160.506507][ T7202] BTRFS info (device loop0): enabling ssd optimizations [ 160.513540][ T7202] BTRFS info (device loop0): auto enabling async discard [pid 7201] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7201] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7201] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7201] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7219 attached [pid 7219] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7219] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] <... clone resumed>, parent_tid=[346], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 346 [pid 7201] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7219] <... futex resumed>) = 0 [pid 7201] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7219] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7219] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7201] <... futex resumed>) = 0 [pid 7219] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7201] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 160.566565][ T7202] BTRFS info (device loop0): balance: start -s [ 160.576073][ T7202] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7201] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 160.650494][ T7202] BTRFS info (device loop0): balance: ended with status: 0 [pid 7219] <... ioctl resumed>) = 0 [pid 7219] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7219] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7202] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7201] close(3 [pid 7202] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7201] <... close resumed>) = 0 [pid 7201] close(4) = 0 [pid 7201] close(5) = 0 [pid 7201] close(6) = -1 EBADF (Bad file descriptor) [pid 7201] close(7) = -1 EBADF (Bad file descriptor) [pid 7201] close(8) = -1 EBADF (Bad file descriptor) [pid 7201] close(9) = -1 EBADF (Bad file descriptor) [pid 7201] close(10) = -1 EBADF (Bad file descriptor) [pid 7201] close(11) = -1 EBADF (Bad file descriptor) [pid 7201] close(12) = -1 EBADF (Bad file descriptor) [pid 7201] close(13) = -1 EBADF (Bad file descriptor) [pid 7201] close(14) = -1 EBADF (Bad file descriptor) [pid 7201] close(15) = -1 EBADF (Bad file descriptor) [pid 7201] close(16) = -1 EBADF (Bad file descriptor) [pid 7201] close(17) = -1 EBADF (Bad file descriptor) [pid 7201] close(18) = -1 EBADF (Bad file descriptor) [pid 7201] close(19) = -1 EBADF (Bad file descriptor) [pid 7201] close(20) = -1 EBADF (Bad file descriptor) [pid 7201] close(21) = -1 EBADF (Bad file descriptor) [pid 7201] close(22) = -1 EBADF (Bad file descriptor) [pid 7201] close(23) = -1 EBADF (Bad file descriptor) [pid 7201] close(24) = -1 EBADF (Bad file descriptor) [pid 7201] close(25) = -1 EBADF (Bad file descriptor) [pid 7201] close(26) = -1 EBADF (Bad file descriptor) [pid 7201] close(27) = -1 EBADF (Bad file descriptor) [pid 7201] close(28) = -1 EBADF (Bad file descriptor) [pid 7201] close(29) = -1 EBADF (Bad file descriptor) [pid 7201] exit_group(0 [pid 7219] <... futex resumed>) = ? [pid 7202] <... futex resumed>) = ? [pid 7201] <... exit_group resumed>) = ? [pid 7219] +++ exited with 0 +++ [pid 7202] +++ exited with 0 +++ [pid 7201] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./114/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./114/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./114/cgroup.cpu") = 0 [pid 5007] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./114/binderfs") = 0 [pid 5007] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./114/file0") = 0 [pid 5007] umount2("./114/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./114/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./114/cgroup") = 0 [pid 5007] umount2("./114/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./114/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./114/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./114") = 0 [pid 5007] mkdir("./115", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 347 ./strace-static-x86_64: Process 7220 attached [pid 7220] set_robust_list(0x5555571235e0, 24) = 0 [pid 7220] chdir("./115") = 0 [pid 7220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7220] setpgid(0, 0) = 0 [pid 7220] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7220] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7220] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7220] write(3, "1000", 4) = 4 [pid 7220] close(3) = 0 [pid 7220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7220] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7220] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7220] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7221 attached , parent_tid=[348], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 348 [pid 7221] set_robust_list(0x7fd090fc79e0, 24 [pid 7220] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] <... set_robust_list resumed>) = 0 [pid 7220] <... futex resumed>) = 0 [pid 7220] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7221] memfd_create("syzkaller", 0) = 3 [pid 7221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7221] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7221] close(3) = 0 [pid 7221] mkdir("./file0", 0777) = 0 [ 161.135564][ T7221] loop0: detected capacity change from 0 to 32768 [ 161.145154][ T7221] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7221) [ 161.160402][ T7221] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 161.169251][ T7221] BTRFS info (device loop0): using free space tree [pid 7221] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7221] chdir("./file0") = 0 [pid 7221] ioctl(4, LOOP_CLR_FD) = 0 [pid 7221] close(4) = 0 [pid 7221] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7220] <... futex resumed>) = 0 [pid 7221] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7220] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] <... openat resumed>) = 4 [pid 7220] <... futex resumed>) = 0 [pid 7221] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7221] <... futex resumed>) = 0 [pid 7220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7221] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7220] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 161.190725][ T7221] BTRFS info (device loop0): enabling ssd optimizations [ 161.197819][ T7221] BTRFS info (device loop0): auto enabling async discard [pid 7220] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7220] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7220] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7220] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7220] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[349], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 349 [pid 7220] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7238 attached [pid 7238] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7238] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7238] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] <... futex resumed>) = 0 [pid 7220] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7238] <... futex resumed>) = 1 [ 161.232190][ T7221] BTRFS info (device loop0): balance: start -s [ 161.251590][ T7221] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7238] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7221] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7221] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 161.323671][ T7221] BTRFS info (device loop0): balance: ended with status: 0 [pid 7221] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7238] <... ioctl resumed>) = 0 [pid 7238] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7220] close(3) = 0 [pid 7220] close(4) = 0 [pid 7220] close(5) = 0 [pid 7220] close(6) = -1 EBADF (Bad file descriptor) [pid 7220] close(7) = -1 EBADF (Bad file descriptor) [pid 7220] close(8) = -1 EBADF (Bad file descriptor) [pid 7220] close(9) = -1 EBADF (Bad file descriptor) [pid 7220] close(10) = -1 EBADF (Bad file descriptor) [pid 7220] close(11) = -1 EBADF (Bad file descriptor) [pid 7220] close(12) = -1 EBADF (Bad file descriptor) [pid 7220] close(13) = -1 EBADF (Bad file descriptor) [pid 7220] close(14) = -1 EBADF (Bad file descriptor) [pid 7220] close(15) = -1 EBADF (Bad file descriptor) [pid 7220] close(16) = -1 EBADF (Bad file descriptor) [pid 7220] close(17) = -1 EBADF (Bad file descriptor) [pid 7220] close(18) = -1 EBADF (Bad file descriptor) [pid 7220] close(19) = -1 EBADF (Bad file descriptor) [pid 7220] close(20) = -1 EBADF (Bad file descriptor) [pid 7220] close(21) = -1 EBADF (Bad file descriptor) [pid 7220] close(22) = -1 EBADF (Bad file descriptor) [pid 7220] close(23) = -1 EBADF (Bad file descriptor) [pid 7220] close(24) = -1 EBADF (Bad file descriptor) [pid 7220] close(25) = -1 EBADF (Bad file descriptor) [pid 7220] close(26) = -1 EBADF (Bad file descriptor) [pid 7220] close(27) = -1 EBADF (Bad file descriptor) [pid 7220] close(28) = -1 EBADF (Bad file descriptor) [pid 7220] close(29) = -1 EBADF (Bad file descriptor) [pid 7220] exit_group(0 [pid 7238] <... futex resumed>) = ? [pid 7221] <... futex resumed>) = ? [pid 7220] <... exit_group resumed>) = ? [pid 7238] +++ exited with 0 +++ [pid 7221] +++ exited with 0 +++ [pid 7220] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./115/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./115/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./115/cgroup.cpu") = 0 [pid 5007] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./115/binderfs") = 0 [pid 5007] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./115/file0") = 0 [pid 5007] umount2("./115/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./115/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./115/cgroup") = 0 [pid 5007] umount2("./115/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./115/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./115/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./115") = 0 [pid 5007] mkdir("./116", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7239 attached [pid 7239] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 350 [pid 7239] <... set_robust_list resumed>) = 0 [pid 7239] chdir("./116") = 0 [pid 7239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7239] setpgid(0, 0) = 0 [pid 7239] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7239] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7239] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7239] write(3, "1000", 4) = 4 [pid 7239] close(3) = 0 [pid 7239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7239] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7239] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7239] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7240 attached [pid 7240] set_robust_list(0x7fd090fc79e0, 24 [pid 7239] <... clone resumed>, parent_tid=[351], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 351 [pid 7240] <... set_robust_list resumed>) = 0 [pid 7239] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7239] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7240] memfd_create("syzkaller", 0) = 3 [pid 7240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7240] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7240] close(3) = 0 [pid 7240] mkdir("./file0", 0777) = 0 [ 161.811976][ T7240] loop0: detected capacity change from 0 to 32768 [ 161.823037][ T7240] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7240) [ 161.838557][ T7240] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 161.847462][ T7240] BTRFS info (device loop0): using free space tree [pid 7240] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7240] chdir("./file0") = 0 [pid 7240] ioctl(4, LOOP_CLR_FD) = 0 [pid 7240] close(4) = 0 [pid 7240] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7239] <... futex resumed>) = 0 [pid 7240] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7239] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7240] <... openat resumed>) = 4 [pid 7239] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] <... futex resumed>) = 0 [pid 7239] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7239] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] <... futex resumed>) = 1 [ 161.868137][ T7240] BTRFS info (device loop0): enabling ssd optimizations [ 161.875663][ T7240] BTRFS info (device loop0): auto enabling async discard [pid 7240] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7239] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7239] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 161.914572][ T7240] BTRFS info (device loop0): balance: start -s [ 161.923596][ T7240] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7239] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7239] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7257 attached [pid 7257] set_robust_list(0x7fd089ba69e0, 24 [pid 7239] <... clone resumed>, parent_tid=[352], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 352 [pid 7257] <... set_robust_list resumed>) = 0 [pid 7239] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] openat(AT_FDCWD, ".", O_RDONLY [pid 7239] <... futex resumed>) = 0 [pid 7257] <... openat resumed>) = 5 [pid 7239] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7257] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7239] <... futex resumed>) = 0 [pid 7257] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7239] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7239] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7240] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 161.956780][ T7240] BTRFS info (device loop0): balance: ended with status: 0 [pid 7240] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7257] <... ioctl resumed>) = 0 [pid 7257] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7239] close(3 [pid 7257] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7239] <... close resumed>) = 0 [pid 7239] close(4) = 0 [pid 7239] close(5) = 0 [pid 7239] close(6) = -1 EBADF (Bad file descriptor) [pid 7239] close(7) = -1 EBADF (Bad file descriptor) [pid 7239] close(8) = -1 EBADF (Bad file descriptor) [pid 7239] close(9) = -1 EBADF (Bad file descriptor) [pid 7239] close(10) = -1 EBADF (Bad file descriptor) [pid 7239] close(11) = -1 EBADF (Bad file descriptor) [pid 7239] close(12) = -1 EBADF (Bad file descriptor) [pid 7239] close(13) = -1 EBADF (Bad file descriptor) [pid 7239] close(14) = -1 EBADF (Bad file descriptor) [pid 7239] close(15) = -1 EBADF (Bad file descriptor) [pid 7239] close(16) = -1 EBADF (Bad file descriptor) [pid 7239] close(17) = -1 EBADF (Bad file descriptor) [pid 7239] close(18) = -1 EBADF (Bad file descriptor) [pid 7239] close(19) = -1 EBADF (Bad file descriptor) [pid 7239] close(20) = -1 EBADF (Bad file descriptor) [pid 7239] close(21) = -1 EBADF (Bad file descriptor) [pid 7239] close(22) = -1 EBADF (Bad file descriptor) [pid 7239] close(23) = -1 EBADF (Bad file descriptor) [pid 7239] close(24) = -1 EBADF (Bad file descriptor) [pid 7239] close(25) = -1 EBADF (Bad file descriptor) [pid 7239] close(26) = -1 EBADF (Bad file descriptor) [pid 7239] close(27) = -1 EBADF (Bad file descriptor) [pid 7239] close(28) = -1 EBADF (Bad file descriptor) [pid 7239] close(29) = -1 EBADF (Bad file descriptor) [pid 7239] exit_group(0 [pid 7257] <... futex resumed>) = ? [pid 7240] <... futex resumed>) = ? [pid 7239] <... exit_group resumed>) = ? [pid 7257] +++ exited with 0 +++ [pid 7240] +++ exited with 0 +++ [pid 7239] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./116/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./116/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./116/cgroup.cpu") = 0 [pid 5007] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./116/binderfs") = 0 [pid 5007] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./116/file0") = 0 [pid 5007] umount2("./116/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./116/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./116/cgroup") = 0 [pid 5007] umount2("./116/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./116/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./116/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./116") = 0 [pid 5007] mkdir("./117", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7258 attached [pid 7258] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 353 [pid 7258] chdir("./117") = 0 [pid 7258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7258] setpgid(0, 0) = 0 [pid 7258] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7258] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7258] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7258] write(3, "1000", 4) = 4 [pid 7258] close(3) = 0 [pid 7258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7258] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7258] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7258] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[354], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 354 ./strace-static-x86_64: Process 7259 attached [pid 7258] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7258] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7259] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7259] memfd_create("syzkaller", 0) = 3 [pid 7259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7259] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7259] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7259] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7259] close(3) = 0 [pid 7259] mkdir("./file0", 0777) = 0 [ 162.484287][ T7259] loop0: detected capacity change from 0 to 32768 [ 162.494614][ T7259] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7259) [ 162.510490][ T7259] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 162.519324][ T7259] BTRFS info (device loop0): using free space tree [pid 7259] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7259] chdir("./file0") = 0 [pid 7259] ioctl(4, LOOP_CLR_FD) = 0 [pid 7259] close(4) = 0 [pid 7259] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7258] <... futex resumed>) = 0 [pid 7259] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7258] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] <... openat resumed>) = 4 [pid 7258] <... futex resumed>) = 0 [pid 7259] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7259] <... futex resumed>) = 0 [pid 7258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7259] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7258] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 162.539101][ T7259] BTRFS info (device loop0): enabling ssd optimizations [ 162.546409][ T7259] BTRFS info (device loop0): auto enabling async discard [ 162.575770][ T7259] BTRFS info (device loop0): balance: start -s [pid 7258] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7258] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7258] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7258] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[355], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 355 [pid 7258] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7258] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7276 attached [pid 7276] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7276] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7276] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] <... futex resumed>) = 0 [pid 7258] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7258] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] <... futex resumed>) = 1 [ 162.588455][ T7259] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7276] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 162.653355][ T7259] BTRFS info (device loop0): balance: ended with status: 0 [pid 7259] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7259] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] <... ioctl resumed>) = 0 [pid 7259] <... futex resumed>) = 0 [pid 7259] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7276] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] close(3) = 0 [pid 7258] close(4) = 0 [pid 7258] close(5) = 0 [pid 7258] close(6) = -1 EBADF (Bad file descriptor) [pid 7258] close(7) = -1 EBADF (Bad file descriptor) [pid 7258] close(8) = -1 EBADF (Bad file descriptor) [pid 7258] close(9) = -1 EBADF (Bad file descriptor) [pid 7276] <... futex resumed>) = 0 [pid 7258] close(10) = -1 EBADF (Bad file descriptor) [pid 7258] close(11) = -1 EBADF (Bad file descriptor) [pid 7258] close(12) = -1 EBADF (Bad file descriptor) [pid 7258] close(13) = -1 EBADF (Bad file descriptor) [pid 7258] close(14) = -1 EBADF (Bad file descriptor) [pid 7258] close(15) = -1 EBADF (Bad file descriptor) [pid 7258] close(16) = -1 EBADF (Bad file descriptor) [pid 7258] close(17) = -1 EBADF (Bad file descriptor) [pid 7258] close(18) = -1 EBADF (Bad file descriptor) [pid 7258] close(19) = -1 EBADF (Bad file descriptor) [pid 7258] close(20) = -1 EBADF (Bad file descriptor) [pid 7258] close(21) = -1 EBADF (Bad file descriptor) [pid 7258] close(22) = -1 EBADF (Bad file descriptor) [pid 7258] close(23) = -1 EBADF (Bad file descriptor) [pid 7258] close(24) = -1 EBADF (Bad file descriptor) [pid 7258] close(25) = -1 EBADF (Bad file descriptor) [pid 7258] close(26) = -1 EBADF (Bad file descriptor) [pid 7258] close(27) = -1 EBADF (Bad file descriptor) [pid 7258] close(28) = -1 EBADF (Bad file descriptor) [pid 7258] close(29) = -1 EBADF (Bad file descriptor) [pid 7258] exit_group(0 [pid 7259] <... futex resumed>) = ? [pid 7258] <... exit_group resumed>) = ? [pid 7259] +++ exited with 0 +++ [pid 7276] +++ exited with 0 +++ [pid 7258] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=353, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./117/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./117/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./117/cgroup.cpu") = 0 [pid 5007] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./117/binderfs") = 0 [pid 5007] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./117/file0") = 0 [pid 5007] umount2("./117/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./117/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./117/cgroup") = 0 [pid 5007] umount2("./117/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./117/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./117/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./117") = 0 [pid 5007] mkdir("./118", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 356 ./strace-static-x86_64: Process 7277 attached [pid 7277] set_robust_list(0x5555571235e0, 24) = 0 [pid 7277] chdir("./118") = 0 [pid 7277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7277] setpgid(0, 0) = 0 [pid 7277] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7277] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7277] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7277] write(3, "1000", 4) = 4 [pid 7277] close(3) = 0 [pid 7277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7277] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7277] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7277] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7278 attached [pid 7278] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7277] <... clone resumed>, parent_tid=[357], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 357 [pid 7278] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7277] <... futex resumed>) = 0 [pid 7278] memfd_create("syzkaller", 0 [pid 7277] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7278] <... memfd_create resumed>) = 3 [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7278] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7278] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7278] close(3) = 0 [pid 7278] mkdir("./file0", 0777) = 0 [ 163.110500][ T7278] loop0: detected capacity change from 0 to 32768 [ 163.120155][ T7278] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7278) [ 163.136568][ T7278] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 163.145396][ T7278] BTRFS info (device loop0): using free space tree [pid 7278] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7278] chdir("./file0") = 0 [pid 7278] ioctl(4, LOOP_CLR_FD) = 0 [pid 7278] close(4) = 0 [pid 7278] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7277] <... futex resumed>) = 0 [pid 7278] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7277] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] <... openat resumed>) = 4 [pid 7277] <... futex resumed>) = 0 [pid 7278] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] <... futex resumed>) = 0 [pid 7277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7278] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7277] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.166224][ T7278] BTRFS info (device loop0): enabling ssd optimizations [ 163.173592][ T7278] BTRFS info (device loop0): auto enabling async discard [ 163.203996][ T7278] BTRFS info (device loop0): balance: start -s [pid 7277] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7277] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7277] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7277] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7277] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[358], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 358 [pid 7277] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.213420][ T7278] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7277] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7295 attached [pid 7295] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7295] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7295] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7295] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] <... futex resumed>) = 0 [pid 7277] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7295] <... futex resumed>) = 0 [pid 7295] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7277] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7278] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.248265][ T7278] BTRFS info (device loop0): balance: ended with status: 0 [pid 7278] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7295] <... ioctl resumed>) = 0 [pid 7295] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7295] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] close(3) = 0 [pid 7277] close(4) = 0 [pid 7277] close(5) = 0 [pid 7277] close(6) = -1 EBADF (Bad file descriptor) [pid 7277] close(7) = -1 EBADF (Bad file descriptor) [pid 7277] close(8) = -1 EBADF (Bad file descriptor) [pid 7277] close(9) = -1 EBADF (Bad file descriptor) [pid 7277] close(10) = -1 EBADF (Bad file descriptor) [pid 7277] close(11) = -1 EBADF (Bad file descriptor) [pid 7277] close(12) = -1 EBADF (Bad file descriptor) [pid 7277] close(13) = -1 EBADF (Bad file descriptor) [pid 7277] close(14) = -1 EBADF (Bad file descriptor) [pid 7277] close(15) = -1 EBADF (Bad file descriptor) [pid 7277] close(16) = -1 EBADF (Bad file descriptor) [pid 7277] close(17) = -1 EBADF (Bad file descriptor) [pid 7277] close(18) = -1 EBADF (Bad file descriptor) [pid 7277] close(19) = -1 EBADF (Bad file descriptor) [pid 7277] close(20) = -1 EBADF (Bad file descriptor) [pid 7277] close(21) = -1 EBADF (Bad file descriptor) [pid 7277] close(22) = -1 EBADF (Bad file descriptor) [pid 7277] close(23) = -1 EBADF (Bad file descriptor) [pid 7277] close(24) = -1 EBADF (Bad file descriptor) [pid 7277] close(25) = -1 EBADF (Bad file descriptor) [pid 7277] close(26) = -1 EBADF (Bad file descriptor) [pid 7277] close(27) = -1 EBADF (Bad file descriptor) [pid 7277] close(28) = -1 EBADF (Bad file descriptor) [pid 7277] close(29) = -1 EBADF (Bad file descriptor) [pid 7277] exit_group(0) = ? [pid 7278] <... futex resumed>) = ? [pid 7295] <... futex resumed>) = ? [pid 7278] +++ exited with 0 +++ [pid 7295] +++ exited with 0 +++ [pid 7277] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./118/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./118/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./118/cgroup.cpu") = 0 [pid 5007] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./118/binderfs") = 0 [pid 5007] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./118/file0") = 0 [pid 5007] umount2("./118/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./118/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./118/cgroup") = 0 [pid 5007] umount2("./118/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./118/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./118/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./118") = 0 [pid 5007] mkdir("./119", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 359 ./strace-static-x86_64: Process 7296 attached [pid 7296] set_robust_list(0x5555571235e0, 24) = 0 [pid 7296] chdir("./119") = 0 [pid 7296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7296] setpgid(0, 0) = 0 [pid 7296] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7296] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7296] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7296] write(3, "1000", 4) = 4 [pid 7296] close(3) = 0 [pid 7296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7296] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7296] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7296] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7297 attached [pid 7297] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7297] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7296] <... clone resumed>, parent_tid=[360], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 360 [pid 7296] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7297] <... futex resumed>) = 0 [pid 7296] <... futex resumed>) = 1 [pid 7297] memfd_create("syzkaller", 0 [pid 7296] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7297] <... memfd_create resumed>) = 3 [pid 7297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7297] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7297] close(3) = 0 [pid 7297] mkdir("./file0", 0777) = 0 [ 163.773074][ T7297] loop0: detected capacity change from 0 to 32768 [ 163.784257][ T7297] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7297) [ 163.800997][ T7297] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 163.809825][ T7297] BTRFS info (device loop0): using free space tree [pid 7297] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7297] chdir("./file0") = 0 [pid 7297] ioctl(4, LOOP_CLR_FD) = 0 [pid 7297] close(4) = 0 [pid 7297] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7296] <... futex resumed>) = 0 [pid 7297] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7296] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7296] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7297] <... openat resumed>) = 4 [pid 7297] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7296] <... futex resumed>) = 0 [pid 7297] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7296] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.830281][ T7297] BTRFS info (device loop0): enabling ssd optimizations [ 163.837737][ T7297] BTRFS info (device loop0): auto enabling async discard [pid 7296] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7296] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7296] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7296] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7314 attached [ 163.881833][ T7297] BTRFS info (device loop0): balance: start -s [ 163.890898][ T7297] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7314] set_robust_list(0x7fd089ba69e0, 24 [pid 7296] <... clone resumed>, parent_tid=[361], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 361 [pid 7314] <... set_robust_list resumed>) = 0 [pid 7296] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] openat(AT_FDCWD, ".", O_RDONLY [pid 7296] <... futex resumed>) = 0 [pid 7296] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7314] <... openat resumed>) = 5 [pid 7314] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7296] <... futex resumed>) = 0 [pid 7314] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7296] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7296] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7297] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7297] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.928179][ T7297] BTRFS info (device loop0): balance: ended with status: 0 [pid 7297] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7314] <... ioctl resumed>) = 0 [pid 7314] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7314] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7296] close(3) = 0 [pid 7296] close(4) = 0 [pid 7296] close(5) = 0 [pid 7296] close(6) = -1 EBADF (Bad file descriptor) [pid 7296] close(7) = -1 EBADF (Bad file descriptor) [pid 7296] close(8) = -1 EBADF (Bad file descriptor) [pid 7296] close(9) = -1 EBADF (Bad file descriptor) [pid 7296] close(10) = -1 EBADF (Bad file descriptor) [pid 7296] close(11) = -1 EBADF (Bad file descriptor) [pid 7296] close(12) = -1 EBADF (Bad file descriptor) [pid 7296] close(13) = -1 EBADF (Bad file descriptor) [pid 7296] close(14) = -1 EBADF (Bad file descriptor) [pid 7296] close(15) = -1 EBADF (Bad file descriptor) [pid 7296] close(16) = -1 EBADF (Bad file descriptor) [pid 7296] close(17) = -1 EBADF (Bad file descriptor) [pid 7296] close(18) = -1 EBADF (Bad file descriptor) [pid 7296] close(19) = -1 EBADF (Bad file descriptor) [pid 7296] close(20) = -1 EBADF (Bad file descriptor) [pid 7296] close(21) = -1 EBADF (Bad file descriptor) [pid 7296] close(22) = -1 EBADF (Bad file descriptor) [pid 7296] close(23) = -1 EBADF (Bad file descriptor) [pid 7296] close(24) = -1 EBADF (Bad file descriptor) [pid 7296] close(25) = -1 EBADF (Bad file descriptor) [pid 7296] close(26) = -1 EBADF (Bad file descriptor) [pid 7296] close(27) = -1 EBADF (Bad file descriptor) [pid 7296] close(28) = -1 EBADF (Bad file descriptor) [pid 7296] close(29) = -1 EBADF (Bad file descriptor) [pid 7296] exit_group(0 [pid 7314] <... futex resumed>) = ? [pid 7297] <... futex resumed>) = ? [pid 7296] <... exit_group resumed>) = ? [pid 7314] +++ exited with 0 +++ [pid 7297] +++ exited with 0 +++ [pid 7296] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=359, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./119/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./119/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./119/cgroup.cpu") = 0 [pid 5007] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./119/binderfs") = 0 [pid 5007] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./119/file0") = 0 [pid 5007] umount2("./119/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./119/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./119/cgroup") = 0 [pid 5007] umount2("./119/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./119/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./119/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./119") = 0 [pid 5007] mkdir("./120", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7315 attached [pid 7315] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 362 [pid 7315] <... set_robust_list resumed>) = 0 [pid 7315] chdir("./120") = 0 [pid 7315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7315] setpgid(0, 0) = 0 [pid 7315] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7315] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7315] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7315] write(3, "1000", 4) = 4 [pid 7315] close(3) = 0 [pid 7315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7315] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7315] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7315] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7316 attached , parent_tid=[363], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 363 [pid 7316] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7316] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7315] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... futex resumed>) = 0 [pid 7315] <... futex resumed>) = 1 [pid 7316] memfd_create("syzkaller", 0 [pid 7315] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7316] <... memfd_create resumed>) = 3 [pid 7316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7316] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7316] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7316] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7316] close(3) = 0 [pid 7316] mkdir("./file0", 0777) = 0 [ 164.464561][ T7316] loop0: detected capacity change from 0 to 32768 [ 164.474287][ T7316] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7316) [ 164.491134][ T7316] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 164.500144][ T7316] BTRFS info (device loop0): using free space tree [pid 7316] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7316] chdir("./file0") = 0 [pid 7316] ioctl(4, LOOP_CLR_FD) = 0 [pid 7316] close(4) = 0 [pid 7316] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7315] <... futex resumed>) = 0 [pid 7316] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7315] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... openat resumed>) = 4 [pid 7315] <... futex resumed>) = 0 [pid 7316] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7315] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7316] <... futex resumed>) = 0 [pid 7315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7316] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7315] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 164.520711][ T7316] BTRFS info (device loop0): enabling ssd optimizations [ 164.527788][ T7316] BTRFS info (device loop0): auto enabling async discard [ 164.556880][ T7316] BTRFS info (device loop0): balance: start -s [ 164.566241][ T7316] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7315] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7315] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7315] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7315] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[364], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 364 [pid 7315] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7315] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7333 attached [pid 7333] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7333] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7333] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7315] <... futex resumed>) = 0 [pid 7315] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7315] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7333] <... futex resumed>) = 1 [pid 7333] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7316] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7316] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 164.601165][ T7316] BTRFS info (device loop0): balance: ended with status: 0 [pid 7316] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7333] <... ioctl resumed>) = 0 [pid 7333] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7333] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7315] close(3) = 0 [pid 7315] close(4) = 0 [pid 7315] close(5) = 0 [pid 7315] close(6) = -1 EBADF (Bad file descriptor) [pid 7315] close(7) = -1 EBADF (Bad file descriptor) [pid 7315] close(8) = -1 EBADF (Bad file descriptor) [pid 7315] close(9) = -1 EBADF (Bad file descriptor) [pid 7315] close(10) = -1 EBADF (Bad file descriptor) [pid 7315] close(11) = -1 EBADF (Bad file descriptor) [pid 7315] close(12) = -1 EBADF (Bad file descriptor) [pid 7315] close(13) = -1 EBADF (Bad file descriptor) [pid 7315] close(14) = -1 EBADF (Bad file descriptor) [pid 7315] close(15) = -1 EBADF (Bad file descriptor) [pid 7315] close(16) = -1 EBADF (Bad file descriptor) [pid 7315] close(17) = -1 EBADF (Bad file descriptor) [pid 7315] close(18) = -1 EBADF (Bad file descriptor) [pid 7315] close(19) = -1 EBADF (Bad file descriptor) [pid 7315] close(20) = -1 EBADF (Bad file descriptor) [pid 7315] close(21) = -1 EBADF (Bad file descriptor) [pid 7315] close(22) = -1 EBADF (Bad file descriptor) [pid 7315] close(23) = -1 EBADF (Bad file descriptor) [pid 7315] close(24) = -1 EBADF (Bad file descriptor) [pid 7315] close(25) = -1 EBADF (Bad file descriptor) [pid 7315] close(26) = -1 EBADF (Bad file descriptor) [pid 7315] close(27) = -1 EBADF (Bad file descriptor) [pid 7315] close(28) = -1 EBADF (Bad file descriptor) [pid 7315] close(29) = -1 EBADF (Bad file descriptor) [pid 7315] exit_group(0 [pid 7333] <... futex resumed>) = ? [pid 7316] <... futex resumed>) = ? [pid 7315] <... exit_group resumed>) = ? [pid 7333] +++ exited with 0 +++ [pid 7316] +++ exited with 0 +++ [pid 7315] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./120/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./120/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./120/cgroup.cpu") = 0 [pid 5007] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./120/binderfs") = 0 [pid 5007] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./120/file0") = 0 [pid 5007] umount2("./120/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./120/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./120/cgroup") = 0 [pid 5007] umount2("./120/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./120/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./120/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./120") = 0 [pid 5007] mkdir("./121", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7334 attached [pid 7334] set_robust_list(0x5555571235e0, 24) = 0 [pid 7334] chdir("./121") = 0 [pid 7334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7334] setpgid(0, 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 365 [pid 7334] <... setpgid resumed>) = 0 [pid 7334] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7334] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7334] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7334] write(3, "1000", 4) = 4 [pid 7334] close(3) = 0 [pid 7334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7334] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7334] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7334] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7335 attached [pid 7335] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7335] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] <... clone resumed>, parent_tid=[366], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 366 [pid 7334] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] <... futex resumed>) = 0 [pid 7334] <... futex resumed>) = 1 [pid 7334] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7335] memfd_create("syzkaller", 0) = 3 [pid 7335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7335] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7335] close(3) = 0 [pid 7335] mkdir("./file0", 0777) = 0 [ 165.155332][ T7335] loop0: detected capacity change from 0 to 32768 [ 165.167960][ T7335] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7335) [ 165.185534][ T7335] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 165.194274][ T7335] BTRFS info (device loop0): using free space tree [pid 7335] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7335] chdir("./file0") = 0 [pid 7335] ioctl(4, LOOP_CLR_FD) = 0 [pid 7335] close(4) = 0 [pid 7335] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7335] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] <... futex resumed>) = 0 [pid 7334] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7335] <... futex resumed>) = 0 [pid 7334] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7335] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... futex resumed>) = 0 [pid 7335] <... futex resumed>) = 1 [pid 7334] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7334] <... futex resumed>) = 0 [ 165.215489][ T7335] BTRFS info (device loop0): enabling ssd optimizations [ 165.222566][ T7335] BTRFS info (device loop0): auto enabling async discard [pid 7334] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7334] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7334] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7334] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7352 attached [pid 7352] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7352] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] <... clone resumed>, parent_tid=[367], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 367 [pid 7334] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7334] <... futex resumed>) = 1 [pid 7352] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7352] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7334] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7334] <... futex resumed>) = 1 [ 165.269149][ T7335] BTRFS info (device loop0): balance: start -s [ 165.278563][ T7335] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7352] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7334] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7335] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 165.324859][ T7335] BTRFS info (device loop0): balance: ended with status: 0 [pid 7335] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7352] <... ioctl resumed>) = 0 [pid 7352] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] close(3) = 0 [pid 7334] close(4) = 0 [pid 7334] close(5) = 0 [pid 7334] close(6) = -1 EBADF (Bad file descriptor) [pid 7334] close(7) = -1 EBADF (Bad file descriptor) [pid 7334] close(8) = -1 EBADF (Bad file descriptor) [pid 7334] close(9) = -1 EBADF (Bad file descriptor) [pid 7334] close(10) = -1 EBADF (Bad file descriptor) [pid 7334] close(11) = -1 EBADF (Bad file descriptor) [pid 7334] close(12) = -1 EBADF (Bad file descriptor) [pid 7334] close(13) = -1 EBADF (Bad file descriptor) [pid 7334] close(14) = -1 EBADF (Bad file descriptor) [pid 7334] close(15) = -1 EBADF (Bad file descriptor) [pid 7334] close(16) = -1 EBADF (Bad file descriptor) [pid 7334] close(17) = -1 EBADF (Bad file descriptor) [pid 7334] close(18) = -1 EBADF (Bad file descriptor) [pid 7334] close(19) = -1 EBADF (Bad file descriptor) [pid 7334] close(20) = -1 EBADF (Bad file descriptor) [pid 7334] close(21) = -1 EBADF (Bad file descriptor) [pid 7334] close(22) = -1 EBADF (Bad file descriptor) [pid 7334] close(23) = -1 EBADF (Bad file descriptor) [pid 7334] close(24) = -1 EBADF (Bad file descriptor) [pid 7334] close(25) = -1 EBADF (Bad file descriptor) [pid 7334] close(26) = -1 EBADF (Bad file descriptor) [pid 7334] close(27) = -1 EBADF (Bad file descriptor) [pid 7334] close(28) = -1 EBADF (Bad file descriptor) [pid 7334] close(29) = -1 EBADF (Bad file descriptor) [pid 7334] exit_group(0 [pid 7352] <... futex resumed>) = ? [pid 7335] <... futex resumed>) = ? [pid 7334] <... exit_group resumed>) = ? [pid 7352] +++ exited with 0 +++ [pid 7335] +++ exited with 0 +++ [pid 7334] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./121/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./121/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./121/cgroup.cpu") = 0 [pid 5007] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./121/binderfs") = 0 [pid 5007] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./121/file0") = 0 [pid 5007] umount2("./121/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./121/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./121/cgroup") = 0 [pid 5007] umount2("./121/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./121/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./121/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./121") = 0 [pid 5007] mkdir("./122", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 368 ./strace-static-x86_64: Process 7353 attached [pid 7353] set_robust_list(0x5555571235e0, 24) = 0 [pid 7353] chdir("./122") = 0 [pid 7353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7353] setpgid(0, 0) = 0 [pid 7353] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7353] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7353] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7353] write(3, "1000", 4) = 4 [pid 7353] close(3) = 0 [pid 7353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7353] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7353] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7353] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[369], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 369 [pid 7353] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7354 attached [pid 7354] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7354] memfd_create("syzkaller", 0) = 3 [pid 7354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7354] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7354] close(3) = 0 [pid 7354] mkdir("./file0", 0777) = 0 [ 165.836240][ T7354] loop0: detected capacity change from 0 to 32768 [ 165.847944][ T7354] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7354) [ 165.864394][ T7354] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 165.873558][ T7354] BTRFS info (device loop0): using free space tree [pid 7354] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7354] chdir("./file0") = 0 [pid 7354] ioctl(4, LOOP_CLR_FD) = 0 [pid 7354] close(4) = 0 [pid 7354] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = 0 [pid 7353] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7354] <... futex resumed>) = 1 [pid 7354] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7354] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = 0 [pid 7353] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7354] <... futex resumed>) = 1 [ 165.893561][ T7354] BTRFS info (device loop0): enabling ssd optimizations [ 165.901006][ T7354] BTRFS info (device loop0): auto enabling async discard [pid 7354] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7353] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7353] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7353] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[370], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 370 [pid 7353] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7371 attached [pid 7371] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7371] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7371] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7353] <... futex resumed>) = 0 [pid 7371] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7354] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7353] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7354] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = 0 [pid 7371] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7354] <... futex resumed>) = 0 [pid 7353] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 165.939140][ T7354] BTRFS info (device loop0): balance: start -s [ 165.948480][ T7354] BTRFS info (device loop0): relocating block group 1048576 flags system [ 165.979017][ T7354] BTRFS info (device loop0): balance: ended with status: 0 [pid 7354] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7371] <... ioctl resumed>) = 0 [pid 7371] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7371] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7353] close(3) = 0 [pid 7353] close(4) = 0 [pid 7353] close(5) = 0 [pid 7353] close(6) = -1 EBADF (Bad file descriptor) [pid 7353] close(7) = -1 EBADF (Bad file descriptor) [pid 7353] close(8) = -1 EBADF (Bad file descriptor) [pid 7353] close(9) = -1 EBADF (Bad file descriptor) [pid 7353] close(10) = -1 EBADF (Bad file descriptor) [pid 7353] close(11) = -1 EBADF (Bad file descriptor) [pid 7353] close(12) = -1 EBADF (Bad file descriptor) [pid 7353] close(13) = -1 EBADF (Bad file descriptor) [pid 7353] close(14) = -1 EBADF (Bad file descriptor) [pid 7353] close(15) = -1 EBADF (Bad file descriptor) [pid 7353] close(16) = -1 EBADF (Bad file descriptor) [pid 7353] close(17) = -1 EBADF (Bad file descriptor) [pid 7353] close(18) = -1 EBADF (Bad file descriptor) [pid 7353] close(19) = -1 EBADF (Bad file descriptor) [pid 7353] close(20) = -1 EBADF (Bad file descriptor) [pid 7353] close(21) = -1 EBADF (Bad file descriptor) [pid 7353] close(22) = -1 EBADF (Bad file descriptor) [pid 7353] close(23) = -1 EBADF (Bad file descriptor) [pid 7353] close(24) = -1 EBADF (Bad file descriptor) [pid 7353] close(25) = -1 EBADF (Bad file descriptor) [pid 7353] close(26) = -1 EBADF (Bad file descriptor) [pid 7353] close(27) = -1 EBADF (Bad file descriptor) [pid 7353] close(28) = -1 EBADF (Bad file descriptor) [pid 7353] close(29) = -1 EBADF (Bad file descriptor) [pid 7353] exit_group(0 [pid 7354] <... futex resumed>) = ? [pid 7371] <... futex resumed>) = ? [pid 7354] +++ exited with 0 +++ [pid 7353] <... exit_group resumed>) = ? [pid 7371] +++ exited with 0 +++ [pid 7353] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./122/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./122/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./122/cgroup.cpu") = 0 [pid 5007] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./122/binderfs") = 0 [pid 5007] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./122/file0") = 0 [pid 5007] umount2("./122/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./122/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./122/cgroup") = 0 [pid 5007] umount2("./122/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./122/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./122/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./122") = 0 [pid 5007] mkdir("./123", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 371 ./strace-static-x86_64: Process 7372 attached [pid 7372] set_robust_list(0x5555571235e0, 24) = 0 [pid 7372] chdir("./123") = 0 [pid 7372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7372] setpgid(0, 0) = 0 [pid 7372] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7372] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7372] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7372] write(3, "1000", 4) = 4 [pid 7372] close(3) = 0 [pid 7372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7372] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7372] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7372] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7373 attached [pid 7373] set_robust_list(0x7fd090fc79e0, 24 [pid 7372] <... clone resumed>, parent_tid=[372], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 372 [pid 7373] <... set_robust_list resumed>) = 0 [pid 7372] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] memfd_create("syzkaller", 0 [pid 7372] <... futex resumed>) = 0 [pid 7373] <... memfd_create resumed>) = 3 [pid 7372] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7373] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7373] close(3) = 0 [pid 7373] mkdir("./file0", 0777) = 0 [ 166.502556][ T7373] loop0: detected capacity change from 0 to 32768 [ 166.512789][ T7373] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7373) [ 166.530067][ T7373] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 166.538882][ T7373] BTRFS info (device loop0): using free space tree [pid 7373] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7373] chdir("./file0") = 0 [pid 7373] ioctl(4, LOOP_CLR_FD) = 0 [pid 7373] close(4) = 0 [pid 7373] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7373] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7372] <... futex resumed>) = 0 [pid 7372] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] <... futex resumed>) = 0 [pid 7372] <... futex resumed>) = 1 [pid 7373] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7372] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7373] <... openat resumed>) = 4 [pid 7373] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7372] <... futex resumed>) = 0 [pid 7373] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7372] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 166.558783][ T7373] BTRFS info (device loop0): enabling ssd optimizations [ 166.565986][ T7373] BTRFS info (device loop0): auto enabling async discard [pid 7372] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7372] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7372] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7372] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7390 attached , parent_tid=[373], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 373 [pid 7372] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] set_robust_list(0x7fd089ba69e0, 24 [pid 7372] <... futex resumed>) = 0 [pid 7390] <... set_robust_list resumed>) = 0 [pid 7372] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7390] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7372] <... futex resumed>) = 0 [pid 7390] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7372] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 166.601782][ T7373] BTRFS info (device loop0): balance: start -s [ 166.617835][ T7373] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7372] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7373] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7373] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7373] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7372] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7372] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 166.666363][ T7373] BTRFS info (device loop0): balance: ended with status: 0 [pid 7390] <... ioctl resumed>) = 0 [pid 7390] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7390] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7372] close(3) = 0 [pid 7372] close(4) = 0 [pid 7372] close(5) = 0 [pid 7372] close(6) = -1 EBADF (Bad file descriptor) [pid 7372] close(7) = -1 EBADF (Bad file descriptor) [pid 7372] close(8) = -1 EBADF (Bad file descriptor) [pid 7372] close(9) = -1 EBADF (Bad file descriptor) [pid 7372] close(10) = -1 EBADF (Bad file descriptor) [pid 7372] close(11) = -1 EBADF (Bad file descriptor) [pid 7372] close(12) = -1 EBADF (Bad file descriptor) [pid 7372] close(13) = -1 EBADF (Bad file descriptor) [pid 7372] close(14) = -1 EBADF (Bad file descriptor) [pid 7372] close(15) = -1 EBADF (Bad file descriptor) [pid 7372] close(16) = -1 EBADF (Bad file descriptor) [pid 7372] close(17) = -1 EBADF (Bad file descriptor) [pid 7372] close(18) = -1 EBADF (Bad file descriptor) [pid 7372] close(19) = -1 EBADF (Bad file descriptor) [pid 7372] close(20) = -1 EBADF (Bad file descriptor) [pid 7372] close(21) = -1 EBADF (Bad file descriptor) [pid 7372] close(22) = -1 EBADF (Bad file descriptor) [pid 7372] close(23) = -1 EBADF (Bad file descriptor) [pid 7372] close(24) = -1 EBADF (Bad file descriptor) [pid 7372] close(25) = -1 EBADF (Bad file descriptor) [pid 7372] close(26) = -1 EBADF (Bad file descriptor) [pid 7372] close(27) = -1 EBADF (Bad file descriptor) [pid 7372] close(28) = -1 EBADF (Bad file descriptor) [pid 7372] close(29) = -1 EBADF (Bad file descriptor) [pid 7372] exit_group(0 [pid 7390] <... futex resumed>) = ? [pid 7373] <... futex resumed>) = ? [pid 7372] <... exit_group resumed>) = ? [pid 7390] +++ exited with 0 +++ [pid 7373] +++ exited with 0 +++ [pid 7372] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./123/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./123/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./123/cgroup.cpu") = 0 [pid 5007] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./123/binderfs") = 0 [pid 5007] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./123/file0") = 0 [pid 5007] umount2("./123/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./123/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./123/cgroup") = 0 [pid 5007] umount2("./123/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./123/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./123/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./123") = 0 [pid 5007] mkdir("./124", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7391 attached , child_tidptr=0x5555571235d0) = 374 [pid 7391] set_robust_list(0x5555571235e0, 24) = 0 [pid 7391] chdir("./124") = 0 [pid 7391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7391] setpgid(0, 0) = 0 [pid 7391] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7391] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7391] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7391] write(3, "1000", 4) = 4 [pid 7391] close(3) = 0 [pid 7391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7391] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7391] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7391] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7392 attached [pid 7392] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7391] <... clone resumed>, parent_tid=[375], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 375 [pid 7392] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7391] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7392] <... futex resumed>) = 0 [pid 7391] <... futex resumed>) = 1 [pid 7391] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7392] memfd_create("syzkaller", 0) = 3 [pid 7392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7392] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7392] close(3) = 0 [pid 7392] mkdir("./file0", 0777) = 0 [ 167.175142][ T7392] loop0: detected capacity change from 0 to 32768 [ 167.186600][ T7392] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7392) [ 167.204614][ T7392] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 167.213797][ T7392] BTRFS info (device loop0): using free space tree [pid 7392] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7392] chdir("./file0") = 0 [pid 7392] ioctl(4, LOOP_CLR_FD) = 0 [pid 7392] close(4) = 0 [pid 7392] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7391] <... futex resumed>) = 0 [pid 7392] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7391] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7392] <... openat resumed>) = 4 [pid 7391] <... futex resumed>) = 0 [pid 7392] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7391] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7392] <... futex resumed>) = 0 [pid 7391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7392] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7391] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 167.234435][ T7392] BTRFS info (device loop0): enabling ssd optimizations [ 167.241635][ T7392] BTRFS info (device loop0): auto enabling async discard [ 167.280847][ T7392] BTRFS info (device loop0): balance: start -s [ 167.290043][ T7392] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7391] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7391] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7391] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7391] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7391] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7409 attached [pid 7409] set_robust_list(0x7fd089ba69e0, 24 [pid 7391] <... clone resumed>, parent_tid=[376], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 376 [pid 7409] <... set_robust_list resumed>) = 0 [pid 7391] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7409] openat(AT_FDCWD, ".", O_RDONLY [pid 7391] <... futex resumed>) = 0 [pid 7409] <... openat resumed>) = 5 [pid 7391] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7409] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7391] <... futex resumed>) = 0 [pid 7409] <... futex resumed>) = 1 [pid 7391] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7409] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7391] <... futex resumed>) = 0 [pid 7391] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7392] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7392] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7392] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 167.325080][ T7392] BTRFS info (device loop0): balance: ended with status: 0 [pid 7409] <... ioctl resumed>) = 0 [pid 7409] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7391] close(3 [pid 7409] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7391] <... close resumed>) = 0 [pid 7391] close(4) = 0 [pid 7391] close(5) = 0 [pid 7391] close(6) = -1 EBADF (Bad file descriptor) [pid 7391] close(7) = -1 EBADF (Bad file descriptor) [pid 7391] close(8) = -1 EBADF (Bad file descriptor) [pid 7391] close(9) = -1 EBADF (Bad file descriptor) [pid 7391] close(10) = -1 EBADF (Bad file descriptor) [pid 7391] close(11) = -1 EBADF (Bad file descriptor) [pid 7391] close(12) = -1 EBADF (Bad file descriptor) [pid 7391] close(13) = -1 EBADF (Bad file descriptor) [pid 7391] close(14) = -1 EBADF (Bad file descriptor) [pid 7391] close(15) = -1 EBADF (Bad file descriptor) [pid 7391] close(16) = -1 EBADF (Bad file descriptor) [pid 7391] close(17) = -1 EBADF (Bad file descriptor) [pid 7391] close(18) = -1 EBADF (Bad file descriptor) [pid 7391] close(19) = -1 EBADF (Bad file descriptor) [pid 7391] close(20) = -1 EBADF (Bad file descriptor) [pid 7391] close(21) = -1 EBADF (Bad file descriptor) [pid 7391] close(22) = -1 EBADF (Bad file descriptor) [pid 7391] close(23) = -1 EBADF (Bad file descriptor) [pid 7391] close(24) = -1 EBADF (Bad file descriptor) [pid 7391] close(25) = -1 EBADF (Bad file descriptor) [pid 7391] close(26) = -1 EBADF (Bad file descriptor) [pid 7391] close(27) = -1 EBADF (Bad file descriptor) [pid 7391] close(28) = -1 EBADF (Bad file descriptor) [pid 7391] close(29) = -1 EBADF (Bad file descriptor) [pid 7391] exit_group(0 [pid 7409] <... futex resumed>) = ? [pid 7392] <... futex resumed>) = ? [pid 7391] <... exit_group resumed>) = ? [pid 7409] +++ exited with 0 +++ [pid 7392] +++ exited with 0 +++ [pid 7391] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./124/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./124/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./124/cgroup.cpu") = 0 [pid 5007] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./124/binderfs") = 0 [pid 5007] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./124/file0") = 0 [pid 5007] umount2("./124/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./124/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./124/cgroup") = 0 [pid 5007] umount2("./124/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./124/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./124/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./124") = 0 [pid 5007] mkdir("./125", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 377 ./strace-static-x86_64: Process 7410 attached [pid 7410] set_robust_list(0x5555571235e0, 24) = 0 [pid 7410] chdir("./125") = 0 [pid 7410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7410] setpgid(0, 0) = 0 [pid 7410] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7410] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7410] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7410] write(3, "1000", 4) = 4 [pid 7410] close(3) = 0 [pid 7410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7410] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7410] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7410] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[378], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 378 [pid 7410] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7411 attached [pid 7411] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7411] memfd_create("syzkaller", 0) = 3 [pid 7411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7411] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7411] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7411] close(3) = 0 [pid 7411] mkdir("./file0", 0777) = 0 [ 167.854230][ T7411] loop0: detected capacity change from 0 to 32768 [ 167.867375][ T7411] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7411) [ 167.884861][ T7411] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 167.893809][ T7411] BTRFS info (device loop0): using free space tree [pid 7411] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7411] chdir("./file0") = 0 [pid 7411] ioctl(4, LOOP_CLR_FD) = 0 [pid 7411] close(4) = 0 [pid 7411] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] <... futex resumed>) = 0 [pid 7410] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7411] <... futex resumed>) = 1 [pid 7411] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7411] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] <... futex resumed>) = 0 [pid 7410] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7411] <... futex resumed>) = 1 [ 167.913081][ T7411] BTRFS info (device loop0): enabling ssd optimizations [ 167.920488][ T7411] BTRFS info (device loop0): auto enabling async discard [pid 7411] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7410] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7410] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7410] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7410] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7428 attached , parent_tid=[379], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 379 [pid 7410] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7428] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7428] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7428] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7410] <... futex resumed>) = 0 [pid 7410] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 167.955694][ T7411] BTRFS info (device loop0): balance: start -s [ 167.966325][ T7411] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7428] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 168.056396][ T7411] BTRFS info (device loop0): balance: ended with status: 0 [pid 7428] <... ioctl resumed>) = 0 [pid 7428] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7428] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7411] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7411] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] close(3 [pid 7411] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7410] <... close resumed>) = 0 [pid 7410] close(4) = 0 [pid 7410] close(5) = 0 [pid 7410] close(6) = -1 EBADF (Bad file descriptor) [pid 7410] close(7) = -1 EBADF (Bad file descriptor) [pid 7410] close(8) = -1 EBADF (Bad file descriptor) [pid 7410] close(9) = -1 EBADF (Bad file descriptor) [pid 7410] close(10) = -1 EBADF (Bad file descriptor) [pid 7410] close(11) = -1 EBADF (Bad file descriptor) [pid 7410] close(12) = -1 EBADF (Bad file descriptor) [pid 7410] close(13) = -1 EBADF (Bad file descriptor) [pid 7410] close(14) = -1 EBADF (Bad file descriptor) [pid 7410] close(15) = -1 EBADF (Bad file descriptor) [pid 7410] close(16) = -1 EBADF (Bad file descriptor) [pid 7410] close(17) = -1 EBADF (Bad file descriptor) [pid 7410] close(18) = -1 EBADF (Bad file descriptor) [pid 7410] close(19) = -1 EBADF (Bad file descriptor) [pid 7410] close(20) = -1 EBADF (Bad file descriptor) [pid 7410] close(21) = -1 EBADF (Bad file descriptor) [pid 7410] close(22) = -1 EBADF (Bad file descriptor) [pid 7410] close(23) = -1 EBADF (Bad file descriptor) [pid 7410] close(24) = -1 EBADF (Bad file descriptor) [pid 7410] close(25) = -1 EBADF (Bad file descriptor) [pid 7410] close(26) = -1 EBADF (Bad file descriptor) [pid 7410] close(27) = -1 EBADF (Bad file descriptor) [pid 7410] close(28) = -1 EBADF (Bad file descriptor) [pid 7410] close(29) = -1 EBADF (Bad file descriptor) [pid 7410] exit_group(0 [pid 7428] <... futex resumed>) = ? [pid 7411] <... futex resumed>) = ? [pid 7410] <... exit_group resumed>) = ? [pid 7428] +++ exited with 0 +++ [pid 7411] +++ exited with 0 +++ [pid 7410] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=377, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./125/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./125/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./125/cgroup.cpu") = 0 [pid 5007] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./125/binderfs") = 0 [pid 5007] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./125/file0") = 0 [pid 5007] umount2("./125/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./125/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./125/cgroup") = 0 [pid 5007] umount2("./125/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./125/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./125/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./125") = 0 [pid 5007] mkdir("./126", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 380 ./strace-static-x86_64: Process 7429 attached [pid 7429] set_robust_list(0x5555571235e0, 24) = 0 [pid 7429] chdir("./126") = 0 [pid 7429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7429] setpgid(0, 0) = 0 [pid 7429] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7429] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7429] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7429] write(3, "1000", 4) = 4 [pid 7429] close(3) = 0 [pid 7429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7429] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7429] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7429] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[381], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 381 [pid 7429] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7429] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7430 attached [pid 7430] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7430] memfd_create("syzkaller", 0) = 3 [pid 7430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7430] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7430] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7430] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7430] close(3) = 0 [pid 7430] mkdir("./file0", 0777) = 0 [ 168.521712][ T7430] loop0: detected capacity change from 0 to 32768 [ 168.532927][ T7430] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7430) [ 168.551995][ T7430] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 168.561190][ T7430] BTRFS info (device loop0): using free space tree [pid 7430] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7430] chdir("./file0") = 0 [pid 7430] ioctl(4, LOOP_CLR_FD) = 0 [pid 7430] close(4) = 0 [pid 7430] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7429] <... futex resumed>) = 0 [pid 7430] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7429] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7430] <... openat resumed>) = 4 [pid 7429] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7430] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7429] <... futex resumed>) = 0 [pid 7429] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7430] <... futex resumed>) = 1 [pid 7429] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 168.581850][ T7430] BTRFS info (device loop0): enabling ssd optimizations [ 168.588987][ T7430] BTRFS info (device loop0): auto enabling async discard [ 168.616384][ T7430] BTRFS info (device loop0): balance: start -s [pid 7430] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7429] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7429] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7429] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7447 attached , parent_tid=[382], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 382 [pid 7429] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7429] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7447] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7447] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7447] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7429] <... futex resumed>) = 0 [pid 7429] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7429] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 168.638120][ T7430] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7447] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 168.711532][ T7430] BTRFS info (device loop0): balance: ended with status: 0 [pid 7447] <... ioctl resumed>) = 0 [pid 7430] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7430] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7430] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7447] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7447] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7429] close(3) = 0 [pid 7429] close(4) = 0 [pid 7429] close(5) = 0 [pid 7429] close(6) = -1 EBADF (Bad file descriptor) [pid 7429] close(7) = -1 EBADF (Bad file descriptor) [pid 7429] close(8) = -1 EBADF (Bad file descriptor) [pid 7429] close(9) = -1 EBADF (Bad file descriptor) [pid 7429] close(10) = -1 EBADF (Bad file descriptor) [pid 7429] close(11) = -1 EBADF (Bad file descriptor) [pid 7429] close(12) = -1 EBADF (Bad file descriptor) [pid 7429] close(13) = -1 EBADF (Bad file descriptor) [pid 7429] close(14) = -1 EBADF (Bad file descriptor) [pid 7429] close(15) = -1 EBADF (Bad file descriptor) [pid 7429] close(16) = -1 EBADF (Bad file descriptor) [pid 7429] close(17) = -1 EBADF (Bad file descriptor) [pid 7429] close(18) = -1 EBADF (Bad file descriptor) [pid 7429] close(19) = -1 EBADF (Bad file descriptor) [pid 7429] close(20) = -1 EBADF (Bad file descriptor) [pid 7429] close(21) = -1 EBADF (Bad file descriptor) [pid 7429] close(22) = -1 EBADF (Bad file descriptor) [pid 7429] close(23) = -1 EBADF (Bad file descriptor) [pid 7429] close(24) = -1 EBADF (Bad file descriptor) [pid 7429] close(25) = -1 EBADF (Bad file descriptor) [pid 7429] close(26) = -1 EBADF (Bad file descriptor) [pid 7429] close(27) = -1 EBADF (Bad file descriptor) [pid 7429] close(28) = -1 EBADF (Bad file descriptor) [pid 7429] close(29) = -1 EBADF (Bad file descriptor) [pid 7429] exit_group(0 [pid 7447] <... futex resumed>) = ? [pid 7430] <... futex resumed>) = ? [pid 7429] <... exit_group resumed>) = ? [pid 7447] +++ exited with 0 +++ [pid 7430] +++ exited with 0 +++ [pid 7429] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=380, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./126/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./126/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./126/cgroup.cpu") = 0 [pid 5007] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./126/binderfs") = 0 [pid 5007] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./126/file0") = 0 [pid 5007] umount2("./126/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./126/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./126/cgroup") = 0 [pid 5007] umount2("./126/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./126/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./126/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./126") = 0 [pid 5007] mkdir("./127", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 383 ./strace-static-x86_64: Process 7448 attached [pid 7448] set_robust_list(0x5555571235e0, 24) = 0 [pid 7448] chdir("./127") = 0 [pid 7448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7448] setpgid(0, 0) = 0 [pid 7448] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7448] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7448] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7448] write(3, "1000", 4) = 4 [pid 7448] close(3) = 0 [pid 7448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7448] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7448] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7448] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7449 attached , parent_tid=[384], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 384 [pid 7449] set_robust_list(0x7fd090fc79e0, 24 [pid 7448] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... set_robust_list resumed>) = 0 [pid 7448] <... futex resumed>) = 0 [pid 7448] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7449] memfd_create("syzkaller", 0) = 3 [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7449] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7449] close(3) = 0 [pid 7449] mkdir("./file0", 0777) = 0 [ 169.204158][ T7449] loop0: detected capacity change from 0 to 32768 [ 169.215711][ T7449] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7449) [ 169.233085][ T7449] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.242357][ T7449] BTRFS info (device loop0): using free space tree [pid 7449] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7449] chdir("./file0") = 0 [pid 7449] ioctl(4, LOOP_CLR_FD) = 0 [pid 7449] close(4) = 0 [pid 7449] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7449] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7448] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... openat resumed>) = 4 [pid 7448] <... futex resumed>) = 0 [pid 7448] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... futex resumed>) = 0 [pid 7448] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] <... futex resumed>) = 1 [ 169.262766][ T7449] BTRFS info (device loop0): enabling ssd optimizations [ 169.269924][ T7449] BTRFS info (device loop0): auto enabling async discard [ 169.303062][ T7449] BTRFS info (device loop0): balance: start -s [pid 7449] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7448] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7448] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7448] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[385], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 385 [pid 7448] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7466 attached ) = 0 [pid 7466] set_robust_list(0x7fd089ba69e0, 24 [pid 7448] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] <... set_robust_list resumed>) = 0 [pid 7466] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7466] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... futex resumed>) = 0 [pid 7448] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] <... futex resumed>) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7466] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 169.312099][ T7449] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7448] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 169.385865][ T7449] BTRFS info (device loop0): balance: ended with status: 0 [pid 7466] <... ioctl resumed>) = 0 [pid 7449] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7466] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] <... futex resumed>) = 0 [pid 7466] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7449] <... futex resumed>) = 0 [pid 7448] close(3 [pid 7449] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] <... close resumed>) = 0 [pid 7448] close(4) = 0 [pid 7448] close(5) = 0 [pid 7448] close(6) = -1 EBADF (Bad file descriptor) [pid 7448] close(7) = -1 EBADF (Bad file descriptor) [pid 7448] close(8) = -1 EBADF (Bad file descriptor) [pid 7448] close(9) = -1 EBADF (Bad file descriptor) [pid 7448] close(10) = -1 EBADF (Bad file descriptor) [pid 7448] close(11) = -1 EBADF (Bad file descriptor) [pid 7448] close(12) = -1 EBADF (Bad file descriptor) [pid 7448] close(13) = -1 EBADF (Bad file descriptor) [pid 7448] close(14) = -1 EBADF (Bad file descriptor) [pid 7448] close(15) = -1 EBADF (Bad file descriptor) [pid 7448] close(16) = -1 EBADF (Bad file descriptor) [pid 7448] close(17) = -1 EBADF (Bad file descriptor) [pid 7448] close(18) = -1 EBADF (Bad file descriptor) [pid 7448] close(19) = -1 EBADF (Bad file descriptor) [pid 7448] close(20) = -1 EBADF (Bad file descriptor) [pid 7448] close(21) = -1 EBADF (Bad file descriptor) [pid 7448] close(22) = -1 EBADF (Bad file descriptor) [pid 7448] close(23) = -1 EBADF (Bad file descriptor) [pid 7448] close(24) = -1 EBADF (Bad file descriptor) [pid 7448] close(25) = -1 EBADF (Bad file descriptor) [pid 7448] close(26) = -1 EBADF (Bad file descriptor) [pid 7448] close(27) = -1 EBADF (Bad file descriptor) [pid 7448] close(28) = -1 EBADF (Bad file descriptor) [pid 7448] close(29) = -1 EBADF (Bad file descriptor) [pid 7448] exit_group(0 [pid 7466] <... futex resumed>) = ? [pid 7449] <... futex resumed>) = ? [pid 7448] <... exit_group resumed>) = ? [pid 7466] +++ exited with 0 +++ [pid 7449] +++ exited with 0 +++ [pid 7448] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=383, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./127/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./127/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./127/cgroup.cpu") = 0 [pid 5007] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./127/binderfs") = 0 [pid 5007] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./127/file0") = 0 [pid 5007] umount2("./127/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./127/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./127/cgroup") = 0 [pid 5007] umount2("./127/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./127/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./127/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./127") = 0 [pid 5007] mkdir("./128", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 386 ./strace-static-x86_64: Process 7467 attached [pid 7467] set_robust_list(0x5555571235e0, 24) = 0 [pid 7467] chdir("./128") = 0 [pid 7467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7467] setpgid(0, 0) = 0 [pid 7467] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7467] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7467] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7467] write(3, "1000", 4) = 4 [pid 7467] close(3) = 0 [pid 7467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7467] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7467] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7467] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7468 attached [pid 7468] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7467] <... clone resumed>, parent_tid=[387], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 387 [pid 7468] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7467] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7468] <... futex resumed>) = 0 [pid 7467] <... futex resumed>) = 1 [pid 7468] memfd_create("syzkaller", 0 [pid 7467] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7468] <... memfd_create resumed>) = 3 [pid 7468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7468] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7468] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7468] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7468] close(3) = 0 [pid 7468] mkdir("./file0", 0777) = 0 [ 169.873426][ T7468] loop0: detected capacity change from 0 to 32768 [ 169.884573][ T7468] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7468) [ 169.901471][ T7468] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.910312][ T7468] BTRFS info (device loop0): using free space tree [pid 7468] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7468] chdir("./file0") = 0 [pid 7468] ioctl(4, LOOP_CLR_FD) = 0 [pid 7468] close(4) = 0 [pid 7468] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7467] <... futex resumed>) = 0 [pid 7468] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7467] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7468] <... openat resumed>) = 4 [pid 7467] <... futex resumed>) = 0 [pid 7468] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7468] <... futex resumed>) = 0 [pid 7467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7468] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7467] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 169.929166][ T7468] BTRFS info (device loop0): enabling ssd optimizations [ 169.936264][ T7468] BTRFS info (device loop0): auto enabling async discard [ 169.970600][ T7468] BTRFS info (device loop0): balance: start -s [ 169.980463][ T7468] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7467] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7467] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7467] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7467] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7485 attached [pid 7485] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7467] <... clone resumed>, parent_tid=[388], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 388 [pid 7485] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7467] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] <... futex resumed>) = 0 [pid 7467] <... futex resumed>) = 1 [pid 7485] openat(AT_FDCWD, ".", O_RDONLY [pid 7467] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7485] <... openat resumed>) = 5 [pid 7485] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7467] <... futex resumed>) = 0 [pid 7485] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7467] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7467] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7468] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7468] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.017561][ T7468] BTRFS info (device loop0): balance: ended with status: 0 [pid 7468] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7485] <... ioctl resumed>) = 0 [pid 7485] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7467] close(3) = 0 [pid 7467] close(4) = 0 [pid 7467] close(5) = 0 [pid 7467] close(6) = -1 EBADF (Bad file descriptor) [pid 7467] close(7) = -1 EBADF (Bad file descriptor) [pid 7467] close(8) = -1 EBADF (Bad file descriptor) [pid 7467] close(9) = -1 EBADF (Bad file descriptor) [pid 7467] close(10) = -1 EBADF (Bad file descriptor) [pid 7467] close(11) = -1 EBADF (Bad file descriptor) [pid 7467] close(12) = -1 EBADF (Bad file descriptor) [pid 7467] close(13) = -1 EBADF (Bad file descriptor) [pid 7467] close(14) = -1 EBADF (Bad file descriptor) [pid 7467] close(15) = -1 EBADF (Bad file descriptor) [pid 7467] close(16) = -1 EBADF (Bad file descriptor) [pid 7467] close(17) = -1 EBADF (Bad file descriptor) [pid 7467] close(18) = -1 EBADF (Bad file descriptor) [pid 7467] close(19) = -1 EBADF (Bad file descriptor) [pid 7467] close(20) = -1 EBADF (Bad file descriptor) [pid 7467] close(21) = -1 EBADF (Bad file descriptor) [pid 7467] close(22) = -1 EBADF (Bad file descriptor) [pid 7467] close(23) = -1 EBADF (Bad file descriptor) [pid 7467] close(24) = -1 EBADF (Bad file descriptor) [pid 7467] close(25) = -1 EBADF (Bad file descriptor) [pid 7467] close(26) = -1 EBADF (Bad file descriptor) [pid 7467] close(27) = -1 EBADF (Bad file descriptor) [pid 7467] close(28) = -1 EBADF (Bad file descriptor) [pid 7467] close(29) = -1 EBADF (Bad file descriptor) [pid 7467] exit_group(0 [pid 7485] <... futex resumed>) = ? [pid 7468] <... futex resumed>) = ? [pid 7467] <... exit_group resumed>) = ? [pid 7485] +++ exited with 0 +++ [pid 7468] +++ exited with 0 +++ [pid 7467] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./128/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./128/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./128/cgroup.cpu") = 0 [pid 5007] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./128/binderfs") = 0 [pid 5007] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./128/file0") = 0 [pid 5007] umount2("./128/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./128/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./128/cgroup") = 0 [pid 5007] umount2("./128/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./128/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./128/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./128") = 0 [pid 5007] mkdir("./129", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 389 ./strace-static-x86_64: Process 7486 attached [pid 7486] set_robust_list(0x5555571235e0, 24) = 0 [pid 7486] chdir("./129") = 0 [pid 7486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7486] setpgid(0, 0) = 0 [pid 7486] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7486] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7486] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7486] write(3, "1000", 4) = 4 [pid 7486] close(3) = 0 [pid 7486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7486] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7486] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7486] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7487 attached , parent_tid=[390], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 390 [pid 7487] set_robust_list(0x7fd090fc79e0, 24 [pid 7486] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] <... set_robust_list resumed>) = 0 [pid 7486] <... futex resumed>) = 0 [pid 7486] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7487] memfd_create("syzkaller", 0) = 3 [pid 7487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7487] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7487] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7487] close(3) = 0 [pid 7487] mkdir("./file0", 0777) = 0 [ 170.533747][ T7487] loop0: detected capacity change from 0 to 32768 [ 170.546396][ T7487] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7487) [ 170.564271][ T7487] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 170.573671][ T7487] BTRFS info (device loop0): using free space tree [pid 7487] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7487] chdir("./file0") = 0 [pid 7487] ioctl(4, LOOP_CLR_FD) = 0 [pid 7487] close(4) = 0 [pid 7487] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7487] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] <... futex resumed>) = 0 [pid 7486] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] <... futex resumed>) = 0 [pid 7486] <... futex resumed>) = 1 [pid 7487] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7486] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7487] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7486] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7487] <... futex resumed>) = 0 [pid 7487] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 170.593736][ T7487] BTRFS info (device loop0): enabling ssd optimizations [ 170.600845][ T7487] BTRFS info (device loop0): auto enabling async discard [pid 7486] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7486] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7486] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7486] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7504 attached , parent_tid=[391], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 391 [pid 7504] set_robust_list(0x7fd089ba69e0, 24 [pid 7486] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7504] <... set_robust_list resumed>) = 0 [pid 7504] openat(AT_FDCWD, ".", O_RDONLY [pid 7486] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7504] <... openat resumed>) = 5 [pid 7504] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7486] <... futex resumed>) = 0 [pid 7504] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7486] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.658932][ T7487] BTRFS info (device loop0): balance: start -s [ 170.667886][ T7487] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7486] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 170.737957][ T7487] BTRFS info (device loop0): balance: ended with status: 0 [pid 7504] <... ioctl resumed>) = 0 [pid 7504] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7487] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7487] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] close(3) = 0 [pid 7486] close(4) = 0 [pid 7486] close(5) = 0 [pid 7486] close(6) = -1 EBADF (Bad file descriptor) [pid 7486] close(7) = -1 EBADF (Bad file descriptor) [pid 7486] close(8) = -1 EBADF (Bad file descriptor) [pid 7486] close(9) = -1 EBADF (Bad file descriptor) [pid 7486] close(10) = -1 EBADF (Bad file descriptor) [pid 7486] close(11) = -1 EBADF (Bad file descriptor) [pid 7486] close(12) = -1 EBADF (Bad file descriptor) [pid 7486] close(13) = -1 EBADF (Bad file descriptor) [pid 7486] close(14) = -1 EBADF (Bad file descriptor) [pid 7486] close(15) = -1 EBADF (Bad file descriptor) [pid 7486] close(16) = -1 EBADF (Bad file descriptor) [pid 7486] close(17) = -1 EBADF (Bad file descriptor) [pid 7486] close(18) = -1 EBADF (Bad file descriptor) [pid 7486] close(19) = -1 EBADF (Bad file descriptor) [pid 7486] close(20) = -1 EBADF (Bad file descriptor) [pid 7486] close(21) = -1 EBADF (Bad file descriptor) [pid 7486] close(22) = -1 EBADF (Bad file descriptor) [pid 7486] close(23) = -1 EBADF (Bad file descriptor) [pid 7486] close(24) = -1 EBADF (Bad file descriptor) [pid 7486] close(25) = -1 EBADF (Bad file descriptor) [pid 7486] close(26) = -1 EBADF (Bad file descriptor) [pid 7486] close(27) = -1 EBADF (Bad file descriptor) [pid 7486] close(28) = -1 EBADF (Bad file descriptor) [pid 7486] close(29) = -1 EBADF (Bad file descriptor) [pid 7486] exit_group(0 [pid 7504] <... futex resumed>) = ? [pid 7487] <... futex resumed>) = ? [pid 7486] <... exit_group resumed>) = ? [pid 7504] +++ exited with 0 +++ [pid 7487] +++ exited with 0 +++ [pid 7486] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=389, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./129/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./129/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./129/cgroup.cpu") = 0 [pid 5007] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./129/binderfs") = 0 [pid 5007] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./129/file0") = 0 [pid 5007] umount2("./129/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./129/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./129/cgroup") = 0 [pid 5007] umount2("./129/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./129/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./129/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./129") = 0 [pid 5007] mkdir("./130", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 392 ./strace-static-x86_64: Process 7505 attached [pid 7505] set_robust_list(0x5555571235e0, 24) = 0 [pid 7505] chdir("./130") = 0 [pid 7505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7505] setpgid(0, 0) = 0 [pid 7505] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7505] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7505] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7505] write(3, "1000", 4) = 4 [pid 7505] close(3) = 0 [pid 7505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7505] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7505] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7505] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7506 attached , parent_tid=[393], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 393 [pid 7505] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7506] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7506] memfd_create("syzkaller", 0) = 3 [pid 7506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7506] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7506] close(3) = 0 [pid 7506] mkdir("./file0", 0777) = 0 [ 171.220946][ T7506] loop0: detected capacity change from 0 to 32768 [ 171.232202][ T7506] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7506) [ 171.249154][ T7506] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 171.257980][ T7506] BTRFS info (device loop0): using free space tree [pid 7506] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7506] chdir("./file0") = 0 [pid 7506] ioctl(4, LOOP_CLR_FD) = 0 [pid 7506] close(4) = 0 [pid 7506] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = 0 [pid 7505] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7506] <... futex resumed>) = 1 [pid 7506] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7506] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = 0 [pid 7505] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7506] <... futex resumed>) = 1 [ 171.279266][ T7506] BTRFS info (device loop0): enabling ssd optimizations [ 171.286415][ T7506] BTRFS info (device loop0): auto enabling async discard [ 171.312069][ T7506] BTRFS info (device loop0): balance: start -s [pid 7506] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7505] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7505] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7505] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7505] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7523 attached , parent_tid=[394], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 394 [pid 7523] set_robust_list(0x7fd089ba69e0, 24 [pid 7505] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7523] <... set_robust_list resumed>) = 0 [pid 7523] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7523] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 1 [pid 7505] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7505] <... futex resumed>) = 0 [ 171.321947][ T7506] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7505] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 171.394011][ T7506] BTRFS info (device loop0): balance: ended with status: 0 [pid 7506] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7506] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7506] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] <... ioctl resumed>) = 0 [pid 7523] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] close(3 [pid 7523] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] <... close resumed>) = 0 [pid 7505] close(4) = 0 [pid 7505] close(5) = 0 [pid 7505] close(6) = -1 EBADF (Bad file descriptor) [pid 7505] close(7) = -1 EBADF (Bad file descriptor) [pid 7505] close(8) = -1 EBADF (Bad file descriptor) [pid 7505] close(9) = -1 EBADF (Bad file descriptor) [pid 7505] close(10) = -1 EBADF (Bad file descriptor) [pid 7505] close(11) = -1 EBADF (Bad file descriptor) [pid 7505] close(12) = -1 EBADF (Bad file descriptor) [pid 7505] close(13) = -1 EBADF (Bad file descriptor) [pid 7505] close(14) = -1 EBADF (Bad file descriptor) [pid 7505] close(15) = -1 EBADF (Bad file descriptor) [pid 7505] close(16) = -1 EBADF (Bad file descriptor) [pid 7505] close(17) = -1 EBADF (Bad file descriptor) [pid 7505] close(18) = -1 EBADF (Bad file descriptor) [pid 7505] close(19) = -1 EBADF (Bad file descriptor) [pid 7505] close(20) = -1 EBADF (Bad file descriptor) [pid 7505] close(21) = -1 EBADF (Bad file descriptor) [pid 7505] close(22) = -1 EBADF (Bad file descriptor) [pid 7505] close(23) = -1 EBADF (Bad file descriptor) [pid 7505] close(24) = -1 EBADF (Bad file descriptor) [pid 7505] close(25) = -1 EBADF (Bad file descriptor) [pid 7505] close(26) = -1 EBADF (Bad file descriptor) [pid 7505] close(27) = -1 EBADF (Bad file descriptor) [pid 7505] close(28) = -1 EBADF (Bad file descriptor) [pid 7505] close(29) = -1 EBADF (Bad file descriptor) [pid 7505] exit_group(0 [pid 7506] <... futex resumed>) = ? [pid 7523] <... futex resumed>) = ? [pid 7506] +++ exited with 0 +++ [pid 7505] <... exit_group resumed>) = ? [pid 7523] +++ exited with 0 +++ [pid 7505] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=392, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5007] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./130/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./130/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./130/cgroup.cpu") = 0 [pid 5007] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./130/binderfs") = 0 [pid 5007] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./130/file0") = 0 [pid 5007] umount2("./130/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./130/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./130/cgroup") = 0 [pid 5007] umount2("./130/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./130/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./130/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./130") = 0 [pid 5007] mkdir("./131", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 395 ./strace-static-x86_64: Process 7524 attached [pid 7524] set_robust_list(0x5555571235e0, 24) = 0 [pid 7524] chdir("./131") = 0 [pid 7524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7524] setpgid(0, 0) = 0 [pid 7524] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7524] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7524] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7524] write(3, "1000", 4) = 4 [pid 7524] close(3) = 0 [pid 7524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7524] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7524] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7524] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7525 attached [pid 7525] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7525] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7524] <... clone resumed>, parent_tid=[396], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 396 [pid 7524] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7525] <... futex resumed>) = 0 [pid 7524] <... futex resumed>) = 1 [pid 7525] memfd_create("syzkaller", 0) = 3 [pid 7524] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7525] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7525] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7525] close(3) = 0 [pid 7525] mkdir("./file0", 0777) = 0 [ 171.874929][ T7525] loop0: detected capacity change from 0 to 32768 [ 171.886862][ T7525] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7525) [ 171.904137][ T7525] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 171.913157][ T7525] BTRFS info (device loop0): using free space tree [pid 7525] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7525] chdir("./file0") = 0 [pid 7525] ioctl(4, LOOP_CLR_FD) = 0 [pid 7525] close(4) = 0 [pid 7525] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7524] <... futex resumed>) = 0 [pid 7525] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7524] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7524] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7525] <... openat resumed>) = 4 [pid 7525] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7524] <... futex resumed>) = 0 [pid 7524] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7525] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7524] <... futex resumed>) = 0 [ 171.932186][ T7525] BTRFS info (device loop0): enabling ssd optimizations [ 171.939502][ T7525] BTRFS info (device loop0): auto enabling async discard [pid 7524] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7524] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7524] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7524] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7542 attached , parent_tid=[397], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 397 [pid 7542] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7524] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] openat(AT_FDCWD, ".", O_RDONLY [pid 7524] <... futex resumed>) = 0 [pid 7542] <... openat resumed>) = 5 [pid 7524] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7542] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7524] <... futex resumed>) = 0 [pid 7542] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7524] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 171.986790][ T7525] BTRFS info (device loop0): balance: start -s [ 171.996430][ T7525] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7524] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7525] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7525] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 172.056660][ T7525] BTRFS info (device loop0): balance: ended with status: 0 [pid 7525] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7542] <... ioctl resumed>) = 0 [pid 7542] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7524] close(3 [pid 7542] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7524] <... close resumed>) = 0 [pid 7524] close(4) = 0 [pid 7524] close(5) = 0 [pid 7524] close(6) = -1 EBADF (Bad file descriptor) [pid 7524] close(7) = -1 EBADF (Bad file descriptor) [pid 7524] close(8) = -1 EBADF (Bad file descriptor) [pid 7524] close(9) = -1 EBADF (Bad file descriptor) [pid 7524] close(10) = -1 EBADF (Bad file descriptor) [pid 7524] close(11) = -1 EBADF (Bad file descriptor) [pid 7524] close(12) = -1 EBADF (Bad file descriptor) [pid 7524] close(13) = -1 EBADF (Bad file descriptor) [pid 7524] close(14) = -1 EBADF (Bad file descriptor) [pid 7524] close(15) = -1 EBADF (Bad file descriptor) [pid 7524] close(16) = -1 EBADF (Bad file descriptor) [pid 7524] close(17) = -1 EBADF (Bad file descriptor) [pid 7524] close(18) = -1 EBADF (Bad file descriptor) [pid 7524] close(19) = -1 EBADF (Bad file descriptor) [pid 7524] close(20) = -1 EBADF (Bad file descriptor) [pid 7524] close(21) = -1 EBADF (Bad file descriptor) [pid 7524] close(22) = -1 EBADF (Bad file descriptor) [pid 7524] close(23) = -1 EBADF (Bad file descriptor) [pid 7524] close(24) = -1 EBADF (Bad file descriptor) [pid 7524] close(25) = -1 EBADF (Bad file descriptor) [pid 7524] close(26) = -1 EBADF (Bad file descriptor) [pid 7524] close(27) = -1 EBADF (Bad file descriptor) [pid 7524] close(28) = -1 EBADF (Bad file descriptor) [pid 7524] close(29) = -1 EBADF (Bad file descriptor) [pid 7524] exit_group(0 [pid 7542] <... futex resumed>) = ? [pid 7525] <... futex resumed>) = ? [pid 7524] <... exit_group resumed>) = ? [pid 7542] +++ exited with 0 +++ [pid 7525] +++ exited with 0 +++ [pid 7524] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=395, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./131/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./131/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./131/cgroup.cpu") = 0 [pid 5007] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./131/binderfs") = 0 [pid 5007] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./131/file0") = 0 [pid 5007] umount2("./131/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./131/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./131/cgroup") = 0 [pid 5007] umount2("./131/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./131/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./131/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./131") = 0 [pid 5007] mkdir("./132", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7543 attached [pid 7543] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 398 [pid 7543] <... set_robust_list resumed>) = 0 [pid 7543] chdir("./132") = 0 [pid 7543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7543] setpgid(0, 0) = 0 [pid 7543] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7543] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7543] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7543] write(3, "1000", 4) = 4 [pid 7543] close(3) = 0 [pid 7543] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7543] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7543] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7543] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7544 attached [pid 7544] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7544] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] <... clone resumed>, parent_tid=[399], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 399 [pid 7543] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 1 [pid 7544] memfd_create("syzkaller", 0) = 3 [pid 7543] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7544] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7544] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7544] close(3) = 0 [pid 7544] mkdir("./file0", 0777) = 0 [ 172.570000][ T7544] loop0: detected capacity change from 0 to 32768 [ 172.581229][ T7544] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7544) [ 172.599106][ T7544] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 172.607914][ T7544] BTRFS info (device loop0): using free space tree [pid 7544] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7544] chdir("./file0") = 0 [pid 7544] ioctl(4, LOOP_CLR_FD) = 0 [pid 7544] close(4) = 0 [pid 7544] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7543] <... futex resumed>) = 0 [pid 7544] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7543] <... futex resumed>) = 0 [pid 7544] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7543] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7544] <... openat resumed>) = 4 [pid 7544] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7543] <... futex resumed>) = 0 [pid 7544] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7543] <... futex resumed>) = 0 [pid 7544] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 172.628327][ T7544] BTRFS info (device loop0): enabling ssd optimizations [ 172.635626][ T7544] BTRFS info (device loop0): auto enabling async discard [ 172.667163][ T7544] BTRFS info (device loop0): balance: start -s [pid 7543] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7543] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7543] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7543] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[400], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 400 [pid 7543] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7561 attached [pid 7561] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7561] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7561] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] <... futex resumed>) = 0 [pid 7561] <... futex resumed>) = 1 [pid 7543] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7561] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7543] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7544] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7544] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 172.676695][ T7544] BTRFS info (device loop0): relocating block group 1048576 flags system [ 172.707249][ T7544] BTRFS info (device loop0): balance: ended with status: 0 [pid 7544] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7561] <... ioctl resumed>) = 0 [pid 7561] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] close(3 [pid 7561] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] <... close resumed>) = 0 [pid 7543] close(4) = 0 [pid 7543] close(5) = 0 [pid 7543] close(6) = -1 EBADF (Bad file descriptor) [pid 7543] close(7) = -1 EBADF (Bad file descriptor) [pid 7543] close(8) = -1 EBADF (Bad file descriptor) [pid 7543] close(9) = -1 EBADF (Bad file descriptor) [pid 7543] close(10) = -1 EBADF (Bad file descriptor) [pid 7543] close(11) = -1 EBADF (Bad file descriptor) [pid 7543] close(12) = -1 EBADF (Bad file descriptor) [pid 7543] close(13) = -1 EBADF (Bad file descriptor) [pid 7543] close(14) = -1 EBADF (Bad file descriptor) [pid 7543] close(15) = -1 EBADF (Bad file descriptor) [pid 7543] close(16) = -1 EBADF (Bad file descriptor) [pid 7543] close(17) = -1 EBADF (Bad file descriptor) [pid 7543] close(18) = -1 EBADF (Bad file descriptor) [pid 7543] close(19) = -1 EBADF (Bad file descriptor) [pid 7543] close(20) = -1 EBADF (Bad file descriptor) [pid 7543] close(21) = -1 EBADF (Bad file descriptor) [pid 7543] close(22) = -1 EBADF (Bad file descriptor) [pid 7543] close(23) = -1 EBADF (Bad file descriptor) [pid 7543] close(24) = -1 EBADF (Bad file descriptor) [pid 7543] close(25) = -1 EBADF (Bad file descriptor) [pid 7543] close(26) = -1 EBADF (Bad file descriptor) [pid 7543] close(27) = -1 EBADF (Bad file descriptor) [pid 7543] close(28) = -1 EBADF (Bad file descriptor) [pid 7543] close(29) = -1 EBADF (Bad file descriptor) [pid 7543] exit_group(0 [pid 7544] <... futex resumed>) = ? [pid 7561] <... futex resumed>) = ? [pid 7543] <... exit_group resumed>) = ? [pid 7544] +++ exited with 0 +++ [pid 7561] +++ exited with 0 +++ [pid 7543] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=398, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./132/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./132/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./132/cgroup.cpu") = 0 [pid 5007] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./132/binderfs") = 0 [pid 5007] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./132/file0") = 0 [pid 5007] umount2("./132/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./132/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./132/cgroup") = 0 [pid 5007] umount2("./132/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./132/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./132/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./132") = 0 [pid 5007] mkdir("./133", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7566 attached [pid 7566] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 401 [pid 7566] <... set_robust_list resumed>) = 0 [pid 7566] chdir("./133") = 0 [pid 7566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7566] setpgid(0, 0) = 0 [pid 7566] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7566] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7566] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7566] write(3, "1000", 4) = 4 [pid 7566] close(3) = 0 [pid 7566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7566] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7566] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7566] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7567 attached [pid 7567] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7567] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] <... clone resumed>, parent_tid=[402], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 402 [pid 7566] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = 0 [pid 7566] <... futex resumed>) = 1 [pid 7567] memfd_create("syzkaller", 0 [pid 7566] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7567] <... memfd_create resumed>) = 3 [pid 7567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7567] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7567] close(3) = 0 [pid 7567] mkdir("./file0", 0777) = 0 [ 173.256345][ T7567] loop0: detected capacity change from 0 to 32768 [ 173.267722][ T7567] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7567) [ 173.284045][ T7567] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 173.293328][ T7567] BTRFS info (device loop0): using free space tree [pid 7567] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7567] chdir("./file0") = 0 [pid 7567] ioctl(4, LOOP_CLR_FD) = 0 [pid 7567] close(4) = 0 [pid 7567] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7567] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] <... futex resumed>) = 0 [pid 7566] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = 0 [pid 7566] <... futex resumed>) = 1 [pid 7567] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7566] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7567] <... openat resumed>) = 4 [pid 7567] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7566] <... futex resumed>) = 0 [pid 7567] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7567] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7566] <... futex resumed>) = 0 [ 173.313936][ T7567] BTRFS info (device loop0): enabling ssd optimizations [ 173.321275][ T7567] BTRFS info (device loop0): auto enabling async discard [pid 7566] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7566] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7566] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7566] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[403], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 403 [pid 7566] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7566] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7584 attached [pid 7584] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7584] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7584] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7566] <... futex resumed>) = 0 [pid 7584] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7566] <... futex resumed>) = 0 [pid 7584] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 173.376607][ T7567] BTRFS info (device loop0): balance: start -s [ 173.384317][ T7567] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7566] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7567] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7567] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7567] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 173.446536][ T7567] BTRFS info (device loop0): balance: ended with status: 0 [pid 7584] <... ioctl resumed>) = 0 [pid 7584] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7584] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] close(3) = 0 [pid 7566] close(4) = 0 [pid 7566] close(5) = 0 [pid 7566] close(6) = -1 EBADF (Bad file descriptor) [pid 7566] close(7) = -1 EBADF (Bad file descriptor) [pid 7566] close(8) = -1 EBADF (Bad file descriptor) [pid 7566] close(9) = -1 EBADF (Bad file descriptor) [pid 7566] close(10) = -1 EBADF (Bad file descriptor) [pid 7566] close(11) = -1 EBADF (Bad file descriptor) [pid 7566] close(12) = -1 EBADF (Bad file descriptor) [pid 7566] close(13) = -1 EBADF (Bad file descriptor) [pid 7566] close(14) = -1 EBADF (Bad file descriptor) [pid 7566] close(15) = -1 EBADF (Bad file descriptor) [pid 7566] close(16) = -1 EBADF (Bad file descriptor) [pid 7566] close(17) = -1 EBADF (Bad file descriptor) [pid 7566] close(18) = -1 EBADF (Bad file descriptor) [pid 7566] close(19) = -1 EBADF (Bad file descriptor) [pid 7566] close(20) = -1 EBADF (Bad file descriptor) [pid 7566] close(21) = -1 EBADF (Bad file descriptor) [pid 7566] close(22) = -1 EBADF (Bad file descriptor) [pid 7566] close(23) = -1 EBADF (Bad file descriptor) [pid 7566] close(24) = -1 EBADF (Bad file descriptor) [pid 7566] close(25) = -1 EBADF (Bad file descriptor) [pid 7566] close(26) = -1 EBADF (Bad file descriptor) [pid 7566] close(27) = -1 EBADF (Bad file descriptor) [pid 7566] close(28) = -1 EBADF (Bad file descriptor) [pid 7566] close(29) = -1 EBADF (Bad file descriptor) [pid 7566] exit_group(0 [pid 7584] <... futex resumed>) = ? [pid 7567] <... futex resumed>) = ? [pid 7566] <... exit_group resumed>) = ? [pid 7584] +++ exited with 0 +++ [pid 7567] +++ exited with 0 +++ [pid 7566] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=401, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./133/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./133/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./133/cgroup.cpu") = 0 [pid 5007] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./133/binderfs") = 0 [pid 5007] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./133/file0") = 0 [pid 5007] umount2("./133/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./133/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./133/cgroup") = 0 [pid 5007] umount2("./133/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./133/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./133/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./133") = 0 [pid 5007] mkdir("./134", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7585 attached [pid 7585] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 404 [pid 7585] chdir("./134") = 0 [pid 7585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7585] setpgid(0, 0) = 0 [pid 7585] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7585] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7585] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7585] write(3, "1000", 4) = 4 [pid 7585] close(3) = 0 [pid 7585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7585] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7585] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7585] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7586 attached [pid 7586] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7586] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] <... clone resumed>, parent_tid=[405], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 405 [pid 7585] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] <... futex resumed>) = 0 [pid 7585] <... futex resumed>) = 1 [pid 7585] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7586] memfd_create("syzkaller", 0) = 3 [pid 7586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7586] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7586] close(3) = 0 [pid 7586] mkdir("./file0", 0777) = 0 [ 173.924031][ T7586] loop0: detected capacity change from 0 to 32768 [ 173.934657][ T7586] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7586) [ 173.951446][ T7586] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 173.960525][ T7586] BTRFS info (device loop0): using free space tree [pid 7586] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7586] chdir("./file0") = 0 [pid 7586] ioctl(4, LOOP_CLR_FD) = 0 [pid 7586] close(4) = 0 [pid 7586] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7586] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7585] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] <... openat resumed>) = 4 [pid 7586] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7586] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 173.981063][ T7586] BTRFS info (device loop0): enabling ssd optimizations [ 173.988272][ T7586] BTRFS info (device loop0): auto enabling async discard [pid 7586] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7585] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7585] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7585] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[406], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 406 [pid 7585] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7603 attached [pid 7603] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7603] openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 174.033906][ T7586] BTRFS info (device loop0): balance: start -s [ 174.042987][ T7586] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7603] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7585] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7603] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 174.089658][ T7586] BTRFS info (device loop0): balance: ended with status: 0 [pid 7586] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7586] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] <... ioctl resumed>) = 0 [pid 7603] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] close(3 [pid 7603] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] <... close resumed>) = 0 [pid 7585] close(4) = 0 [pid 7585] close(5) = 0 [pid 7585] close(6) = -1 EBADF (Bad file descriptor) [pid 7585] close(7) = -1 EBADF (Bad file descriptor) [pid 7585] close(8) = -1 EBADF (Bad file descriptor) [pid 7585] close(9) = -1 EBADF (Bad file descriptor) [pid 7585] close(10) = -1 EBADF (Bad file descriptor) [pid 7585] close(11) = -1 EBADF (Bad file descriptor) [pid 7585] close(12) = -1 EBADF (Bad file descriptor) [pid 7585] close(13) = -1 EBADF (Bad file descriptor) [pid 7585] close(14) = -1 EBADF (Bad file descriptor) [pid 7585] close(15) = -1 EBADF (Bad file descriptor) [pid 7585] close(16) = -1 EBADF (Bad file descriptor) [pid 7585] close(17) = -1 EBADF (Bad file descriptor) [pid 7585] close(18) = -1 EBADF (Bad file descriptor) [pid 7585] close(19) = -1 EBADF (Bad file descriptor) [pid 7585] close(20) = -1 EBADF (Bad file descriptor) [pid 7585] close(21) = -1 EBADF (Bad file descriptor) [pid 7585] close(22) = -1 EBADF (Bad file descriptor) [pid 7585] close(23) = -1 EBADF (Bad file descriptor) [pid 7585] close(24) = -1 EBADF (Bad file descriptor) [pid 7585] close(25) = -1 EBADF (Bad file descriptor) [pid 7585] close(26) = -1 EBADF (Bad file descriptor) [pid 7585] close(27) = -1 EBADF (Bad file descriptor) [pid 7585] close(28) = -1 EBADF (Bad file descriptor) [pid 7585] close(29) = -1 EBADF (Bad file descriptor) [pid 7585] exit_group(0 [pid 7586] <... futex resumed>) = ? [pid 7603] <... futex resumed>) = ? [pid 7585] <... exit_group resumed>) = ? [pid 7586] +++ exited with 0 +++ [pid 7603] +++ exited with 0 +++ [pid 7585] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=404, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5007] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./134/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./134/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./134/cgroup.cpu") = 0 [pid 5007] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./134/binderfs") = 0 [pid 5007] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./134/file0") = 0 [pid 5007] umount2("./134/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./134/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./134/cgroup") = 0 [pid 5007] umount2("./134/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./134/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./134/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./134") = 0 [pid 5007] mkdir("./135", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 407 ./strace-static-x86_64: Process 7604 attached [pid 7604] set_robust_list(0x5555571235e0, 24) = 0 [pid 7604] chdir("./135") = 0 [pid 7604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7604] setpgid(0, 0) = 0 [pid 7604] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7604] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7604] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7604] write(3, "1000", 4) = 4 [pid 7604] close(3) = 0 [pid 7604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7604] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7604] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7604] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7605 attached [pid 7605] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7604] <... clone resumed>, parent_tid=[408], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 408 [pid 7604] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] memfd_create("syzkaller", 0) = 3 [pid 7605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7604] <... futex resumed>) = 0 [pid 7604] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7605] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7605] close(3) = 0 [pid 7605] mkdir("./file0", 0777) = 0 [ 174.625491][ T7605] loop0: detected capacity change from 0 to 32768 [ 174.635771][ T7605] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7605) [ 174.651764][ T7605] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 174.660631][ T7605] BTRFS info (device loop0): using free space tree [pid 7605] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7605] chdir("./file0") = 0 [pid 7605] ioctl(4, LOOP_CLR_FD) = 0 [pid 7605] close(4) = 0 [pid 7605] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = 0 [pid 7604] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7604] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] <... futex resumed>) = 1 [pid 7605] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7605] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = 0 [pid 7604] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7604] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] <... futex resumed>) = 1 [ 174.682101][ T7605] BTRFS info (device loop0): enabling ssd optimizations [ 174.689299][ T7605] BTRFS info (device loop0): auto enabling async discard [pid 7605] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7604] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7604] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7604] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7622 attached [pid 7622] set_robust_list(0x7fd089ba69e0, 24 [pid 7604] <... clone resumed>, parent_tid=[409], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 409 [pid 7622] <... set_robust_list resumed>) = 0 [pid 7604] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7622] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = 0 [pid 7604] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7622] <... futex resumed>) = 0 [pid 7604] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7604] <... futex resumed>) = 0 [ 174.737071][ T7605] BTRFS info (device loop0): balance: start -s [ 174.746449][ T7605] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7604] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 174.821063][ T7605] BTRFS info (device loop0): balance: ended with status: 0 [pid 7622] <... ioctl resumed>) = 0 [pid 7605] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7605] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7622] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7622] <... futex resumed>) = 0 [pid 7622] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7604] close(3) = 0 [pid 7604] close(4) = 0 [pid 7604] close(5) = 0 [pid 7604] close(6) = -1 EBADF (Bad file descriptor) [pid 7604] close(7) = -1 EBADF (Bad file descriptor) [pid 7604] close(8) = -1 EBADF (Bad file descriptor) [pid 7604] close(9) = -1 EBADF (Bad file descriptor) [pid 7604] close(10) = -1 EBADF (Bad file descriptor) [pid 7604] close(11) = -1 EBADF (Bad file descriptor) [pid 7604] close(12) = -1 EBADF (Bad file descriptor) [pid 7604] close(13) = -1 EBADF (Bad file descriptor) [pid 7604] close(14) = -1 EBADF (Bad file descriptor) [pid 7604] close(15) = -1 EBADF (Bad file descriptor) [pid 7604] close(16) = -1 EBADF (Bad file descriptor) [pid 7604] close(17) = -1 EBADF (Bad file descriptor) [pid 7604] close(18) = -1 EBADF (Bad file descriptor) [pid 7604] close(19) = -1 EBADF (Bad file descriptor) [pid 7604] close(20) = -1 EBADF (Bad file descriptor) [pid 7604] close(21) = -1 EBADF (Bad file descriptor) [pid 7604] close(22) = -1 EBADF (Bad file descriptor) [pid 7604] close(23) = -1 EBADF (Bad file descriptor) [pid 7604] close(24) = -1 EBADF (Bad file descriptor) [pid 7604] close(25) = -1 EBADF (Bad file descriptor) [pid 7604] close(26) = -1 EBADF (Bad file descriptor) [pid 7604] close(27) = -1 EBADF (Bad file descriptor) [pid 7604] close(28) = -1 EBADF (Bad file descriptor) [pid 7604] close(29) = -1 EBADF (Bad file descriptor) [pid 7604] exit_group(0 [pid 7622] <... futex resumed>) = ? [pid 7605] <... futex resumed>) = ? [pid 7604] <... exit_group resumed>) = ? [pid 7622] +++ exited with 0 +++ [pid 7605] +++ exited with 0 +++ [pid 7604] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./135/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./135/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./135/cgroup.cpu") = 0 [pid 5007] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./135/binderfs") = 0 [pid 5007] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./135/file0") = 0 [pid 5007] umount2("./135/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./135/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./135/cgroup") = 0 [pid 5007] umount2("./135/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./135/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./135/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./135") = 0 [pid 5007] mkdir("./136", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7623 attached , child_tidptr=0x5555571235d0) = 410 [pid 7623] set_robust_list(0x5555571235e0, 24) = 0 [pid 7623] chdir("./136") = 0 [pid 7623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7623] setpgid(0, 0) = 0 [pid 7623] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7623] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7623] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7623] write(3, "1000", 4) = 4 [pid 7623] close(3) = 0 [pid 7623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7623] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7623] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7623] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7624 attached [pid 7624] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7623] <... clone resumed>, parent_tid=[411], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 411 [pid 7623] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7624] memfd_create("syzkaller", 0) = 3 [pid 7624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7624] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7624] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7624] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7624] close(3) = 0 [pid 7624] mkdir("./file0", 0777) = 0 [ 175.292827][ T7624] loop0: detected capacity change from 0 to 32768 [ 175.303927][ T7624] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7624) [ 175.321006][ T7624] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 175.330004][ T7624] BTRFS info (device loop0): using free space tree [pid 7624] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7624] chdir("./file0") = 0 [pid 7624] ioctl(4, LOOP_CLR_FD) = 0 [pid 7624] close(4) = 0 [pid 7624] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7624] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7623] <... futex resumed>) = 0 [pid 7623] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] <... futex resumed>) = 0 [pid 7623] <... futex resumed>) = 1 [pid 7624] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7623] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7624] <... openat resumed>) = 4 [pid 7624] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7623] <... futex resumed>) = 0 [pid 7624] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7623] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 175.350814][ T7624] BTRFS info (device loop0): enabling ssd optimizations [ 175.358584][ T7624] BTRFS info (device loop0): auto enabling async discard [pid 7623] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7623] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7623] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7623] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[412], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 412 [pid 7623] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7641 attached [pid 7641] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7641] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7641] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7623] <... futex resumed>) = 0 [pid 7641] <... futex resumed>) = 1 [pid 7641] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7623] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 175.406985][ T7624] BTRFS info (device loop0): balance: start -s [ 175.416535][ T7624] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7623] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7624] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7624] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 175.477396][ T7624] BTRFS info (device loop0): balance: ended with status: 0 [pid 7624] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7641] <... ioctl resumed>) = 0 [pid 7641] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7641] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7623] close(3) = 0 [pid 7623] close(4) = 0 [pid 7623] close(5) = 0 [pid 7623] close(6) = -1 EBADF (Bad file descriptor) [pid 7623] close(7) = -1 EBADF (Bad file descriptor) [pid 7623] close(8) = -1 EBADF (Bad file descriptor) [pid 7623] close(9) = -1 EBADF (Bad file descriptor) [pid 7623] close(10) = -1 EBADF (Bad file descriptor) [pid 7623] close(11) = -1 EBADF (Bad file descriptor) [pid 7623] close(12) = -1 EBADF (Bad file descriptor) [pid 7623] close(13) = -1 EBADF (Bad file descriptor) [pid 7623] close(14) = -1 EBADF (Bad file descriptor) [pid 7623] close(15) = -1 EBADF (Bad file descriptor) [pid 7623] close(16) = -1 EBADF (Bad file descriptor) [pid 7623] close(17) = -1 EBADF (Bad file descriptor) [pid 7623] close(18) = -1 EBADF (Bad file descriptor) [pid 7623] close(19) = -1 EBADF (Bad file descriptor) [pid 7623] close(20) = -1 EBADF (Bad file descriptor) [pid 7623] close(21) = -1 EBADF (Bad file descriptor) [pid 7623] close(22) = -1 EBADF (Bad file descriptor) [pid 7623] close(23) = -1 EBADF (Bad file descriptor) [pid 7623] close(24) = -1 EBADF (Bad file descriptor) [pid 7623] close(25) = -1 EBADF (Bad file descriptor) [pid 7623] close(26) = -1 EBADF (Bad file descriptor) [pid 7623] close(27) = -1 EBADF (Bad file descriptor) [pid 7623] close(28) = -1 EBADF (Bad file descriptor) [pid 7623] close(29) = -1 EBADF (Bad file descriptor) [pid 7623] exit_group(0 [pid 7641] <... futex resumed>) = ? [pid 7624] <... futex resumed>) = ? [pid 7623] <... exit_group resumed>) = ? [pid 7641] +++ exited with 0 +++ [pid 7624] +++ exited with 0 +++ [pid 7623] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=410, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./136/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./136/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./136/cgroup.cpu") = 0 [pid 5007] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./136/binderfs") = 0 [pid 5007] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./136/file0") = 0 [pid 5007] umount2("./136/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./136/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./136/cgroup") = 0 [pid 5007] umount2("./136/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./136/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./136/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./136") = 0 [pid 5007] mkdir("./137", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7642 attached , child_tidptr=0x5555571235d0) = 413 [pid 7642] set_robust_list(0x5555571235e0, 24) = 0 [pid 7642] chdir("./137") = 0 [pid 7642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7642] setpgid(0, 0) = 0 [pid 7642] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7642] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7642] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7642] write(3, "1000", 4) = 4 [pid 7642] close(3) = 0 [pid 7642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7642] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7642] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7642] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[414], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 414 [pid 7642] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7643 attached [pid 7643] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7643] memfd_create("syzkaller", 0) = 3 [pid 7643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7643] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7643] close(3) = 0 [pid 7643] mkdir("./file0", 0777) = 0 [ 175.991573][ T7643] loop0: detected capacity change from 0 to 32768 [ 176.003275][ T7643] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7643) [ 176.019679][ T7643] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 176.028804][ T7643] BTRFS info (device loop0): using free space tree [pid 7643] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7643] chdir("./file0") = 0 [pid 7643] ioctl(4, LOOP_CLR_FD) = 0 [pid 7643] close(4) = 0 [pid 7643] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] <... openat resumed>) = 4 [pid 7643] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7642] <... futex resumed>) = 0 [ 176.050931][ T7643] BTRFS info (device loop0): enabling ssd optimizations [ 176.058072][ T7643] BTRFS info (device loop0): auto enabling async discard [pid 7642] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7642] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7642] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7642] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7660 attached [pid 7660] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7660] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] <... clone resumed>, parent_tid=[415], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 415 [pid 7642] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7660] <... futex resumed>) = 0 [pid 7642] <... futex resumed>) = 1 [pid 7660] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7642] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7660] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7660] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7642] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7660] <... futex resumed>) = 0 [pid 7642] <... futex resumed>) = 1 [pid 7660] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 176.115432][ T7643] BTRFS info (device loop0): balance: start -s [ 176.124297][ T7643] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7642] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7643] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7643] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 176.177347][ T7643] BTRFS info (device loop0): balance: ended with status: 0 [pid 7660] <... ioctl resumed>) = 0 [pid 7660] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7660] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] close(3) = 0 [pid 7642] close(4) = 0 [pid 7642] close(5) = 0 [pid 7642] close(6) = -1 EBADF (Bad file descriptor) [pid 7642] close(7) = -1 EBADF (Bad file descriptor) [pid 7642] close(8) = -1 EBADF (Bad file descriptor) [pid 7642] close(9) = -1 EBADF (Bad file descriptor) [pid 7642] close(10) = -1 EBADF (Bad file descriptor) [pid 7642] close(11) = -1 EBADF (Bad file descriptor) [pid 7642] close(12) = -1 EBADF (Bad file descriptor) [pid 7642] close(13) = -1 EBADF (Bad file descriptor) [pid 7642] close(14) = -1 EBADF (Bad file descriptor) [pid 7642] close(15) = -1 EBADF (Bad file descriptor) [pid 7642] close(16) = -1 EBADF (Bad file descriptor) [pid 7642] close(17) = -1 EBADF (Bad file descriptor) [pid 7642] close(18) = -1 EBADF (Bad file descriptor) [pid 7642] close(19) = -1 EBADF (Bad file descriptor) [pid 7642] close(20) = -1 EBADF (Bad file descriptor) [pid 7642] close(21) = -1 EBADF (Bad file descriptor) [pid 7642] close(22) = -1 EBADF (Bad file descriptor) [pid 7642] close(23) = -1 EBADF (Bad file descriptor) [pid 7642] close(24) = -1 EBADF (Bad file descriptor) [pid 7642] close(25) = -1 EBADF (Bad file descriptor) [pid 7642] close(26) = -1 EBADF (Bad file descriptor) [pid 7642] close(27) = -1 EBADF (Bad file descriptor) [pid 7642] close(28) = -1 EBADF (Bad file descriptor) [pid 7642] close(29) = -1 EBADF (Bad file descriptor) [pid 7642] exit_group(0 [pid 7643] <... futex resumed>) = ? [pid 7660] <... futex resumed>) = ? [pid 7642] <... exit_group resumed>) = ? [pid 7660] +++ exited with 0 +++ [pid 7643] +++ exited with 0 +++ [pid 7642] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=413, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./137/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./137/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./137/cgroup.cpu") = 0 [pid 5007] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./137/binderfs") = 0 [pid 5007] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./137/file0") = 0 [pid 5007] umount2("./137/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./137/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./137/cgroup") = 0 [pid 5007] umount2("./137/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./137/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./137/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./137") = 0 [pid 5007] mkdir("./138", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7661 attached [pid 7661] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 416 [pid 7661] <... set_robust_list resumed>) = 0 [pid 7661] chdir("./138") = 0 [pid 7661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7661] setpgid(0, 0) = 0 [pid 7661] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7661] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7661] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7661] write(3, "1000", 4) = 4 [pid 7661] close(3) = 0 [pid 7661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7661] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7661] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7661] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7662 attached [pid 7662] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7661] <... clone resumed>, parent_tid=[417], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 417 [pid 7662] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7661] <... futex resumed>) = 0 [pid 7661] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7662] memfd_create("syzkaller", 0) = 3 [pid 7662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7662] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7662] close(3) = 0 [pid 7662] mkdir("./file0", 0777) = 0 [ 176.667327][ T7662] loop0: detected capacity change from 0 to 32768 [ 176.678712][ T7662] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7662) [ 176.695773][ T7662] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 176.704529][ T7662] BTRFS info (device loop0): using free space tree [pid 7662] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7662] chdir("./file0") = 0 [pid 7662] ioctl(4, LOOP_CLR_FD) = 0 [pid 7662] close(4) = 0 [pid 7662] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7662] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] <... futex resumed>) = 0 [pid 7661] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] <... futex resumed>) = 0 [pid 7661] <... futex resumed>) = 1 [pid 7662] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7661] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7662] <... openat resumed>) = 4 [pid 7662] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7661] <... futex resumed>) = 0 [pid 7662] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7661] <... futex resumed>) = 0 [pid 7662] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 176.724963][ T7662] BTRFS info (device loop0): enabling ssd optimizations [ 176.732261][ T7662] BTRFS info (device loop0): auto enabling async discard [pid 7661] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7661] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7661] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7661] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7679 attached [pid 7679] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7679] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] <... clone resumed>, parent_tid=[418], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 418 [pid 7661] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] <... futex resumed>) = 0 [pid 7661] <... futex resumed>) = 1 [pid 7679] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7679] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7679] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7661] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] <... futex resumed>) = 0 [pid 7661] <... futex resumed>) = 1 [ 176.780975][ T7662] BTRFS info (device loop0): balance: start -s [ 176.790194][ T7662] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7679] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7661] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 176.875178][ T7662] BTRFS info (device loop0): balance: ended with status: 0 [pid 7662] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7679] <... ioctl resumed>) = 0 [pid 7662] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] <... futex resumed>) = 0 [pid 7679] <... futex resumed>) = 0 [pid 7662] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7679] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] close(3) = 0 [pid 7661] close(4) = 0 [pid 7661] close(5) = 0 [pid 7661] close(6) = -1 EBADF (Bad file descriptor) [pid 7661] close(7) = -1 EBADF (Bad file descriptor) [pid 7661] close(8) = -1 EBADF (Bad file descriptor) [pid 7661] close(9) = -1 EBADF (Bad file descriptor) [pid 7661] close(10) = -1 EBADF (Bad file descriptor) [pid 7661] close(11) = -1 EBADF (Bad file descriptor) [pid 7661] close(12) = -1 EBADF (Bad file descriptor) [pid 7661] close(13) = -1 EBADF (Bad file descriptor) [pid 7661] close(14) = -1 EBADF (Bad file descriptor) [pid 7661] close(15) = -1 EBADF (Bad file descriptor) [pid 7661] close(16) = -1 EBADF (Bad file descriptor) [pid 7661] close(17) = -1 EBADF (Bad file descriptor) [pid 7661] close(18) = -1 EBADF (Bad file descriptor) [pid 7661] close(19) = -1 EBADF (Bad file descriptor) [pid 7661] close(20) = -1 EBADF (Bad file descriptor) [pid 7661] close(21) = -1 EBADF (Bad file descriptor) [pid 7661] close(22) = -1 EBADF (Bad file descriptor) [pid 7661] close(23) = -1 EBADF (Bad file descriptor) [pid 7661] close(24) = -1 EBADF (Bad file descriptor) [pid 7661] close(25) = -1 EBADF (Bad file descriptor) [pid 7661] close(26) = -1 EBADF (Bad file descriptor) [pid 7661] close(27) = -1 EBADF (Bad file descriptor) [pid 7661] close(28) = -1 EBADF (Bad file descriptor) [pid 7661] close(29) = -1 EBADF (Bad file descriptor) [pid 7661] exit_group(0 [pid 7679] <... futex resumed>) = ? [pid 7662] <... futex resumed>) = ? [pid 7661] <... exit_group resumed>) = ? [pid 7679] +++ exited with 0 +++ [pid 7662] +++ exited with 0 +++ [pid 7661] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=416, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./138/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./138/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./138/cgroup.cpu") = 0 [pid 5007] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./138/binderfs") = 0 [pid 5007] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./138/file0") = 0 [pid 5007] umount2("./138/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./138/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./138/cgroup") = 0 [pid 5007] umount2("./138/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./138/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./138/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./138") = 0 [pid 5007] mkdir("./139", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 419 ./strace-static-x86_64: Process 7680 attached [pid 7680] set_robust_list(0x5555571235e0, 24) = 0 [pid 7680] chdir("./139") = 0 [pid 7680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7680] setpgid(0, 0) = 0 [pid 7680] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7680] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7680] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7680] write(3, "1000", 4) = 4 [pid 7680] close(3) = 0 [pid 7680] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7680] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7680] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7680] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[420], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 420 [pid 7680] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7680] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7681 attached [pid 7681] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7681] memfd_create("syzkaller", 0) = 3 [pid 7681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7681] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7681] close(3) = 0 [pid 7681] mkdir("./file0", 0777) = 0 [ 177.327331][ T7681] loop0: detected capacity change from 0 to 32768 [ 177.339308][ T7681] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7681) [ 177.356730][ T7681] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 177.365617][ T7681] BTRFS info (device loop0): using free space tree [pid 7681] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7681] chdir("./file0") = 0 [pid 7681] ioctl(4, LOOP_CLR_FD) = 0 [pid 7681] close(4) = 0 [pid 7681] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7680] <... futex resumed>) = 0 [pid 7681] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7680] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7680] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7681] <... openat resumed>) = 4 [pid 7681] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7680] <... futex resumed>) = 0 [pid 7680] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7681] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7680] <... futex resumed>) = 0 [ 177.386361][ T7681] BTRFS info (device loop0): enabling ssd optimizations [ 177.393372][ T7681] BTRFS info (device loop0): auto enabling async discard [pid 7680] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7680] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7680] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [ 177.437738][ T7681] BTRFS info (device loop0): balance: start -s [ 177.446160][ T7681] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7680] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[421], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 421 ./strace-static-x86_64: Process 7698 attached [pid 7698] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7698] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7680] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7698] <... futex resumed>) = 0 [pid 7680] <... futex resumed>) = 1 [pid 7698] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7698] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7698] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7680] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7680] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7698] <... futex resumed>) = 0 [pid 7680] <... futex resumed>) = 1 [pid 7698] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 177.486304][ T7681] BTRFS info (device loop0): balance: ended with status: 0 [pid 7680] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7681] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7681] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7681] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7698] <... ioctl resumed>) = 0 [pid 7698] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7680] close(3 [pid 7698] <... futex resumed>) = 0 [pid 7680] <... close resumed>) = 0 [pid 7698] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7680] close(4) = 0 [pid 7680] close(5) = 0 [pid 7680] close(6) = -1 EBADF (Bad file descriptor) [pid 7680] close(7) = -1 EBADF (Bad file descriptor) [pid 7680] close(8) = -1 EBADF (Bad file descriptor) [pid 7680] close(9) = -1 EBADF (Bad file descriptor) [pid 7680] close(10) = -1 EBADF (Bad file descriptor) [pid 7680] close(11) = -1 EBADF (Bad file descriptor) [pid 7680] close(12) = -1 EBADF (Bad file descriptor) [pid 7680] close(13) = -1 EBADF (Bad file descriptor) [pid 7680] close(14) = -1 EBADF (Bad file descriptor) [pid 7680] close(15) = -1 EBADF (Bad file descriptor) [pid 7680] close(16) = -1 EBADF (Bad file descriptor) [pid 7680] close(17) = -1 EBADF (Bad file descriptor) [pid 7680] close(18) = -1 EBADF (Bad file descriptor) [pid 7680] close(19) = -1 EBADF (Bad file descriptor) [pid 7680] close(20) = -1 EBADF (Bad file descriptor) [pid 7680] close(21) = -1 EBADF (Bad file descriptor) [pid 7680] close(22) = -1 EBADF (Bad file descriptor) [pid 7680] close(23) = -1 EBADF (Bad file descriptor) [pid 7680] close(24) = -1 EBADF (Bad file descriptor) [pid 7680] close(25) = -1 EBADF (Bad file descriptor) [pid 7680] close(26) = -1 EBADF (Bad file descriptor) [pid 7680] close(27) = -1 EBADF (Bad file descriptor) [pid 7680] close(28) = -1 EBADF (Bad file descriptor) [pid 7680] close(29) = -1 EBADF (Bad file descriptor) [pid 7680] exit_group(0 [pid 7698] <... futex resumed>) = ? [pid 7681] <... futex resumed>) = ? [pid 7680] <... exit_group resumed>) = ? [pid 7698] +++ exited with 0 +++ [pid 7681] +++ exited with 0 +++ [pid 7680] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=419, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./139/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./139/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./139/cgroup.cpu") = 0 [pid 5007] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./139/binderfs") = 0 [pid 5007] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./139/file0") = 0 [pid 5007] umount2("./139/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./139/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./139/cgroup") = 0 [pid 5007] umount2("./139/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./139/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./139/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./139") = 0 [pid 5007] mkdir("./140", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 422 ./strace-static-x86_64: Process 7699 attached [pid 7699] set_robust_list(0x5555571235e0, 24) = 0 [pid 7699] chdir("./140") = 0 [pid 7699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7699] setpgid(0, 0) = 0 [pid 7699] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7699] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7699] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7699] write(3, "1000", 4) = 4 [pid 7699] close(3) = 0 [pid 7699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7699] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7699] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7699] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7700 attached [pid 7700] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7700] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7699] <... clone resumed>, parent_tid=[423], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 423 [pid 7699] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] <... futex resumed>) = 0 [pid 7699] <... futex resumed>) = 1 [pid 7700] memfd_create("syzkaller", 0 [pid 7699] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7700] <... memfd_create resumed>) = 3 [pid 7700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7700] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7700] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7700] close(3) = 0 [pid 7700] mkdir("./file0", 0777) = 0 [ 178.014583][ T7700] loop0: detected capacity change from 0 to 32768 [ 178.025810][ T7700] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7700) [ 178.042506][ T7700] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 178.051406][ T7700] BTRFS info (device loop0): using free space tree [pid 7700] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7700] chdir("./file0") = 0 [pid 7700] ioctl(4, LOOP_CLR_FD) = 0 [pid 7700] close(4) = 0 [pid 7700] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7700] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7699] <... futex resumed>) = 0 [pid 7699] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] <... futex resumed>) = 0 [pid 7699] <... futex resumed>) = 1 [pid 7700] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7699] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] <... openat resumed>) = 4 [pid 7700] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7699] <... futex resumed>) = 0 [pid 7699] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7699] <... futex resumed>) = 0 [ 178.071071][ T7700] BTRFS info (device loop0): enabling ssd optimizations [ 178.078511][ T7700] BTRFS info (device loop0): auto enabling async discard [pid 7699] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7699] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7699] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7699] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[424], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 424 [pid 7699] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 178.123213][ T7700] BTRFS info (device loop0): balance: start -s [ 178.137071][ T7700] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7699] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7717 attached [pid 7717] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7717] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7717] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7699] <... futex resumed>) = 0 [pid 7699] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7717] <... futex resumed>) = 1 [pid 7717] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 178.171671][ T7700] BTRFS info (device loop0): balance: ended with status: 0 [pid 7700] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7700] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7700] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... ioctl resumed>) = 0 [pid 7717] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7699] close(3) = 0 [pid 7699] close(4) = 0 [pid 7699] close(5) = 0 [pid 7699] close(6) = -1 EBADF (Bad file descriptor) [pid 7699] close(7) = -1 EBADF (Bad file descriptor) [pid 7699] close(8) = -1 EBADF (Bad file descriptor) [pid 7699] close(9) = -1 EBADF (Bad file descriptor) [pid 7699] close(10) = -1 EBADF (Bad file descriptor) [pid 7699] close(11) = -1 EBADF (Bad file descriptor) [pid 7699] close(12) = -1 EBADF (Bad file descriptor) [pid 7699] close(13) = -1 EBADF (Bad file descriptor) [pid 7699] close(14) = -1 EBADF (Bad file descriptor) [pid 7699] close(15) = -1 EBADF (Bad file descriptor) [pid 7699] close(16) = -1 EBADF (Bad file descriptor) [pid 7699] close(17) = -1 EBADF (Bad file descriptor) [pid 7699] close(18) = -1 EBADF (Bad file descriptor) [pid 7699] close(19) = -1 EBADF (Bad file descriptor) [pid 7699] close(20) = -1 EBADF (Bad file descriptor) [pid 7699] close(21) = -1 EBADF (Bad file descriptor) [pid 7699] close(22) = -1 EBADF (Bad file descriptor) [pid 7699] close(23) = -1 EBADF (Bad file descriptor) [pid 7699] close(24) = -1 EBADF (Bad file descriptor) [pid 7699] close(25) = -1 EBADF (Bad file descriptor) [pid 7699] close(26) = -1 EBADF (Bad file descriptor) [pid 7699] close(27) = -1 EBADF (Bad file descriptor) [pid 7699] close(28) = -1 EBADF (Bad file descriptor) [pid 7699] close(29) = -1 EBADF (Bad file descriptor) [pid 7699] exit_group(0 [pid 7717] <... futex resumed>) = ? [pid 7700] <... futex resumed>) = ? [pid 7699] <... exit_group resumed>) = ? [pid 7717] +++ exited with 0 +++ [pid 7700] +++ exited with 0 +++ [pid 7699] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=422, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./140/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./140/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./140/cgroup.cpu") = 0 [pid 5007] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./140/binderfs") = 0 [pid 5007] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./140/file0") = 0 [pid 5007] umount2("./140/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./140/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./140/cgroup") = 0 [pid 5007] umount2("./140/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./140/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./140/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./140") = 0 [pid 5007] mkdir("./141", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 425 ./strace-static-x86_64: Process 7718 attached [pid 7718] set_robust_list(0x5555571235e0, 24) = 0 [pid 7718] chdir("./141") = 0 [pid 7718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7718] setpgid(0, 0) = 0 [pid 7718] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7718] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7718] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7718] write(3, "1000", 4) = 4 [pid 7718] close(3) = 0 [pid 7718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7718] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7718] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7718] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[426], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 426 [pid 7718] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7719 attached [pid 7719] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7719] memfd_create("syzkaller", 0) = 3 [pid 7719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7719] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7719] close(3) = 0 [pid 7719] mkdir("./file0", 0777) = 0 [ 178.732158][ T7719] loop0: detected capacity change from 0 to 32768 [ 178.744516][ T7719] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7719) [ 178.761805][ T7719] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 178.770688][ T7719] BTRFS info (device loop0): using free space tree [pid 7719] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7719] chdir("./file0") = 0 [pid 7719] ioctl(4, LOOP_CLR_FD) = 0 [pid 7719] close(4) = 0 [pid 7719] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7719] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] <... futex resumed>) = 0 [pid 7718] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7719] <... futex resumed>) = 0 [pid 7718] <... futex resumed>) = 1 [pid 7719] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7718] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7719] <... openat resumed>) = 4 [pid 7719] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] <... futex resumed>) = 0 [pid 7719] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7718] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 178.791878][ T7719] BTRFS info (device loop0): enabling ssd optimizations [ 178.799185][ T7719] BTRFS info (device loop0): auto enabling async discard [pid 7718] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7718] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7718] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7718] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7718] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[427], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 427 [pid 7718] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7736 attached [pid 7736] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7736] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7736] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] <... futex resumed>) = 0 [pid 7718] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7736] <... futex resumed>) = 1 [ 178.841121][ T7719] BTRFS info (device loop0): balance: start -s [ 178.857626][ T7719] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7736] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7718] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 178.925450][ T7719] BTRFS info (device loop0): balance: ended with status: 0 [pid 7719] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7736] <... ioctl resumed>) = 0 [pid 7736] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7736] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7719] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] close(3 [pid 7719] <... futex resumed>) = 0 [pid 7718] <... close resumed>) = 0 [pid 7718] close(4) = 0 [pid 7718] close(5) = 0 [pid 7718] close(6) = -1 EBADF (Bad file descriptor) [pid 7718] close(7) = -1 EBADF (Bad file descriptor) [pid 7718] close(8) = -1 EBADF (Bad file descriptor) [pid 7718] close(9) = -1 EBADF (Bad file descriptor) [pid 7718] close(10) = -1 EBADF (Bad file descriptor) [pid 7718] close(11) = -1 EBADF (Bad file descriptor) [pid 7718] close(12) = -1 EBADF (Bad file descriptor) [pid 7718] close(13) = -1 EBADF (Bad file descriptor) [pid 7718] close(14 [pid 7719] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7718] close(15) = -1 EBADF (Bad file descriptor) [pid 7718] close(16) = -1 EBADF (Bad file descriptor) [pid 7718] close(17) = -1 EBADF (Bad file descriptor) [pid 7718] close(18) = -1 EBADF (Bad file descriptor) [pid 7718] close(19) = -1 EBADF (Bad file descriptor) [pid 7718] close(20) = -1 EBADF (Bad file descriptor) [pid 7718] close(21) = -1 EBADF (Bad file descriptor) [pid 7718] close(22) = -1 EBADF (Bad file descriptor) [pid 7718] close(23) = -1 EBADF (Bad file descriptor) [pid 7718] close(24) = -1 EBADF (Bad file descriptor) [pid 7718] close(25) = -1 EBADF (Bad file descriptor) [pid 7718] close(26) = -1 EBADF (Bad file descriptor) [pid 7718] close(27) = -1 EBADF (Bad file descriptor) [pid 7718] close(28) = -1 EBADF (Bad file descriptor) [pid 7718] close(29) = -1 EBADF (Bad file descriptor) [pid 7718] exit_group(0 [pid 7736] <... futex resumed>) = ? [pid 7718] <... exit_group resumed>) = ? [pid 7736] +++ exited with 0 +++ [pid 7719] <... futex resumed>) = ? [pid 7719] +++ exited with 0 +++ [pid 7718] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=425, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./141/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./141/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./141/cgroup.cpu") = 0 [pid 5007] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./141/binderfs") = 0 [pid 5007] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./141/file0") = 0 [pid 5007] umount2("./141/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./141/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./141/cgroup") = 0 [pid 5007] umount2("./141/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./141/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./141/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./141") = 0 [pid 5007] mkdir("./142", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 428 ./strace-static-x86_64: Process 7737 attached [pid 7737] set_robust_list(0x5555571235e0, 24) = 0 [pid 7737] chdir("./142") = 0 [pid 7737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7737] setpgid(0, 0) = 0 [pid 7737] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7737] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7737] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7737] write(3, "1000", 4) = 4 [pid 7737] close(3) = 0 [pid 7737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7737] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7737] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7737] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7738 attached [pid 7738] set_robust_list(0x7fd090fc79e0, 24 [pid 7737] <... clone resumed>, parent_tid=[429], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 429 [pid 7738] <... set_robust_list resumed>) = 0 [pid 7737] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7738] memfd_create("syzkaller", 0) = 3 [pid 7738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7738] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7738] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7738] close(3) = 0 [pid 7738] mkdir("./file0", 0777) = 0 [ 179.409336][ T7738] loop0: detected capacity change from 0 to 32768 [ 179.419937][ T7738] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7738) [ 179.437340][ T7738] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 179.446149][ T7738] BTRFS info (device loop0): using free space tree [pid 7738] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7738] chdir("./file0") = 0 [pid 7738] ioctl(4, LOOP_CLR_FD) = 0 [pid 7738] close(4) = 0 [pid 7738] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7738] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7737] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] <... openat resumed>) = 4 [pid 7737] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7738] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7738] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7737] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 179.466392][ T7738] BTRFS info (device loop0): enabling ssd optimizations [ 179.473465][ T7738] BTRFS info (device loop0): auto enabling async discard [ 179.505508][ T7738] BTRFS info (device loop0): balance: start -s [pid 7737] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7737] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7737] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7737] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7737] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[430], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 430 [pid 7737] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7755 attached [pid 7755] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7755] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7755] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7737] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 179.513828][ T7738] BTRFS info (device loop0): relocating block group 1048576 flags system [ 179.552237][ T7738] BTRFS info (device loop0): balance: ended with status: 0 [pid 7755] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7738] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7738] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] <... ioctl resumed>) = 0 [pid 7755] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] close(3 [pid 7755] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] <... close resumed>) = 0 [pid 7737] close(4) = 0 [pid 7737] close(5) = 0 [pid 7737] close(6) = -1 EBADF (Bad file descriptor) [pid 7737] close(7) = -1 EBADF (Bad file descriptor) [pid 7737] close(8) = -1 EBADF (Bad file descriptor) [pid 7737] close(9) = -1 EBADF (Bad file descriptor) [pid 7737] close(10) = -1 EBADF (Bad file descriptor) [pid 7737] close(11) = -1 EBADF (Bad file descriptor) [pid 7737] close(12) = -1 EBADF (Bad file descriptor) [pid 7737] close(13) = -1 EBADF (Bad file descriptor) [pid 7737] close(14) = -1 EBADF (Bad file descriptor) [pid 7737] close(15) = -1 EBADF (Bad file descriptor) [pid 7737] close(16) = -1 EBADF (Bad file descriptor) [pid 7737] close(17) = -1 EBADF (Bad file descriptor) [pid 7737] close(18) = -1 EBADF (Bad file descriptor) [pid 7737] close(19) = -1 EBADF (Bad file descriptor) [pid 7737] close(20) = -1 EBADF (Bad file descriptor) [pid 7737] close(21) = -1 EBADF (Bad file descriptor) [pid 7737] close(22) = -1 EBADF (Bad file descriptor) [pid 7737] close(23) = -1 EBADF (Bad file descriptor) [pid 7737] close(24) = -1 EBADF (Bad file descriptor) [pid 7737] close(25) = -1 EBADF (Bad file descriptor) [pid 7737] close(26) = -1 EBADF (Bad file descriptor) [pid 7737] close(27) = -1 EBADF (Bad file descriptor) [pid 7737] close(28) = -1 EBADF (Bad file descriptor) [pid 7737] close(29) = -1 EBADF (Bad file descriptor) [pid 7737] exit_group(0 [pid 7755] <... futex resumed>) = ? [pid 7738] <... futex resumed>) = ? [pid 7737] <... exit_group resumed>) = ? [pid 7755] +++ exited with 0 +++ [pid 7738] +++ exited with 0 +++ [pid 7737] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=428, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./142/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./142/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./142/cgroup.cpu") = 0 [pid 5007] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./142/binderfs") = 0 [pid 5007] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./142/file0") = 0 [pid 5007] umount2("./142/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./142/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./142/cgroup") = 0 [pid 5007] umount2("./142/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./142/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./142/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./142") = 0 [pid 5007] mkdir("./143", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 431 ./strace-static-x86_64: Process 7756 attached [pid 7756] set_robust_list(0x5555571235e0, 24) = 0 [pid 7756] chdir("./143") = 0 [pid 7756] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7756] setpgid(0, 0) = 0 [pid 7756] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7756] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7756] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7756] write(3, "1000", 4) = 4 [pid 7756] close(3) = 0 [pid 7756] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7756] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7756] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7756] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7757 attached [pid 7757] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7757] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] <... clone resumed>, parent_tid=[432], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 432 [pid 7756] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7756] <... futex resumed>) = 0 [pid 7756] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7757] memfd_create("syzkaller", 0) = 3 [pid 7757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7757] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7757] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7757] close(3) = 0 [pid 7757] mkdir("./file0", 0777) = 0 [ 180.086948][ T7757] loop0: detected capacity change from 0 to 32768 [ 180.098092][ T7757] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7757) [ 180.115220][ T7757] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 180.124043][ T7757] BTRFS info (device loop0): using free space tree [pid 7757] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7757] chdir("./file0") = 0 [pid 7757] ioctl(4, LOOP_CLR_FD) = 0 [pid 7757] close(4) = 0 [pid 7757] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7757] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] <... futex resumed>) = 0 [pid 7756] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] <... futex resumed>) = 0 [pid 7756] <... futex resumed>) = 1 [pid 7757] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7756] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7757] <... openat resumed>) = 4 [pid 7757] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7756] <... futex resumed>) = 0 [pid 7757] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7756] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 180.144275][ T7757] BTRFS info (device loop0): enabling ssd optimizations [ 180.151777][ T7757] BTRFS info (device loop0): auto enabling async discard [pid 7756] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7756] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7756] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7756] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[433], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 433 [pid 7756] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7774 attached [pid 7757] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7774] set_robust_list(0x7fd089ba69e0, 24 [pid 7757] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7774] <... set_robust_list resumed>) = 0 [pid 7757] <... futex resumed>) = 0 [pid 7774] openat(AT_FDCWD, ".", O_RDONLY [pid 7757] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7774] <... openat resumed>) = 5 [pid 7774] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7774] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7756] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] <... futex resumed>) = 0 [pid 7756] <... futex resumed>) = 1 [pid 7757] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 180.196075][ T7757] BTRFS info (device loop0): balance: start -s [ 180.204250][ T7757] BTRFS info (device loop0): relocating block group 1048576 flags system [ 180.235708][ T7757] BTRFS info (device loop0): balance: ended with status: 0 [pid 7756] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7757] <... ioctl resumed>) = 0 [pid 7757] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7756] close(3 [pid 7757] <... futex resumed>) = 0 [pid 7756] <... close resumed>) = 0 [pid 7757] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] close(4) = 0 [pid 7756] close(5) = 0 [pid 7756] close(6) = -1 EBADF (Bad file descriptor) [pid 7756] close(7) = -1 EBADF (Bad file descriptor) [pid 7756] close(8) = -1 EBADF (Bad file descriptor) [pid 7756] close(9) = -1 EBADF (Bad file descriptor) [pid 7756] close(10) = -1 EBADF (Bad file descriptor) [pid 7756] close(11) = -1 EBADF (Bad file descriptor) [pid 7756] close(12) = -1 EBADF (Bad file descriptor) [pid 7756] close(13) = -1 EBADF (Bad file descriptor) [pid 7756] close(14) = -1 EBADF (Bad file descriptor) [pid 7756] close(15) = -1 EBADF (Bad file descriptor) [pid 7756] close(16) = -1 EBADF (Bad file descriptor) [pid 7756] close(17) = -1 EBADF (Bad file descriptor) [pid 7756] close(18) = -1 EBADF (Bad file descriptor) [pid 7756] close(19) = -1 EBADF (Bad file descriptor) [pid 7756] close(20) = -1 EBADF (Bad file descriptor) [pid 7756] close(21) = -1 EBADF (Bad file descriptor) [pid 7756] close(22) = -1 EBADF (Bad file descriptor) [pid 7756] close(23) = -1 EBADF (Bad file descriptor) [pid 7756] close(24) = -1 EBADF (Bad file descriptor) [pid 7756] close(25) = -1 EBADF (Bad file descriptor) [pid 7756] close(26) = -1 EBADF (Bad file descriptor) [pid 7756] close(27) = -1 EBADF (Bad file descriptor) [pid 7756] close(28) = -1 EBADF (Bad file descriptor) [pid 7756] close(29) = -1 EBADF (Bad file descriptor) [pid 7756] exit_group(0 [pid 7757] <... futex resumed>) = ? [pid 7774] <... futex resumed>) = ? [pid 7756] <... exit_group resumed>) = ? [pid 7757] +++ exited with 0 +++ [pid 7774] +++ exited with 0 +++ [pid 7756] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=431, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./143/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./143/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./143/cgroup.cpu") = 0 [pid 5007] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./143/binderfs") = 0 [pid 5007] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./143/file0") = 0 [pid 5007] umount2("./143/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./143/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./143/cgroup") = 0 [pid 5007] umount2("./143/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./143/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./143/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./143") = 0 [pid 5007] mkdir("./144", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7775 attached [pid 7775] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 434 [pid 7775] <... set_robust_list resumed>) = 0 [pid 7775] chdir("./144") = 0 [pid 7775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7775] setpgid(0, 0) = 0 [pid 7775] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7775] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7775] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7775] write(3, "1000", 4) = 4 [pid 7775] close(3) = 0 [pid 7775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7775] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7775] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7775] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[435], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 435 ./strace-static-x86_64: Process 7776 attached [pid 7775] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7776] set_robust_list(0x7fd090fc79e0, 24 [pid 7775] <... futex resumed>) = 0 [pid 7776] <... set_robust_list resumed>) = 0 [pid 7775] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7776] memfd_create("syzkaller", 0) = 3 [pid 7776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7776] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7776] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7776] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7776] close(3) = 0 [pid 7776] mkdir("./file0", 0777) = 0 [ 180.756723][ T7776] loop0: detected capacity change from 0 to 32768 [ 180.766699][ T7776] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7776) [ 180.781837][ T7776] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 180.790928][ T7776] BTRFS info (device loop0): using free space tree [pid 7776] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7776] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7776] chdir("./file0") = 0 [pid 7776] ioctl(4, LOOP_CLR_FD) = 0 [pid 7776] close(4) = 0 [pid 7776] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7775] <... futex resumed>) = 0 [pid 7775] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7776] <... futex resumed>) = 1 [pid 7776] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7776] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7775] <... futex resumed>) = 0 [pid 7775] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7776] <... futex resumed>) = 1 [ 180.811352][ T7776] BTRFS info (device loop0): enabling ssd optimizations [ 180.819067][ T7776] BTRFS info (device loop0): auto enabling async discard [pid 7776] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7775] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7775] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7775] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7775] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[436], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 436 [pid 7775] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7793 attached [pid 7793] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7793] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7793] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7775] <... futex resumed>) = 0 [pid 7775] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7793] <... futex resumed>) = 1 [ 180.869122][ T7776] BTRFS info (device loop0): balance: start -s [ 180.879053][ T7776] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7793] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7775] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 180.942156][ T7776] BTRFS info (device loop0): balance: ended with status: 0 [pid 7793] <... ioctl resumed>) = 0 [pid 7776] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7793] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7793] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7776] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] close(3) = 0 [pid 7776] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7775] close(4) = 0 [pid 7775] close(5) = 0 [pid 7775] close(6) = -1 EBADF (Bad file descriptor) [pid 7775] close(7) = -1 EBADF (Bad file descriptor) [pid 7775] close(8) = -1 EBADF (Bad file descriptor) [pid 7775] close(9) = -1 EBADF (Bad file descriptor) [pid 7775] close(10) = -1 EBADF (Bad file descriptor) [pid 7775] close(11) = -1 EBADF (Bad file descriptor) [pid 7775] close(12) = -1 EBADF (Bad file descriptor) [pid 7775] close(13) = -1 EBADF (Bad file descriptor) [pid 7775] close(14) = -1 EBADF (Bad file descriptor) [pid 7775] close(15) = -1 EBADF (Bad file descriptor) [pid 7775] close(16) = -1 EBADF (Bad file descriptor) [pid 7775] close(17) = -1 EBADF (Bad file descriptor) [pid 7775] close(18) = -1 EBADF (Bad file descriptor) [pid 7775] close(19) = -1 EBADF (Bad file descriptor) [pid 7775] close(20) = -1 EBADF (Bad file descriptor) [pid 7775] close(21) = -1 EBADF (Bad file descriptor) [pid 7775] close(22) = -1 EBADF (Bad file descriptor) [pid 7775] close(23) = -1 EBADF (Bad file descriptor) [pid 7775] close(24) = -1 EBADF (Bad file descriptor) [pid 7775] close(25) = -1 EBADF (Bad file descriptor) [pid 7775] close(26) = -1 EBADF (Bad file descriptor) [pid 7775] close(27) = -1 EBADF (Bad file descriptor) [pid 7775] close(28) = -1 EBADF (Bad file descriptor) [pid 7775] close(29) = -1 EBADF (Bad file descriptor) [pid 7775] exit_group(0 [pid 7793] <... futex resumed>) = ? [pid 7776] <... futex resumed>) = ? [pid 7775] <... exit_group resumed>) = ? [pid 7793] +++ exited with 0 +++ [pid 7776] +++ exited with 0 +++ [pid 7775] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=434, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./144/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./144/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./144/cgroup.cpu") = 0 [pid 5007] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./144/binderfs") = 0 [pid 5007] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./144/file0") = 0 [pid 5007] umount2("./144/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./144/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./144/cgroup") = 0 [pid 5007] umount2("./144/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./144/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./144/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./144") = 0 [pid 5007] mkdir("./145", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 437 ./strace-static-x86_64: Process 7794 attached [pid 7794] set_robust_list(0x5555571235e0, 24) = 0 [pid 7794] chdir("./145") = 0 [pid 7794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7794] setpgid(0, 0) = 0 [pid 7794] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7794] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7794] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7794] write(3, "1000", 4) = 4 [pid 7794] close(3) = 0 [pid 7794] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7794] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7794] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7794] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[438], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 438 ./strace-static-x86_64: Process 7795 attached [pid 7794] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7795] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7794] <... futex resumed>) = 0 [pid 7794] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7795] memfd_create("syzkaller", 0) = 3 [pid 7795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7795] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7795] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7795] close(3) = 0 [pid 7795] mkdir("./file0", 0777) = 0 [ 181.436277][ T7795] loop0: detected capacity change from 0 to 32768 [ 181.447457][ T7795] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7795) [ 181.465802][ T7795] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 181.474895][ T7795] BTRFS info (device loop0): using free space tree [pid 7795] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7795] chdir("./file0") = 0 [pid 7795] ioctl(4, LOOP_CLR_FD) = 0 [pid 7795] close(4) = 0 [pid 7795] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7795] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7794] <... futex resumed>) = 0 [pid 7794] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7794] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7795] <... futex resumed>) = 0 [pid 7795] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7795] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7794] <... futex resumed>) = 0 [pid 7795] <... futex resumed>) = 1 [pid 7794] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7795] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7794] <... futex resumed>) = 0 [ 181.495188][ T7795] BTRFS info (device loop0): enabling ssd optimizations [ 181.502197][ T7795] BTRFS info (device loop0): auto enabling async discard [pid 7794] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7794] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7794] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7794] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[439], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 439 [pid 7794] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7812 attached [pid 7812] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7812] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7812] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7794] <... futex resumed>) = 0 [pid 7794] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7812] <... futex resumed>) = 1 [ 181.536745][ T7795] BTRFS info (device loop0): balance: start -s [ 181.556046][ T7795] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7812] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7794] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 181.625656][ T7795] BTRFS info (device loop0): balance: ended with status: 0 [pid 7812] <... ioctl resumed>) = 0 [pid 7795] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7812] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7812] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7795] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7794] close(3 [pid 7795] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7794] <... close resumed>) = 0 [pid 7794] close(4) = 0 [pid 7794] close(5) = 0 [pid 7794] close(6) = -1 EBADF (Bad file descriptor) [pid 7794] close(7) = -1 EBADF (Bad file descriptor) [pid 7794] close(8) = -1 EBADF (Bad file descriptor) [pid 7794] close(9) = -1 EBADF (Bad file descriptor) [pid 7794] close(10) = -1 EBADF (Bad file descriptor) [pid 7794] close(11) = -1 EBADF (Bad file descriptor) [pid 7794] close(12) = -1 EBADF (Bad file descriptor) [pid 7794] close(13) = -1 EBADF (Bad file descriptor) [pid 7794] close(14) = -1 EBADF (Bad file descriptor) [pid 7794] close(15) = -1 EBADF (Bad file descriptor) [pid 7794] close(16) = -1 EBADF (Bad file descriptor) [pid 7794] close(17) = -1 EBADF (Bad file descriptor) [pid 7794] close(18) = -1 EBADF (Bad file descriptor) [pid 7794] close(19) = -1 EBADF (Bad file descriptor) [pid 7794] close(20) = -1 EBADF (Bad file descriptor) [pid 7794] close(21) = -1 EBADF (Bad file descriptor) [pid 7794] close(22) = -1 EBADF (Bad file descriptor) [pid 7794] close(23) = -1 EBADF (Bad file descriptor) [pid 7794] close(24) = -1 EBADF (Bad file descriptor) [pid 7794] close(25) = -1 EBADF (Bad file descriptor) [pid 7794] close(26) = -1 EBADF (Bad file descriptor) [pid 7794] close(27) = -1 EBADF (Bad file descriptor) [pid 7794] close(28) = -1 EBADF (Bad file descriptor) [pid 7794] close(29) = -1 EBADF (Bad file descriptor) [pid 7794] exit_group(0 [pid 7812] <... futex resumed>) = ? [pid 7795] <... futex resumed>) = ? [pid 7794] <... exit_group resumed>) = ? [pid 7812] +++ exited with 0 +++ [pid 7795] +++ exited with 0 +++ [pid 7794] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=437, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./145/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./145/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./145/cgroup.cpu") = 0 [pid 5007] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./145/binderfs") = 0 [pid 5007] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./145/file0") = 0 [pid 5007] umount2("./145/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./145/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./145/cgroup") = 0 [pid 5007] umount2("./145/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./145/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./145/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./145") = 0 [pid 5007] mkdir("./146", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 440 ./strace-static-x86_64: Process 7813 attached [pid 7813] set_robust_list(0x5555571235e0, 24) = 0 [pid 7813] chdir("./146") = 0 [pid 7813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7813] setpgid(0, 0) = 0 [pid 7813] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7813] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7813] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7813] write(3, "1000", 4) = 4 [pid 7813] close(3) = 0 [pid 7813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7813] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7813] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7813] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7814 attached , parent_tid=[441], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 441 [pid 7813] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] set_robust_list(0x7fd090fc79e0, 24 [pid 7813] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7814] <... set_robust_list resumed>) = 0 [pid 7814] memfd_create("syzkaller", 0) = 3 [pid 7814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7814] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7814] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7814] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7814] close(3) = 0 [pid 7814] mkdir("./file0", 0777) = 0 [ 182.111810][ T7814] loop0: detected capacity change from 0 to 32768 [ 182.121722][ T7814] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7814) [ 182.137147][ T7814] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.146041][ T7814] BTRFS info (device loop0): using free space tree [pid 7814] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7814] chdir("./file0") = 0 [pid 7814] ioctl(4, LOOP_CLR_FD) = 0 [pid 7814] close(4) = 0 [pid 7814] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7813] <... futex resumed>) = 0 [pid 7814] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7813] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7814] <... openat resumed>) = 4 [pid 7814] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] <... futex resumed>) = 0 [pid 7813] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7814] <... futex resumed>) = 1 [ 182.167451][ T7814] BTRFS info (device loop0): enabling ssd optimizations [ 182.174451][ T7814] BTRFS info (device loop0): auto enabling async discard [pid 7814] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7813] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7813] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7813] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[442], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 442 [ 182.215321][ T7814] BTRFS info (device loop0): balance: start -s [ 182.223666][ T7814] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7813] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7831 attached [pid 7831] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7831] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7831] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7813] <... futex resumed>) = 0 [pid 7831] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7813] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7813] <... futex resumed>) = 0 [pid 7831] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 182.258265][ T7814] BTRFS info (device loop0): balance: ended with status: 0 [pid 7813] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7831] <... ioctl resumed>) = 0 [pid 7831] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7831] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7814] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7813] close(3) = 0 [pid 7813] close(4) = 0 [pid 7813] close(5) = 0 [pid 7813] close(6) = -1 EBADF (Bad file descriptor) [pid 7813] close(7) = -1 EBADF (Bad file descriptor) [pid 7813] close(8) = -1 EBADF (Bad file descriptor) [pid 7813] close(9) = -1 EBADF (Bad file descriptor) [pid 7813] close(10) = -1 EBADF (Bad file descriptor) [pid 7813] close(11) = -1 EBADF (Bad file descriptor) [pid 7813] close(12) = -1 EBADF (Bad file descriptor) [pid 7813] close(13) = -1 EBADF (Bad file descriptor) [pid 7813] close(14) = -1 EBADF (Bad file descriptor) [pid 7813] close(15) = -1 EBADF (Bad file descriptor) [pid 7813] close(16) = -1 EBADF (Bad file descriptor) [pid 7813] close(17) = -1 EBADF (Bad file descriptor) [pid 7813] close(18) = -1 EBADF (Bad file descriptor) [pid 7813] close(19) = -1 EBADF (Bad file descriptor) [pid 7813] close(20) = -1 EBADF (Bad file descriptor) [pid 7813] close(21) = -1 EBADF (Bad file descriptor) [pid 7813] close(22) = -1 EBADF (Bad file descriptor) [pid 7813] close(23) = -1 EBADF (Bad file descriptor) [pid 7813] close(24) = -1 EBADF (Bad file descriptor) [pid 7813] close(25) = -1 EBADF (Bad file descriptor) [pid 7813] close(26) = -1 EBADF (Bad file descriptor) [pid 7813] close(27) = -1 EBADF (Bad file descriptor) [pid 7813] close(28) = -1 EBADF (Bad file descriptor) [pid 7813] close(29) = -1 EBADF (Bad file descriptor) [pid 7813] exit_group(0) = ? [pid 7814] <... futex resumed>) = ? [pid 7831] <... futex resumed>) = ? [pid 7814] +++ exited with 0 +++ [pid 7831] +++ exited with 0 +++ [pid 7813] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=440, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./146/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./146/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./146/cgroup.cpu") = 0 [pid 5007] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./146/binderfs") = 0 [pid 5007] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./146/file0") = 0 [pid 5007] umount2("./146/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./146/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./146/cgroup") = 0 [pid 5007] umount2("./146/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./146/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./146/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./146") = 0 [pid 5007] mkdir("./147", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 443 ./strace-static-x86_64: Process 7832 attached [pid 7832] set_robust_list(0x5555571235e0, 24) = 0 [pid 7832] chdir("./147") = 0 [pid 7832] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7832] setpgid(0, 0) = 0 [pid 7832] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7832] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7832] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7832] write(3, "1000", 4) = 4 [pid 7832] close(3) = 0 [pid 7832] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7832] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7832] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7832] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7833 attached [pid 7833] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7833] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7832] <... clone resumed>, parent_tid=[444], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 444 [pid 7832] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] <... futex resumed>) = 0 [pid 7832] <... futex resumed>) = 1 [pid 7833] memfd_create("syzkaller", 0 [pid 7832] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7833] <... memfd_create resumed>) = 3 [pid 7833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7833] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7833] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7833] close(3) = 0 [pid 7833] mkdir("./file0", 0777) = 0 [ 182.803387][ T7833] loop0: detected capacity change from 0 to 32768 [ 182.814630][ T7833] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7833) [ 182.831503][ T7833] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.840733][ T7833] BTRFS info (device loop0): using free space tree [pid 7833] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7833] chdir("./file0") = 0 [pid 7833] ioctl(4, LOOP_CLR_FD) = 0 [pid 7833] close(4) = 0 [pid 7833] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] <... futex resumed>) = 0 [pid 7833] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7832] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] <... openat resumed>) = 4 [pid 7832] <... futex resumed>) = 0 [pid 7832] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7833] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7832] <... futex resumed>) = 0 [pid 7832] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7833] <... futex resumed>) = 1 [pid 7832] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 182.860970][ T7833] BTRFS info (device loop0): enabling ssd optimizations [ 182.868161][ T7833] BTRFS info (device loop0): auto enabling async discard [ 182.897661][ T7833] BTRFS info (device loop0): balance: start -s [pid 7833] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7832] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7832] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7832] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7832] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7832] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7850 attached [pid 7850] set_robust_list(0x7fd089ba69e0, 24 [pid 7832] <... clone resumed>, parent_tid=[445], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 445 [pid 7850] <... set_robust_list resumed>) = 0 [pid 7832] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7850] openat(AT_FDCWD, ".", O_RDONLY [pid 7832] <... futex resumed>) = 0 [pid 7850] <... openat resumed>) = 5 [pid 7832] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7850] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] <... futex resumed>) = 0 [pid 7850] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7832] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 182.908415][ T7833] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7832] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 182.972091][ T7833] BTRFS info (device loop0): balance: ended with status: 0 [pid 7833] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7833] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7833] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7850] <... ioctl resumed>) = 0 [pid 7850] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7850] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7832] close(3) = 0 [pid 7832] close(4) = 0 [pid 7832] close(5) = 0 [pid 7832] close(6) = -1 EBADF (Bad file descriptor) [pid 7832] close(7) = -1 EBADF (Bad file descriptor) [pid 7832] close(8) = -1 EBADF (Bad file descriptor) [pid 7832] close(9) = -1 EBADF (Bad file descriptor) [pid 7832] close(10) = -1 EBADF (Bad file descriptor) [pid 7832] close(11) = -1 EBADF (Bad file descriptor) [pid 7832] close(12) = -1 EBADF (Bad file descriptor) [pid 7832] close(13) = -1 EBADF (Bad file descriptor) [pid 7832] close(14) = -1 EBADF (Bad file descriptor) [pid 7832] close(15) = -1 EBADF (Bad file descriptor) [pid 7832] close(16) = -1 EBADF (Bad file descriptor) [pid 7832] close(17) = -1 EBADF (Bad file descriptor) [pid 7832] close(18) = -1 EBADF (Bad file descriptor) [pid 7832] close(19) = -1 EBADF (Bad file descriptor) [pid 7832] close(20) = -1 EBADF (Bad file descriptor) [pid 7832] close(21) = -1 EBADF (Bad file descriptor) [pid 7832] close(22) = -1 EBADF (Bad file descriptor) [pid 7832] close(23) = -1 EBADF (Bad file descriptor) [pid 7832] close(24) = -1 EBADF (Bad file descriptor) [pid 7832] close(25) = -1 EBADF (Bad file descriptor) [pid 7832] close(26) = -1 EBADF (Bad file descriptor) [pid 7832] close(27) = -1 EBADF (Bad file descriptor) [pid 7832] close(28) = -1 EBADF (Bad file descriptor) [pid 7832] close(29) = -1 EBADF (Bad file descriptor) [pid 7832] exit_group(0 [pid 7850] <... futex resumed>) = ? [pid 7833] <... futex resumed>) = ? [pid 7832] <... exit_group resumed>) = ? [pid 7850] +++ exited with 0 +++ [pid 7833] +++ exited with 0 +++ [pid 7832] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=443, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./147/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./147/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./147/cgroup.cpu") = 0 [pid 5007] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./147/binderfs") = 0 [pid 5007] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./147/file0") = 0 [pid 5007] umount2("./147/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./147/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./147/cgroup") = 0 [pid 5007] umount2("./147/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./147/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./147/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./147") = 0 [pid 5007] mkdir("./148", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7851 attached , child_tidptr=0x5555571235d0) = 446 [pid 7851] set_robust_list(0x5555571235e0, 24) = 0 [pid 7851] chdir("./148") = 0 [pid 7851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7851] setpgid(0, 0) = 0 [pid 7851] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7851] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7851] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7851] write(3, "1000", 4) = 4 [pid 7851] close(3) = 0 [pid 7851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7851] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7851] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7851] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7852 attached [pid 7852] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7852] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7851] <... clone resumed>, parent_tid=[447], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 447 [pid 7851] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... futex resumed>) = 0 [pid 7851] <... futex resumed>) = 1 [pid 7852] memfd_create("syzkaller", 0 [pid 7851] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7852] <... memfd_create resumed>) = 3 [pid 7852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7852] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7852] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7852] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7852] close(3) = 0 [pid 7852] mkdir("./file0", 0777) = 0 [ 183.472096][ T7852] loop0: detected capacity change from 0 to 32768 [ 183.483295][ T7852] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7852) [ 183.500470][ T7852] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 183.509489][ T7852] BTRFS info (device loop0): using free space tree [pid 7852] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7852] chdir("./file0") = 0 [pid 7852] ioctl(4, LOOP_CLR_FD) = 0 [pid 7852] close(4) = 0 [pid 7852] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7851] <... futex resumed>) = 0 [pid 7852] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7851] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... openat resumed>) = 4 [pid 7851] <... futex resumed>) = 0 [pid 7852] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7851] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7852] <... futex resumed>) = 0 [pid 7851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7852] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7851] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 183.529763][ T7852] BTRFS info (device loop0): enabling ssd optimizations [ 183.537308][ T7852] BTRFS info (device loop0): auto enabling async discard [ 183.568585][ T7852] BTRFS info (device loop0): balance: start -s [pid 7851] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7851] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7851] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7851] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[448], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 448 [pid 7851] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7869 attached [pid 7869] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7869] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7869] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7851] <... futex resumed>) = 0 [pid 7869] <... futex resumed>) = 1 [pid 7851] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7851] <... futex resumed>) = 0 [ 183.577321][ T7852] BTRFS info (device loop0): relocating block group 1048576 flags system [ 183.610063][ T7852] BTRFS info (device loop0): balance: ended with status: 0 [pid 7851] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7851] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7852] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7852] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7852] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7869] <... ioctl resumed>) = 0 [pid 7869] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] close(3) = 0 [pid 7869] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7851] close(4) = 0 [pid 7851] close(5) = 0 [pid 7851] close(6) = -1 EBADF (Bad file descriptor) [pid 7851] close(7) = -1 EBADF (Bad file descriptor) [pid 7851] close(8) = -1 EBADF (Bad file descriptor) [pid 7851] close(9) = -1 EBADF (Bad file descriptor) [pid 7851] close(10) = -1 EBADF (Bad file descriptor) [pid 7851] close(11) = -1 EBADF (Bad file descriptor) [pid 7851] close(12) = -1 EBADF (Bad file descriptor) [pid 7851] close(13) = -1 EBADF (Bad file descriptor) [pid 7851] close(14) = -1 EBADF (Bad file descriptor) [pid 7851] close(15) = -1 EBADF (Bad file descriptor) [pid 7851] close(16) = -1 EBADF (Bad file descriptor) [pid 7851] close(17) = -1 EBADF (Bad file descriptor) [pid 7851] close(18) = -1 EBADF (Bad file descriptor) [pid 7851] close(19) = -1 EBADF (Bad file descriptor) [pid 7851] close(20) = -1 EBADF (Bad file descriptor) [pid 7851] close(21) = -1 EBADF (Bad file descriptor) [pid 7851] close(22) = -1 EBADF (Bad file descriptor) [pid 7851] close(23) = -1 EBADF (Bad file descriptor) [pid 7851] close(24) = -1 EBADF (Bad file descriptor) [pid 7851] close(25) = -1 EBADF (Bad file descriptor) [pid 7851] close(26) = -1 EBADF (Bad file descriptor) [pid 7851] close(27) = -1 EBADF (Bad file descriptor) [pid 7851] close(28) = -1 EBADF (Bad file descriptor) [pid 7851] close(29) = -1 EBADF (Bad file descriptor) [pid 7851] exit_group(0 [pid 7869] <... futex resumed>) = ? [pid 7852] <... futex resumed>) = ? [pid 7851] <... exit_group resumed>) = ? [pid 7869] +++ exited with 0 +++ [pid 7852] +++ exited with 0 +++ [pid 7851] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=446, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./148/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./148/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./148/cgroup.cpu") = 0 [pid 5007] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./148/binderfs") = 0 [pid 5007] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./148/file0") = 0 [pid 5007] umount2("./148/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./148/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./148/cgroup") = 0 [pid 5007] umount2("./148/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./148/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./148/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./148") = 0 [pid 5007] mkdir("./149", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 449 ./strace-static-x86_64: Process 7870 attached [pid 7870] set_robust_list(0x5555571235e0, 24) = 0 [pid 7870] chdir("./149") = 0 [pid 7870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7870] setpgid(0, 0) = 0 [pid 7870] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7870] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7870] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7870] write(3, "1000", 4) = 4 [pid 7870] close(3) = 0 [pid 7870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7870] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7870] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7870] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7871 attached , parent_tid=[450], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 450 [pid 7870] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7871] set_robust_list(0x7fd090fc79e0, 24 [pid 7870] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7871] <... set_robust_list resumed>) = 0 [pid 7871] memfd_create("syzkaller", 0) = 3 [pid 7871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7871] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7871] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7871] close(3) = 0 [pid 7871] mkdir("./file0", 0777) = 0 [ 184.126820][ T7871] loop0: detected capacity change from 0 to 32768 [ 184.137244][ T7871] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7871) [ 184.152253][ T7871] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 184.161089][ T7871] BTRFS info (device loop0): using free space tree [pid 7871] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7871] chdir("./file0") = 0 [pid 7871] ioctl(4, LOOP_CLR_FD) = 0 [pid 7871] close(4) = 0 [pid 7871] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7870] <... futex resumed>) = 0 [pid 7870] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7871] <... futex resumed>) = 1 [pid 7871] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7871] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7870] <... futex resumed>) = 0 [pid 7870] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7871] <... futex resumed>) = 1 [ 184.180389][ T7871] BTRFS info (device loop0): enabling ssd optimizations [ 184.187727][ T7871] BTRFS info (device loop0): auto enabling async discard [pid 7871] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7870] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7870] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7870] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7870] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7888 attached , parent_tid=[451], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 451 [pid 7870] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7888] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7888] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7888] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7870] <... futex resumed>) = 0 [pid 7870] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 184.230790][ T7871] BTRFS info (device loop0): balance: start -s [ 184.239795][ T7871] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7888] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 184.314032][ T7871] BTRFS info (device loop0): balance: ended with status: 0 [pid 7888] <... ioctl resumed>) = 0 [pid 7888] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7888] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7871] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7871] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7871] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7870] close(3) = 0 [pid 7870] close(4) = 0 [pid 7870] close(5) = 0 [pid 7870] close(6) = -1 EBADF (Bad file descriptor) [pid 7870] close(7) = -1 EBADF (Bad file descriptor) [pid 7870] close(8) = -1 EBADF (Bad file descriptor) [pid 7870] close(9) = -1 EBADF (Bad file descriptor) [pid 7870] close(10) = -1 EBADF (Bad file descriptor) [pid 7870] close(11) = -1 EBADF (Bad file descriptor) [pid 7870] close(12) = -1 EBADF (Bad file descriptor) [pid 7870] close(13) = -1 EBADF (Bad file descriptor) [pid 7870] close(14) = -1 EBADF (Bad file descriptor) [pid 7870] close(15) = -1 EBADF (Bad file descriptor) [pid 7870] close(16) = -1 EBADF (Bad file descriptor) [pid 7870] close(17) = -1 EBADF (Bad file descriptor) [pid 7870] close(18) = -1 EBADF (Bad file descriptor) [pid 7870] close(19) = -1 EBADF (Bad file descriptor) [pid 7870] close(20) = -1 EBADF (Bad file descriptor) [pid 7870] close(21) = -1 EBADF (Bad file descriptor) [pid 7870] close(22) = -1 EBADF (Bad file descriptor) [pid 7870] close(23) = -1 EBADF (Bad file descriptor) [pid 7870] close(24) = -1 EBADF (Bad file descriptor) [pid 7870] close(25) = -1 EBADF (Bad file descriptor) [pid 7870] close(26) = -1 EBADF (Bad file descriptor) [pid 7870] close(27) = -1 EBADF (Bad file descriptor) [pid 7870] close(28) = -1 EBADF (Bad file descriptor) [pid 7870] close(29) = -1 EBADF (Bad file descriptor) [pid 7870] exit_group(0 [pid 7888] <... futex resumed>) = ? [pid 7871] <... futex resumed>) = ? [pid 7870] <... exit_group resumed>) = ? [pid 7888] +++ exited with 0 +++ [pid 7871] +++ exited with 0 +++ [pid 7870] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=449, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./149/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./149/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./149/cgroup.cpu") = 0 [pid 5007] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./149/binderfs") = 0 [pid 5007] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./149/file0") = 0 [pid 5007] umount2("./149/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./149/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./149/cgroup") = 0 [pid 5007] umount2("./149/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./149/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./149/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./149") = 0 [pid 5007] mkdir("./150", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 452 ./strace-static-x86_64: Process 7889 attached [pid 7889] set_robust_list(0x5555571235e0, 24) = 0 [pid 7889] chdir("./150") = 0 [pid 7889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7889] setpgid(0, 0) = 0 [pid 7889] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7889] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7889] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7889] write(3, "1000", 4) = 4 [pid 7889] close(3) = 0 [pid 7889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7889] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7889] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7889] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7890 attached [pid 7890] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7890] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7889] <... clone resumed>, parent_tid=[453], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 453 [pid 7889] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7890] <... futex resumed>) = 0 [pid 7889] <... futex resumed>) = 1 [pid 7890] memfd_create("syzkaller", 0 [pid 7889] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7890] <... memfd_create resumed>) = 3 [pid 7890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7890] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7890] close(3) = 0 [pid 7890] mkdir("./file0", 0777) = 0 [ 184.829911][ T7890] loop0: detected capacity change from 0 to 32768 [ 184.840520][ T7890] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7890) [ 184.857788][ T7890] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 184.866625][ T7890] BTRFS info (device loop0): using free space tree [pid 7890] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7890] chdir("./file0") = 0 [pid 7890] ioctl(4, LOOP_CLR_FD) = 0 [pid 7890] close(4) = 0 [pid 7890] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] <... futex resumed>) = 0 [pid 7889] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7890] <... futex resumed>) = 1 [pid 7890] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7890] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] <... futex resumed>) = 0 [pid 7889] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7890] <... futex resumed>) = 1 [ 184.885888][ T7890] BTRFS info (device loop0): enabling ssd optimizations [ 184.892873][ T7890] BTRFS info (device loop0): auto enabling async discard [ 184.922428][ T7890] BTRFS info (device loop0): balance: start -s [pid 7890] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7889] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7889] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7889] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[454], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 454 [pid 7889] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7906 attached [pid 7906] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7906] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7906] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] <... futex resumed>) = 0 [pid 7889] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7906] <... futex resumed>) = 1 [ 184.939923][ T7890] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7906] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 185.013982][ T7890] BTRFS info (device loop0): balance: ended with status: 0 [pid 7890] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7906] <... ioctl resumed>) = 0 [pid 7890] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7906] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7890] <... futex resumed>) = 0 [pid 7906] <... futex resumed>) = 0 [pid 7890] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7906] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7889] close(3) = 0 [pid 7889] close(4) = 0 [pid 7889] close(5) = 0 [pid 7889] close(6) = -1 EBADF (Bad file descriptor) [pid 7889] close(7) = -1 EBADF (Bad file descriptor) [pid 7889] close(8) = -1 EBADF (Bad file descriptor) [pid 7889] close(9) = -1 EBADF (Bad file descriptor) [pid 7889] close(10) = -1 EBADF (Bad file descriptor) [pid 7889] close(11) = -1 EBADF (Bad file descriptor) [pid 7889] close(12) = -1 EBADF (Bad file descriptor) [pid 7889] close(13) = -1 EBADF (Bad file descriptor) [pid 7889] close(14) = -1 EBADF (Bad file descriptor) [pid 7889] close(15) = -1 EBADF (Bad file descriptor) [pid 7889] close(16) = -1 EBADF (Bad file descriptor) [pid 7889] close(17) = -1 EBADF (Bad file descriptor) [pid 7889] close(18) = -1 EBADF (Bad file descriptor) [pid 7889] close(19) = -1 EBADF (Bad file descriptor) [pid 7889] close(20) = -1 EBADF (Bad file descriptor) [pid 7889] close(21) = -1 EBADF (Bad file descriptor) [pid 7889] close(22) = -1 EBADF (Bad file descriptor) [pid 7889] close(23) = -1 EBADF (Bad file descriptor) [pid 7889] close(24) = -1 EBADF (Bad file descriptor) [pid 7889] close(25) = -1 EBADF (Bad file descriptor) [pid 7889] close(26) = -1 EBADF (Bad file descriptor) [pid 7889] close(27) = -1 EBADF (Bad file descriptor) [pid 7889] close(28) = -1 EBADF (Bad file descriptor) [pid 7889] close(29) = -1 EBADF (Bad file descriptor) [pid 7889] exit_group(0 [pid 7906] <... futex resumed>) = ? [pid 7890] <... futex resumed>) = ? [pid 7889] <... exit_group resumed>) = ? [pid 7906] +++ exited with 0 +++ [pid 7890] +++ exited with 0 +++ [pid 7889] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=452, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./150/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./150/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./150/cgroup.cpu") = 0 [pid 5007] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./150/binderfs") = 0 [pid 5007] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./150/file0") = 0 [pid 5007] umount2("./150/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./150/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./150/cgroup") = 0 [pid 5007] umount2("./150/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./150/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./150/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./150") = 0 [pid 5007] mkdir("./151", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7908 attached , child_tidptr=0x5555571235d0) = 455 [pid 7908] set_robust_list(0x5555571235e0, 24) = 0 [pid 7908] chdir("./151") = 0 [pid 7908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7908] setpgid(0, 0) = 0 [pid 7908] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7908] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7908] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7908] write(3, "1000", 4) = 4 [pid 7908] close(3) = 0 [pid 7908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7908] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7908] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7908] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[456], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 456 [pid 7908] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7909 attached ) = 0 [pid 7909] set_robust_list(0x7fd090fc79e0, 24 [pid 7908] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7909] <... set_robust_list resumed>) = 0 [pid 7909] memfd_create("syzkaller", 0) = 3 [pid 7909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7909] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7909] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7909] close(3) = 0 [pid 7909] mkdir("./file0", 0777) = 0 [ 185.508650][ T7909] loop0: detected capacity change from 0 to 32768 [ 185.518974][ T7909] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7909) [ 185.537317][ T7909] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 185.546176][ T7909] BTRFS info (device loop0): using free space tree [pid 7909] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7909] chdir("./file0") = 0 [pid 7909] ioctl(4, LOOP_CLR_FD) = 0 [pid 7909] close(4) = 0 [pid 7909] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7908] <... futex resumed>) = 0 [pid 7908] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7908] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7909] <... futex resumed>) = 1 [pid 7909] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7909] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7908] <... futex resumed>) = 0 [pid 7908] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7908] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7909] <... futex resumed>) = 1 [ 185.566691][ T7909] BTRFS info (device loop0): enabling ssd optimizations [ 185.573733][ T7909] BTRFS info (device loop0): auto enabling async discard [pid 7909] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7908] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7908] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7908] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7908] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7926 attached [pid 7926] set_robust_list(0x7fd089ba69e0, 24 [pid 7908] <... clone resumed>, parent_tid=[457], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 457 [pid 7926] <... set_robust_list resumed>) = 0 [pid 7908] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7926] openat(AT_FDCWD, ".", O_RDONLY [pid 7908] <... futex resumed>) = 0 [pid 7926] <... openat resumed>) = 5 [pid 7908] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7926] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7908] <... futex resumed>) = 0 [pid 7926] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7908] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 185.613230][ T7909] BTRFS info (device loop0): balance: start -s [ 185.627318][ T7909] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7908] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7908] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 185.691562][ T7909] BTRFS info (device loop0): balance: ended with status: 0 [pid 7926] <... ioctl resumed>) = 0 [pid 7926] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7926] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7909] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7909] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7908] close(3) = 0 [pid 7908] close(4) = 0 [pid 7908] close(5) = 0 [pid 7908] close(6) = -1 EBADF (Bad file descriptor) [pid 7908] close(7) = -1 EBADF (Bad file descriptor) [pid 7908] close(8) = -1 EBADF (Bad file descriptor) [pid 7908] close(9) = -1 EBADF (Bad file descriptor) [pid 7908] close(10) = -1 EBADF (Bad file descriptor) [pid 7908] close(11) = -1 EBADF (Bad file descriptor) [pid 7908] close(12) = -1 EBADF (Bad file descriptor) [pid 7908] close(13) = -1 EBADF (Bad file descriptor) [pid 7908] close(14) = -1 EBADF (Bad file descriptor) [pid 7908] close(15) = -1 EBADF (Bad file descriptor) [pid 7908] close(16) = -1 EBADF (Bad file descriptor) [pid 7908] close(17) = -1 EBADF (Bad file descriptor) [pid 7908] close(18) = -1 EBADF (Bad file descriptor) [pid 7908] close(19) = -1 EBADF (Bad file descriptor) [pid 7908] close(20) = -1 EBADF (Bad file descriptor) [pid 7908] close(21) = -1 EBADF (Bad file descriptor) [pid 7908] close(22) = -1 EBADF (Bad file descriptor) [pid 7908] close(23) = -1 EBADF (Bad file descriptor) [pid 7908] close(24) = -1 EBADF (Bad file descriptor) [pid 7908] close(25) = -1 EBADF (Bad file descriptor) [pid 7908] close(26) = -1 EBADF (Bad file descriptor) [pid 7908] close(27) = -1 EBADF (Bad file descriptor) [pid 7908] close(28) = -1 EBADF (Bad file descriptor) [pid 7908] close(29) = -1 EBADF (Bad file descriptor) [pid 7908] exit_group(0 [pid 7926] <... futex resumed>) = ? [pid 7909] <... futex resumed>) = ? [pid 7908] <... exit_group resumed>) = ? [pid 7926] +++ exited with 0 +++ [pid 7909] +++ exited with 0 +++ [pid 7908] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=455, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./151/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./151/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./151/cgroup.cpu") = 0 [pid 5007] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./151/binderfs") = 0 [pid 5007] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./151/file0") = 0 [pid 5007] umount2("./151/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./151/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./151/cgroup") = 0 [pid 5007] umount2("./151/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./151/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./151/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./151") = 0 [pid 5007] mkdir("./152", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7927 attached [pid 7927] set_robust_list(0x5555571235e0, 24) = 0 [pid 7927] chdir("./152" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 458 [pid 7927] <... chdir resumed>) = 0 [pid 7927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7927] setpgid(0, 0) = 0 [pid 7927] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7927] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7927] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7927] write(3, "1000", 4) = 4 [pid 7927] close(3) = 0 [pid 7927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7927] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7927] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7928 attached , parent_tid=[459], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 459 [pid 7928] set_robust_list(0x7fd090fc79e0, 24 [pid 7927] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7928] <... set_robust_list resumed>) = 0 [pid 7927] <... futex resumed>) = 0 [pid 7928] memfd_create("syzkaller", 0 [pid 7927] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7928] <... memfd_create resumed>) = 3 [pid 7928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7928] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7928] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7928] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7928] close(3) = 0 [pid 7928] mkdir("./file0", 0777) = 0 [ 186.202948][ T7928] loop0: detected capacity change from 0 to 32768 [ 186.213993][ T7928] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7928) [ 186.230845][ T7928] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 186.239885][ T7928] BTRFS info (device loop0): using free space tree [pid 7928] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7928] chdir("./file0") = 0 [pid 7928] ioctl(4, LOOP_CLR_FD) = 0 [pid 7928] close(4) = 0 [pid 7928] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7927] <... futex resumed>) = 0 [pid 7928] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7927] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7928] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7927] <... futex resumed>) = 0 [pid 7928] <... openat resumed>) = 4 [pid 7927] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7928] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7928] <... futex resumed>) = 0 [pid 7928] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7927] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7928] <... futex resumed>) = 0 [pid 7927] <... futex resumed>) = 1 [pid 7928] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 186.259547][ T7928] BTRFS info (device loop0): enabling ssd optimizations [ 186.266717][ T7928] BTRFS info (device loop0): auto enabling async discard [pid 7927] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7927] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7927] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7927] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7945 attached , parent_tid=[460], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 460 [pid 7945] set_robust_list(0x7fd089ba69e0, 24 [pid 7927] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... set_robust_list resumed>) = 0 [pid 7927] <... futex resumed>) = 0 [pid 7945] openat(AT_FDCWD, ".", O_RDONLY [pid 7927] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7945] <... openat resumed>) = 5 [pid 7945] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7927] <... futex resumed>) = 0 [pid 7945] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7927] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7927] <... futex resumed>) = 0 [pid 7945] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 186.318733][ T7928] BTRFS info (device loop0): balance: start -s [ 186.327769][ T7928] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7927] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 186.404044][ T7928] BTRFS info (device loop0): balance: ended with status: 0 [pid 7945] <... ioctl resumed>) = 0 [pid 7928] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7945] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7945] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7928] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] close(3 [pid 7928] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7927] <... close resumed>) = 0 [pid 7927] close(4) = 0 [pid 7927] close(5) = 0 [pid 7927] close(6) = -1 EBADF (Bad file descriptor) [pid 7927] close(7) = -1 EBADF (Bad file descriptor) [pid 7927] close(8) = -1 EBADF (Bad file descriptor) [pid 7927] close(9) = -1 EBADF (Bad file descriptor) [pid 7927] close(10) = -1 EBADF (Bad file descriptor) [pid 7927] close(11) = -1 EBADF (Bad file descriptor) [pid 7927] close(12) = -1 EBADF (Bad file descriptor) [pid 7927] close(13) = -1 EBADF (Bad file descriptor) [pid 7927] close(14) = -1 EBADF (Bad file descriptor) [pid 7927] close(15) = -1 EBADF (Bad file descriptor) [pid 7927] close(16) = -1 EBADF (Bad file descriptor) [pid 7927] close(17) = -1 EBADF (Bad file descriptor) [pid 7927] close(18) = -1 EBADF (Bad file descriptor) [pid 7927] close(19) = -1 EBADF (Bad file descriptor) [pid 7927] close(20) = -1 EBADF (Bad file descriptor) [pid 7927] close(21) = -1 EBADF (Bad file descriptor) [pid 7927] close(22) = -1 EBADF (Bad file descriptor) [pid 7927] close(23) = -1 EBADF (Bad file descriptor) [pid 7927] close(24) = -1 EBADF (Bad file descriptor) [pid 7927] close(25) = -1 EBADF (Bad file descriptor) [pid 7927] close(26) = -1 EBADF (Bad file descriptor) [pid 7927] close(27) = -1 EBADF (Bad file descriptor) [pid 7927] close(28) = -1 EBADF (Bad file descriptor) [pid 7927] close(29) = -1 EBADF (Bad file descriptor) [pid 7927] exit_group(0 [pid 7945] <... futex resumed>) = ? [pid 7928] <... futex resumed>) = ? [pid 7927] <... exit_group resumed>) = ? [pid 7945] +++ exited with 0 +++ [pid 7928] +++ exited with 0 +++ [pid 7927] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=458, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./152/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./152/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./152/cgroup.cpu") = 0 [pid 5007] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./152/binderfs") = 0 [pid 5007] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./152/file0") = 0 [pid 5007] umount2("./152/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./152/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./152/cgroup") = 0 [pid 5007] umount2("./152/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./152/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./152/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./152") = 0 [pid 5007] mkdir("./153", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 461 ./strace-static-x86_64: Process 7946 attached [pid 7946] set_robust_list(0x5555571235e0, 24) = 0 [pid 7946] chdir("./153") = 0 [pid 7946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7946] setpgid(0, 0) = 0 [pid 7946] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7946] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7946] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7946] write(3, "1000", 4) = 4 [pid 7946] close(3) = 0 [pid 7946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7946] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7946] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7946] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7947 attached [pid 7947] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7946] <... clone resumed>, parent_tid=[462], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 462 [pid 7947] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7946] <... futex resumed>) = 0 [pid 7946] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7947] memfd_create("syzkaller", 0) = 3 [pid 7947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7947] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7947] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7947] close(3) = 0 [pid 7947] mkdir("./file0", 0777) = 0 [ 186.873945][ T7947] loop0: detected capacity change from 0 to 32768 [ 186.885279][ T7947] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7947) [ 186.901408][ T7947] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 186.910229][ T7947] BTRFS info (device loop0): using free space tree [pid 7947] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7947] chdir("./file0") = 0 [pid 7947] ioctl(4, LOOP_CLR_FD) = 0 [pid 7947] close(4) = 0 [pid 7947] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7947] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] <... futex resumed>) = 0 [pid 7946] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7947] <... futex resumed>) = 0 [pid 7946] <... futex resumed>) = 1 [pid 7947] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 7946] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7947] <... openat resumed>) = 4 [pid 7947] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7946] <... futex resumed>) = 0 [pid 7947] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7946] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 186.929665][ T7947] BTRFS info (device loop0): enabling ssd optimizations [ 186.936973][ T7947] BTRFS info (device loop0): auto enabling async discard [ 186.978080][ T7947] BTRFS info (device loop0): balance: start -s [ 186.986840][ T7947] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7946] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7946] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7946] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7946] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[463], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 463 [pid 7946] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7946] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7964 attached [pid 7964] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 7964] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 7964] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7946] <... futex resumed>) = 0 [pid 7946] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7946] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7964] <... futex resumed>) = 1 [pid 7964] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7947] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7947] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 187.022418][ T7947] BTRFS info (device loop0): balance: ended with status: 0 [pid 7947] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7946] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7964] <... ioctl resumed>) = 0 [pid 7964] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7964] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7946] close(3) = 0 [pid 7946] close(4) = 0 [pid 7946] close(5) = 0 [pid 7946] close(6) = -1 EBADF (Bad file descriptor) [pid 7946] close(7) = -1 EBADF (Bad file descriptor) [pid 7946] close(8) = -1 EBADF (Bad file descriptor) [pid 7946] close(9) = -1 EBADF (Bad file descriptor) [pid 7946] close(10) = -1 EBADF (Bad file descriptor) [pid 7946] close(11) = -1 EBADF (Bad file descriptor) [pid 7946] close(12) = -1 EBADF (Bad file descriptor) [pid 7946] close(13) = -1 EBADF (Bad file descriptor) [pid 7946] close(14) = -1 EBADF (Bad file descriptor) [pid 7946] close(15) = -1 EBADF (Bad file descriptor) [pid 7946] close(16) = -1 EBADF (Bad file descriptor) [pid 7946] close(17) = -1 EBADF (Bad file descriptor) [pid 7946] close(18) = -1 EBADF (Bad file descriptor) [pid 7946] close(19) = -1 EBADF (Bad file descriptor) [pid 7946] close(20) = -1 EBADF (Bad file descriptor) [pid 7946] close(21) = -1 EBADF (Bad file descriptor) [pid 7946] close(22) = -1 EBADF (Bad file descriptor) [pid 7946] close(23) = -1 EBADF (Bad file descriptor) [pid 7946] close(24) = -1 EBADF (Bad file descriptor) [pid 7946] close(25) = -1 EBADF (Bad file descriptor) [pid 7946] close(26) = -1 EBADF (Bad file descriptor) [pid 7946] close(27) = -1 EBADF (Bad file descriptor) [pid 7946] close(28) = -1 EBADF (Bad file descriptor) [pid 7946] close(29) = -1 EBADF (Bad file descriptor) [pid 7946] exit_group(0 [pid 7964] <... futex resumed>) = ? [pid 7947] <... futex resumed>) = ? [pid 7946] <... exit_group resumed>) = ? [pid 7947] +++ exited with 0 +++ [pid 7964] +++ exited with 0 +++ [pid 7946] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=461, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./153/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./153/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./153/cgroup.cpu") = 0 [pid 5007] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./153/binderfs") = 0 [pid 5007] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./153/file0") = 0 [pid 5007] umount2("./153/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./153/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./153/cgroup") = 0 [pid 5007] umount2("./153/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./153/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./153/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./153") = 0 [pid 5007] mkdir("./154", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 464 ./strace-static-x86_64: Process 7965 attached [pid 7965] set_robust_list(0x5555571235e0, 24) = 0 [pid 7965] chdir("./154") = 0 [pid 7965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7965] setpgid(0, 0) = 0 [pid 7965] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7965] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7965] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7965] write(3, "1000", 4) = 4 [pid 7965] close(3) = 0 [pid 7965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7965] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7965] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7965] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7966 attached [pid 7966] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 7966] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7965] <... clone resumed>, parent_tid=[465], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 465 [pid 7965] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7966] <... futex resumed>) = 0 [pid 7965] <... futex resumed>) = 1 [pid 7966] memfd_create("syzkaller", 0 [pid 7965] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7966] <... memfd_create resumed>) = 3 [pid 7966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7966] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7966] close(3) = 0 [pid 7966] mkdir("./file0", 0777) = 0 [ 187.600426][ T7966] loop0: detected capacity change from 0 to 32768 [ 187.612025][ T7966] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7966) [ 187.628411][ T7966] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.637701][ T7966] BTRFS info (device loop0): using free space tree [pid 7966] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7966] chdir("./file0") = 0 [pid 7966] ioctl(4, LOOP_CLR_FD) = 0 [pid 7966] close(4) = 0 [pid 7966] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7965] <... futex resumed>) = 0 [pid 7965] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7965] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7966] <... futex resumed>) = 1 [pid 7966] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7966] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7965] <... futex resumed>) = 0 [pid 7965] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7965] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7966] <... futex resumed>) = 1 [ 187.658990][ T7966] BTRFS info (device loop0): enabling ssd optimizations [ 187.666230][ T7966] BTRFS info (device loop0): auto enabling async discard [pid 7966] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7965] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7965] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7965] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7965] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7983 attached , parent_tid=[466], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 466 [pid 7983] set_robust_list(0x7fd089ba69e0, 24 [pid 7965] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7983] <... set_robust_list resumed>) = 0 [pid 7983] openat(AT_FDCWD, ".", O_RDONLY [pid 7965] <... futex resumed>) = 0 [pid 7965] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7983] <... openat resumed>) = 5 [pid 7983] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7965] <... futex resumed>) = 0 [pid 7983] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7965] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 187.725668][ T7966] BTRFS info (device loop0): balance: start -s [ 187.733875][ T7966] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 7965] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 187.798913][ T7966] BTRFS info (device loop0): balance: ended with status: 0 [pid 7983] <... ioctl resumed>) = 0 [pid 7983] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7983] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7966] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7966] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7965] close(3 [pid 7966] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7965] <... close resumed>) = 0 [pid 7965] close(4) = 0 [pid 7965] close(5) = 0 [pid 7965] close(6) = -1 EBADF (Bad file descriptor) [pid 7965] close(7) = -1 EBADF (Bad file descriptor) [pid 7965] close(8) = -1 EBADF (Bad file descriptor) [pid 7965] close(9) = -1 EBADF (Bad file descriptor) [pid 7965] close(10) = -1 EBADF (Bad file descriptor) [pid 7965] close(11) = -1 EBADF (Bad file descriptor) [pid 7965] close(12) = -1 EBADF (Bad file descriptor) [pid 7965] close(13) = -1 EBADF (Bad file descriptor) [pid 7965] close(14) = -1 EBADF (Bad file descriptor) [pid 7965] close(15) = -1 EBADF (Bad file descriptor) [pid 7965] close(16) = -1 EBADF (Bad file descriptor) [pid 7965] close(17) = -1 EBADF (Bad file descriptor) [pid 7965] close(18) = -1 EBADF (Bad file descriptor) [pid 7965] close(19) = -1 EBADF (Bad file descriptor) [pid 7965] close(20) = -1 EBADF (Bad file descriptor) [pid 7965] close(21) = -1 EBADF (Bad file descriptor) [pid 7965] close(22) = -1 EBADF (Bad file descriptor) [pid 7965] close(23) = -1 EBADF (Bad file descriptor) [pid 7965] close(24) = -1 EBADF (Bad file descriptor) [pid 7965] close(25) = -1 EBADF (Bad file descriptor) [pid 7965] close(26) = -1 EBADF (Bad file descriptor) [pid 7965] close(27) = -1 EBADF (Bad file descriptor) [pid 7965] close(28) = -1 EBADF (Bad file descriptor) [pid 7965] close(29) = -1 EBADF (Bad file descriptor) [pid 7965] exit_group(0 [pid 7966] <... futex resumed>) = ? [pid 7983] <... futex resumed>) = ? [pid 7965] <... exit_group resumed>) = ? [pid 7983] +++ exited with 0 +++ [pid 7966] +++ exited with 0 +++ [pid 7965] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=464, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./154/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./154/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./154/cgroup.cpu") = 0 [pid 5007] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./154/binderfs") = 0 [pid 5007] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./154/file0") = 0 [pid 5007] umount2("./154/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./154/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./154/cgroup") = 0 [pid 5007] umount2("./154/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./154/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./154/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./154") = 0 [pid 5007] mkdir("./155", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7984 attached , child_tidptr=0x5555571235d0) = 467 [pid 7984] set_robust_list(0x5555571235e0, 24) = 0 [pid 7984] chdir("./155") = 0 [pid 7984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7984] setpgid(0, 0) = 0 [pid 7984] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7984] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7984] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7984] write(3, "1000", 4) = 4 [pid 7984] close(3) = 0 [pid 7984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7984] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 7984] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7984] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7985 attached [pid 7985] set_robust_list(0x7fd090fc79e0, 24 [pid 7984] <... clone resumed>, parent_tid=[468], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 468 [pid 7985] <... set_robust_list resumed>) = 0 [pid 7984] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7985] memfd_create("syzkaller", 0 [pid 7984] <... futex resumed>) = 0 [pid 7985] <... memfd_create resumed>) = 3 [pid 7984] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 7985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7985] munmap(0x7fd088ba7000, 16777216) = 0 [pid 7985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7985] close(3) = 0 [pid 7985] mkdir("./file0", 0777) = 0 [ 188.303535][ T7985] loop0: detected capacity change from 0 to 32768 [ 188.314844][ T7985] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (7985) [ 188.332767][ T7985] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 188.341760][ T7985] BTRFS info (device loop0): using free space tree [pid 7985] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 7985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7985] chdir("./file0") = 0 [pid 7985] ioctl(4, LOOP_CLR_FD) = 0 [pid 7985] close(4) = 0 [pid 7985] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] <... futex resumed>) = 0 [pid 7984] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7985] <... futex resumed>) = 1 [pid 7985] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 7985] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7984] <... futex resumed>) = 0 [pid 7984] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7985] <... futex resumed>) = 1 [ 188.361167][ T7985] BTRFS info (device loop0): enabling ssd optimizations [ 188.368435][ T7985] BTRFS info (device loop0): auto enabling async discard [pid 7985] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7984] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 7984] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7984] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[469], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 469 [pid 7984] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8002 attached [pid 7984] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8002] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8002] openat(AT_FDCWD, ".", O_RDONLY [pid 7985] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8002] <... openat resumed>) = 5 [pid 7985] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8002] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7985] <... futex resumed>) = 0 [pid 8002] <... futex resumed>) = 1 [pid 7985] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] <... futex resumed>) = 0 [pid 8002] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7985] <... futex resumed>) = 0 [pid 7984] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 188.422412][ T7985] BTRFS info (device loop0): balance: start -s [ 188.431118][ T7985] BTRFS info (device loop0): relocating block group 1048576 flags system [ 188.458460][ T7985] BTRFS info (device loop0): balance: ended with status: 0 [pid 7985] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 7984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7984] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7985] <... ioctl resumed>) = 0 [pid 7985] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7984] close(3 [pid 7985] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7984] <... close resumed>) = 0 [pid 7984] close(4) = 0 [pid 7984] close(5) = 0 [pid 7984] close(6) = -1 EBADF (Bad file descriptor) [pid 7984] close(7) = -1 EBADF (Bad file descriptor) [pid 7984] close(8) = -1 EBADF (Bad file descriptor) [pid 7984] close(9) = -1 EBADF (Bad file descriptor) [pid 7984] close(10) = -1 EBADF (Bad file descriptor) [pid 7984] close(11) = -1 EBADF (Bad file descriptor) [pid 7984] close(12) = -1 EBADF (Bad file descriptor) [pid 7984] close(13) = -1 EBADF (Bad file descriptor) [pid 7984] close(14) = -1 EBADF (Bad file descriptor) [pid 7984] close(15) = -1 EBADF (Bad file descriptor) [pid 7984] close(16) = -1 EBADF (Bad file descriptor) [pid 7984] close(17) = -1 EBADF (Bad file descriptor) [pid 7984] close(18) = -1 EBADF (Bad file descriptor) [pid 7984] close(19) = -1 EBADF (Bad file descriptor) [pid 7984] close(20) = -1 EBADF (Bad file descriptor) [pid 7984] close(21) = -1 EBADF (Bad file descriptor) [pid 7984] close(22) = -1 EBADF (Bad file descriptor) [pid 7984] close(23) = -1 EBADF (Bad file descriptor) [pid 7984] close(24) = -1 EBADF (Bad file descriptor) [pid 7984] close(25) = -1 EBADF (Bad file descriptor) [pid 7984] close(26) = -1 EBADF (Bad file descriptor) [pid 7984] close(27) = -1 EBADF (Bad file descriptor) [pid 7984] close(28) = -1 EBADF (Bad file descriptor) [pid 7984] close(29) = -1 EBADF (Bad file descriptor) [pid 7984] exit_group(0) = ? [pid 7985] <... futex resumed>) = ? [pid 8002] <... futex resumed>) = ? [pid 8002] +++ exited with 0 +++ [pid 7985] +++ exited with 0 +++ [pid 7984] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./155/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./155/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./155/cgroup.cpu") = 0 [pid 5007] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./155/binderfs") = 0 [pid 5007] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./155/file0") = 0 [pid 5007] umount2("./155/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./155/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./155/cgroup") = 0 [pid 5007] umount2("./155/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./155/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./155/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./155") = 0 [pid 5007] mkdir("./156", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 470 ./strace-static-x86_64: Process 8003 attached [pid 8003] set_robust_list(0x5555571235e0, 24) = 0 [pid 8003] chdir("./156") = 0 [pid 8003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8003] setpgid(0, 0) = 0 [pid 8003] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8003] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8003] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8003] write(3, "1000", 4) = 4 [pid 8003] close(3) = 0 [pid 8003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8003] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8003] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8003] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8004 attached , parent_tid=[471], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 471 [pid 8003] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8003] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8004] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8004] memfd_create("syzkaller", 0) = 3 [pid 8004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8004] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8004] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8004] close(3) = 0 [pid 8004] mkdir("./file0", 0777) = 0 [ 189.023193][ T8004] loop0: detected capacity change from 0 to 32768 [ 189.034176][ T8004] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8004) [ 189.050731][ T8004] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 189.059768][ T8004] BTRFS info (device loop0): using free space tree [pid 8004] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8004] chdir("./file0") = 0 [pid 8004] ioctl(4, LOOP_CLR_FD) = 0 [pid 8004] close(4) = 0 [pid 8004] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8003] <... futex resumed>) = 0 [pid 8003] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8003] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8004] <... futex resumed>) = 1 [pid 8004] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 8004] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8004] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8003] <... futex resumed>) = 0 [pid 8003] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8003] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8004] <... futex resumed>) = 0 [ 189.080742][ T8004] BTRFS info (device loop0): enabling ssd optimizations [ 189.087998][ T8004] BTRFS info (device loop0): auto enabling async discard [pid 8004] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8003] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8003] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8003] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8021 attached , parent_tid=[472], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 472 [pid 8003] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8003] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8021] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8021] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8021] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8003] <... futex resumed>) = 0 [pid 8003] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8003] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 189.140344][ T8004] BTRFS info (device loop0): balance: start -s [ 189.157007][ T8004] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8021] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 189.240771][ T8004] BTRFS info (device loop0): balance: ended with status: 0 [pid 8021] <... ioctl resumed>) = 0 [pid 8021] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8004] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8004] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8004] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8021] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8003] close(3) = 0 [pid 8003] close(4) = 0 [pid 8003] close(5) = 0 [pid 8003] close(6) = -1 EBADF (Bad file descriptor) [pid 8003] close(7) = -1 EBADF (Bad file descriptor) [pid 8003] close(8) = -1 EBADF (Bad file descriptor) [pid 8003] close(9) = -1 EBADF (Bad file descriptor) [pid 8003] close(10) = -1 EBADF (Bad file descriptor) [pid 8003] close(11) = -1 EBADF (Bad file descriptor) [pid 8003] close(12) = -1 EBADF (Bad file descriptor) [pid 8003] close(13) = -1 EBADF (Bad file descriptor) [pid 8003] close(14) = -1 EBADF (Bad file descriptor) [pid 8003] close(15) = -1 EBADF (Bad file descriptor) [pid 8003] close(16) = -1 EBADF (Bad file descriptor) [pid 8003] close(17) = -1 EBADF (Bad file descriptor) [pid 8003] close(18) = -1 EBADF (Bad file descriptor) [pid 8003] close(19) = -1 EBADF (Bad file descriptor) [pid 8003] close(20) = -1 EBADF (Bad file descriptor) [pid 8003] close(21) = -1 EBADF (Bad file descriptor) [pid 8003] close(22) = -1 EBADF (Bad file descriptor) [pid 8003] close(23) = -1 EBADF (Bad file descriptor) [pid 8003] close(24) = -1 EBADF (Bad file descriptor) [pid 8003] close(25) = -1 EBADF (Bad file descriptor) [pid 8003] close(26) = -1 EBADF (Bad file descriptor) [pid 8003] close(27) = -1 EBADF (Bad file descriptor) [pid 8003] close(28) = -1 EBADF (Bad file descriptor) [pid 8003] close(29) = -1 EBADF (Bad file descriptor) [pid 8003] exit_group(0 [pid 8021] <... futex resumed>) = ? [pid 8004] <... futex resumed>) = ? [pid 8003] <... exit_group resumed>) = ? [pid 8021] +++ exited with 0 +++ [pid 8004] +++ exited with 0 +++ [pid 8003] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=470, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./156/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./156/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./156/cgroup.cpu") = 0 [pid 5007] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./156/binderfs") = 0 [pid 5007] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./156/file0") = 0 [pid 5007] umount2("./156/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./156/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./156/cgroup") = 0 [pid 5007] umount2("./156/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./156/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./156/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./156") = 0 [pid 5007] mkdir("./157", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8022 attached [pid 8022] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 473 [pid 8022] <... set_robust_list resumed>) = 0 [pid 8022] chdir("./157") = 0 [pid 8022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8022] setpgid(0, 0) = 0 [pid 8022] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8022] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8022] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8022] write(3, "1000", 4) = 4 [pid 8022] close(3) = 0 [pid 8022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8022] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8022] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8022] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8023 attached [pid 8023] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8023] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8022] <... clone resumed>, parent_tid=[474], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 474 [pid 8022] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] <... futex resumed>) = 0 [pid 8022] <... futex resumed>) = 1 [pid 8023] memfd_create("syzkaller", 0) = 3 [pid 8023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8022] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8023] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8023] close(3) = 0 [pid 8023] mkdir("./file0", 0777) = 0 [ 189.711471][ T8023] loop0: detected capacity change from 0 to 32768 [ 189.722705][ T8023] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8023) [ 189.740355][ T8023] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 189.749174][ T8023] BTRFS info (device loop0): using free space tree [pid 8023] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8023] chdir("./file0") = 0 [pid 8023] ioctl(4, LOOP_CLR_FD) = 0 [pid 8023] close(4) = 0 [pid 8023] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8022] <... futex resumed>) = 0 [pid 8023] <... futex resumed>) = 1 [pid 8022] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8022] <... futex resumed>) = 0 [pid 8022] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8023] <... openat resumed>) = 4 [pid 8023] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8022] <... futex resumed>) = 0 [pid 8023] <... futex resumed>) = 1 [pid 8022] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8023] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8022] <... futex resumed>) = 0 [ 189.770009][ T8023] BTRFS info (device loop0): enabling ssd optimizations [ 189.777174][ T8023] BTRFS info (device loop0): auto enabling async discard [pid 8022] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8022] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8022] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8022] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[475], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 475 [pid 8022] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 189.832769][ T8023] BTRFS info (device loop0): balance: start -s [ 189.842726][ T8023] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8022] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8040 attached [pid 8040] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8040] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8040] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8022] <... futex resumed>) = 0 [pid 8022] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8022] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8040] <... futex resumed>) = 1 [pid 8040] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 189.886760][ T8023] BTRFS info (device loop0): balance: ended with status: 0 [pid 8023] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8023] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8023] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8040] <... ioctl resumed>) = 0 [pid 8040] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8040] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8022] close(3) = 0 [pid 8022] close(4) = 0 [pid 8022] close(5) = 0 [pid 8022] close(6) = -1 EBADF (Bad file descriptor) [pid 8022] close(7) = -1 EBADF (Bad file descriptor) [pid 8022] close(8) = -1 EBADF (Bad file descriptor) [pid 8022] close(9) = -1 EBADF (Bad file descriptor) [pid 8022] close(10) = -1 EBADF (Bad file descriptor) [pid 8022] close(11) = -1 EBADF (Bad file descriptor) [pid 8022] close(12) = -1 EBADF (Bad file descriptor) [pid 8022] close(13) = -1 EBADF (Bad file descriptor) [pid 8022] close(14) = -1 EBADF (Bad file descriptor) [pid 8022] close(15) = -1 EBADF (Bad file descriptor) [pid 8022] close(16) = -1 EBADF (Bad file descriptor) [pid 8022] close(17) = -1 EBADF (Bad file descriptor) [pid 8022] close(18) = -1 EBADF (Bad file descriptor) [pid 8022] close(19) = -1 EBADF (Bad file descriptor) [pid 8022] close(20) = -1 EBADF (Bad file descriptor) [pid 8022] close(21) = -1 EBADF (Bad file descriptor) [pid 8022] close(22) = -1 EBADF (Bad file descriptor) [pid 8022] close(23) = -1 EBADF (Bad file descriptor) [pid 8022] close(24) = -1 EBADF (Bad file descriptor) [pid 8022] close(25) = -1 EBADF (Bad file descriptor) [pid 8022] close(26) = -1 EBADF (Bad file descriptor) [pid 8022] close(27) = -1 EBADF (Bad file descriptor) [pid 8022] close(28) = -1 EBADF (Bad file descriptor) [pid 8022] close(29) = -1 EBADF (Bad file descriptor) [pid 8022] exit_group(0 [pid 8040] <... futex resumed>) = ? [pid 8023] <... futex resumed>) = ? [pid 8022] <... exit_group resumed>) = ? [pid 8040] +++ exited with 0 +++ [pid 8023] +++ exited with 0 +++ [pid 8022] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=473, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./157/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./157/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./157/cgroup.cpu") = 0 [pid 5007] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./157/binderfs") = 0 [pid 5007] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./157/file0") = 0 [pid 5007] umount2("./157/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./157/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./157/cgroup") = 0 [pid 5007] umount2("./157/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./157/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./157/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./157") = 0 [pid 5007] mkdir("./158", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 476 ./strace-static-x86_64: Process 8041 attached [pid 8041] set_robust_list(0x5555571235e0, 24) = 0 [pid 8041] chdir("./158") = 0 [pid 8041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8041] setpgid(0, 0) = 0 [pid 8041] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8041] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8041] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8041] write(3, "1000", 4) = 4 [pid 8041] close(3) = 0 [pid 8041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8041] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8041] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8041] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[477], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 477 [pid 8041] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8041] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8042 attached [pid 8042] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8042] memfd_create("syzkaller", 0) = 3 [pid 8042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8042] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8042] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8042] close(3) = 0 [pid 8042] mkdir("./file0", 0777) = 0 [ 190.370120][ T8042] loop0: detected capacity change from 0 to 32768 [ 190.381415][ T8042] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8042) [ 190.400401][ T8042] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 190.409218][ T8042] BTRFS info (device loop0): using free space tree [pid 8042] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8042] chdir("./file0") = 0 [pid 8042] ioctl(4, LOOP_CLR_FD) = 0 [pid 8042] close(4) = 0 [pid 8042] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8041] <... futex resumed>) = 0 [pid 8041] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8042] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8041] <... futex resumed>) = 0 [pid 8041] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8042] <... openat resumed>) = 4 [pid 8042] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8041] <... futex resumed>) = 0 [pid 8042] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8041] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 190.431068][ T8042] BTRFS info (device loop0): enabling ssd optimizations [ 190.438223][ T8042] BTRFS info (device loop0): auto enabling async discard [pid 8041] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8041] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8041] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8041] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8059 attached , parent_tid=[478], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 478 [pid 8041] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8041] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8059] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8059] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8059] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8041] <... futex resumed>) = 0 [pid 8041] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8041] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 190.491343][ T8042] BTRFS info (device loop0): balance: start -s [ 190.499714][ T8042] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8059] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8041] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8042] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8042] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 190.575313][ T8042] BTRFS info (device loop0): balance: ended with status: 0 [pid 8042] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8059] <... ioctl resumed>) = 0 [pid 8059] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8041] close(3 [pid 8059] <... futex resumed>) = 0 [pid 8041] <... close resumed>) = 0 [pid 8059] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8041] close(4) = 0 [pid 8041] close(5) = 0 [pid 8041] close(6) = -1 EBADF (Bad file descriptor) [pid 8041] close(7) = -1 EBADF (Bad file descriptor) [pid 8041] close(8) = -1 EBADF (Bad file descriptor) [pid 8041] close(9) = -1 EBADF (Bad file descriptor) [pid 8041] close(10) = -1 EBADF (Bad file descriptor) [pid 8041] close(11) = -1 EBADF (Bad file descriptor) [pid 8041] close(12) = -1 EBADF (Bad file descriptor) [pid 8041] close(13) = -1 EBADF (Bad file descriptor) [pid 8041] close(14) = -1 EBADF (Bad file descriptor) [pid 8041] close(15) = -1 EBADF (Bad file descriptor) [pid 8041] close(16) = -1 EBADF (Bad file descriptor) [pid 8041] close(17) = -1 EBADF (Bad file descriptor) [pid 8041] close(18) = -1 EBADF (Bad file descriptor) [pid 8041] close(19) = -1 EBADF (Bad file descriptor) [pid 8041] close(20) = -1 EBADF (Bad file descriptor) [pid 8041] close(21) = -1 EBADF (Bad file descriptor) [pid 8041] close(22) = -1 EBADF (Bad file descriptor) [pid 8041] close(23) = -1 EBADF (Bad file descriptor) [pid 8041] close(24) = -1 EBADF (Bad file descriptor) [pid 8041] close(25) = -1 EBADF (Bad file descriptor) [pid 8041] close(26) = -1 EBADF (Bad file descriptor) [pid 8041] close(27) = -1 EBADF (Bad file descriptor) [pid 8041] close(28) = -1 EBADF (Bad file descriptor) [pid 8041] close(29) = -1 EBADF (Bad file descriptor) [pid 8041] exit_group(0 [pid 8059] <... futex resumed>) = ? [pid 8042] <... futex resumed>) = ? [pid 8041] <... exit_group resumed>) = ? [pid 8059] +++ exited with 0 +++ [pid 8042] +++ exited with 0 +++ [pid 8041] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=476, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./158/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./158/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./158/cgroup.cpu") = 0 [pid 5007] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./158/binderfs") = 0 [pid 5007] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./158/file0") = 0 [pid 5007] umount2("./158/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./158/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./158/cgroup") = 0 [pid 5007] umount2("./158/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./158/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./158/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./158") = 0 [pid 5007] mkdir("./159", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8060 attached , child_tidptr=0x5555571235d0) = 479 [pid 8060] set_robust_list(0x5555571235e0, 24) = 0 [pid 8060] chdir("./159") = 0 [pid 8060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8060] setpgid(0, 0) = 0 [pid 8060] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8060] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8060] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8060] write(3, "1000", 4) = 4 [pid 8060] close(3) = 0 [pid 8060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8060] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8060] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8060] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8061 attached [pid 8061] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8061] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8060] <... clone resumed>, parent_tid=[480], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 480 [pid 8060] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8061] <... futex resumed>) = 0 [pid 8060] <... futex resumed>) = 1 [pid 8061] memfd_create("syzkaller", 0 [pid 8060] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8061] <... memfd_create resumed>) = 3 [pid 8061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8061] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8061] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8061] close(3) = 0 [pid 8061] mkdir("./file0", 0777) = 0 [ 191.081811][ T8061] loop0: detected capacity change from 0 to 32768 [ 191.092911][ T8061] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8061) [ 191.109587][ T8061] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 191.118418][ T8061] BTRFS info (device loop0): using free space tree [pid 8061] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8061] chdir("./file0") = 0 [pid 8061] ioctl(4, LOOP_CLR_FD) = 0 [pid 8061] close(4) = 0 [pid 8061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8060] <... futex resumed>) = 0 [pid 8061] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8060] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8060] <... futex resumed>) = 0 [pid 8061] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8060] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8061] <... openat resumed>) = 4 [pid 8061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8060] <... futex resumed>) = 0 [pid 8060] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8061] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8060] <... futex resumed>) = 0 [ 191.139563][ T8061] BTRFS info (device loop0): enabling ssd optimizations [ 191.146868][ T8061] BTRFS info (device loop0): auto enabling async discard [pid 8060] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8060] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8060] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8060] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8060] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8078 attached , parent_tid=[481], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 481 [pid 8078] set_robust_list(0x7fd089ba69e0, 24 [pid 8060] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8078] <... set_robust_list resumed>) = 0 [pid 8060] <... futex resumed>) = 0 [pid 8078] openat(AT_FDCWD, ".", O_RDONLY [pid 8060] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8078] <... openat resumed>) = 5 [pid 8078] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8060] <... futex resumed>) = 0 [pid 8078] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8060] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8060] <... futex resumed>) = 0 [pid 8078] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 191.185981][ T8061] BTRFS info (device loop0): balance: start -s [ 191.194223][ T8061] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8060] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8061] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8061] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8060] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 191.240666][ T8061] BTRFS info (device loop0): balance: ended with status: 0 [pid 8078] <... ioctl resumed>) = 0 [pid 8078] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8078] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8060] close(3) = 0 [pid 8060] close(4) = 0 [pid 8060] close(5) = 0 [pid 8060] close(6) = -1 EBADF (Bad file descriptor) [pid 8060] close(7) = -1 EBADF (Bad file descriptor) [pid 8060] close(8) = -1 EBADF (Bad file descriptor) [pid 8060] close(9) = -1 EBADF (Bad file descriptor) [pid 8060] close(10) = -1 EBADF (Bad file descriptor) [pid 8060] close(11) = -1 EBADF (Bad file descriptor) [pid 8060] close(12) = -1 EBADF (Bad file descriptor) [pid 8060] close(13) = -1 EBADF (Bad file descriptor) [pid 8060] close(14) = -1 EBADF (Bad file descriptor) [pid 8060] close(15) = -1 EBADF (Bad file descriptor) [pid 8060] close(16) = -1 EBADF (Bad file descriptor) [pid 8060] close(17) = -1 EBADF (Bad file descriptor) [pid 8060] close(18) = -1 EBADF (Bad file descriptor) [pid 8060] close(19) = -1 EBADF (Bad file descriptor) [pid 8060] close(20) = -1 EBADF (Bad file descriptor) [pid 8060] close(21) = -1 EBADF (Bad file descriptor) [pid 8060] close(22) = -1 EBADF (Bad file descriptor) [pid 8060] close(23) = -1 EBADF (Bad file descriptor) [pid 8060] close(24) = -1 EBADF (Bad file descriptor) [pid 8060] close(25) = -1 EBADF (Bad file descriptor) [pid 8060] close(26) = -1 EBADF (Bad file descriptor) [pid 8060] close(27) = -1 EBADF (Bad file descriptor) [pid 8060] close(28) = -1 EBADF (Bad file descriptor) [pid 8060] close(29) = -1 EBADF (Bad file descriptor) [pid 8060] exit_group(0 [pid 8061] <... futex resumed>) = ? [pid 8078] <... futex resumed>) = ? [pid 8060] <... exit_group resumed>) = ? [pid 8078] +++ exited with 0 +++ [pid 8061] +++ exited with 0 +++ [pid 8060] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=479, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./159/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./159/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./159/cgroup.cpu") = 0 [pid 5007] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./159/binderfs") = 0 [pid 5007] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./159/file0") = 0 [pid 5007] umount2("./159/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./159/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./159/cgroup") = 0 [pid 5007] umount2("./159/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./159/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./159/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./159") = 0 [pid 5007] mkdir("./160", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8079 attached [pid 8079] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 482 [pid 8079] <... set_robust_list resumed>) = 0 [pid 8079] chdir("./160") = 0 [pid 8079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8079] setpgid(0, 0) = 0 [pid 8079] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8079] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8079] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8079] write(3, "1000", 4) = 4 [pid 8079] close(3) = 0 [pid 8079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8079] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8079] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8079] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8080 attached [pid 8080] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8079] <... clone resumed>, parent_tid=[483], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 483 [pid 8080] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8079] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8080] <... futex resumed>) = 0 [pid 8079] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8080] memfd_create("syzkaller", 0) = 3 [pid 8080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8080] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8080] close(3) = 0 [pid 8080] mkdir("./file0", 0777) = 0 [ 191.753248][ T8080] loop0: detected capacity change from 0 to 32768 [ 191.764513][ T8080] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8080) [ 191.781833][ T8080] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 191.790877][ T8080] BTRFS info (device loop0): using free space tree [pid 8080] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8080] chdir("./file0") = 0 [pid 8080] ioctl(4, LOOP_CLR_FD) = 0 [pid 8080] close(4) = 0 [pid 8080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8079] <... futex resumed>) = 0 [pid 8080] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8079] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8079] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8080] <... openat resumed>) = 4 [pid 8080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8079] <... futex resumed>) = 0 [pid 8080] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8079] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 191.810228][ T8080] BTRFS info (device loop0): enabling ssd optimizations [ 191.817550][ T8080] BTRFS info (device loop0): auto enabling async discard [pid 8079] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8079] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8079] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[484], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 484 [pid 8079] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8079] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8097 attached [pid 8097] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8097] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8097] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8079] <... futex resumed>) = 0 [pid 8079] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8079] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8097] <... futex resumed>) = 1 [ 191.864525][ T8080] BTRFS info (device loop0): balance: start -s [ 191.876767][ T8080] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8097] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8079] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 191.943686][ T8080] BTRFS info (device loop0): balance: ended with status: 0 [pid 8097] <... ioctl resumed>) = 0 [pid 8097] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8097] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8080] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8080] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8079] close(3) = 0 [pid 8079] close(4) = 0 [pid 8079] close(5) = 0 [pid 8079] close(6) = -1 EBADF (Bad file descriptor) [pid 8079] close(7) = -1 EBADF (Bad file descriptor) [pid 8079] close(8) = -1 EBADF (Bad file descriptor) [pid 8079] close(9) = -1 EBADF (Bad file descriptor) [pid 8079] close(10) = -1 EBADF (Bad file descriptor) [pid 8079] close(11) = -1 EBADF (Bad file descriptor) [pid 8079] close(12) = -1 EBADF (Bad file descriptor) [pid 8079] close(13) = -1 EBADF (Bad file descriptor) [pid 8079] close(14) = -1 EBADF (Bad file descriptor) [pid 8079] close(15) = -1 EBADF (Bad file descriptor) [pid 8079] close(16) = -1 EBADF (Bad file descriptor) [pid 8079] close(17) = -1 EBADF (Bad file descriptor) [pid 8079] close(18) = -1 EBADF (Bad file descriptor) [pid 8079] close(19) = -1 EBADF (Bad file descriptor) [pid 8079] close(20) = -1 EBADF (Bad file descriptor) [pid 8079] close(21) = -1 EBADF (Bad file descriptor) [pid 8079] close(22) = -1 EBADF (Bad file descriptor) [pid 8079] close(23) = -1 EBADF (Bad file descriptor) [pid 8079] close(24) = -1 EBADF (Bad file descriptor) [pid 8079] close(25) = -1 EBADF (Bad file descriptor) [pid 8079] close(26) = -1 EBADF (Bad file descriptor) [pid 8079] close(27) = -1 EBADF (Bad file descriptor) [pid 8079] close(28) = -1 EBADF (Bad file descriptor) [pid 8079] close(29) = -1 EBADF (Bad file descriptor) [pid 8079] exit_group(0 [pid 8080] <... futex resumed>) = ? [pid 8097] <... futex resumed>) = ? [pid 8079] <... exit_group resumed>) = ? [pid 8097] +++ exited with 0 +++ [pid 8080] +++ exited with 0 +++ [pid 8079] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=482, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./160/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./160/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./160/cgroup.cpu") = 0 [pid 5007] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./160/binderfs") = 0 [pid 5007] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./160/file0") = 0 [pid 5007] umount2("./160/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./160/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./160/cgroup") = 0 [pid 5007] umount2("./160/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./160/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./160/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./160") = 0 [pid 5007] mkdir("./161", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 485 ./strace-static-x86_64: Process 8098 attached [pid 8098] set_robust_list(0x5555571235e0, 24) = 0 [pid 8098] chdir("./161") = 0 [pid 8098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8098] setpgid(0, 0) = 0 [pid 8098] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8098] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8098] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8098] write(3, "1000", 4) = 4 [pid 8098] close(3) = 0 [pid 8098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8098] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8098] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8098] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8099 attached , parent_tid=[486], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 486 [pid 8099] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8098] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8098] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8099] memfd_create("syzkaller", 0) = 3 [pid 8099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8099] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8099] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8099] close(3) = 0 [pid 8099] mkdir("./file0", 0777) = 0 [ 192.459077][ T8099] loop0: detected capacity change from 0 to 32768 [ 192.470557][ T8099] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8099) [ 192.488805][ T8099] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 192.497630][ T8099] BTRFS info (device loop0): using free space tree [pid 8099] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8099] chdir("./file0") = 0 [pid 8099] ioctl(4, LOOP_CLR_FD) = 0 [pid 8099] close(4) = 0 [pid 8099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8098] <... futex resumed>) = 0 [pid 8099] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8098] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8098] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8099] <... openat resumed>) = 4 [pid 8099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8098] <... futex resumed>) = 0 [pid 8099] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8098] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 192.517049][ T8099] BTRFS info (device loop0): enabling ssd optimizations [ 192.524258][ T8099] BTRFS info (device loop0): auto enabling async discard [pid 8098] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8098] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8098] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8116 attached [pid 8116] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8116] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8098] <... clone resumed>, parent_tid=[487], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 487 [ 192.586346][ T8099] BTRFS info (device loop0): balance: start -s [ 192.595687][ T8099] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8098] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8116] <... futex resumed>) = 0 [pid 8116] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8116] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8116] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8098] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8098] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8116] <... futex resumed>) = 0 [pid 8098] <... futex resumed>) = 1 [pid 8116] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 192.638634][ T8099] BTRFS info (device loop0): balance: ended with status: 0 [pid 8098] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8099] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8099] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8116] <... ioctl resumed>) = 0 [pid 8116] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8116] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8098] close(3) = 0 [pid 8098] close(4) = 0 [pid 8098] close(5) = 0 [pid 8098] close(6) = -1 EBADF (Bad file descriptor) [pid 8098] close(7) = -1 EBADF (Bad file descriptor) [pid 8098] close(8) = -1 EBADF (Bad file descriptor) [pid 8098] close(9) = -1 EBADF (Bad file descriptor) [pid 8098] close(10) = -1 EBADF (Bad file descriptor) [pid 8098] close(11) = -1 EBADF (Bad file descriptor) [pid 8098] close(12) = -1 EBADF (Bad file descriptor) [pid 8098] close(13) = -1 EBADF (Bad file descriptor) [pid 8098] close(14) = -1 EBADF (Bad file descriptor) [pid 8098] close(15) = -1 EBADF (Bad file descriptor) [pid 8098] close(16) = -1 EBADF (Bad file descriptor) [pid 8098] close(17) = -1 EBADF (Bad file descriptor) [pid 8098] close(18) = -1 EBADF (Bad file descriptor) [pid 8098] close(19) = -1 EBADF (Bad file descriptor) [pid 8098] close(20) = -1 EBADF (Bad file descriptor) [pid 8098] close(21) = -1 EBADF (Bad file descriptor) [pid 8098] close(22) = -1 EBADF (Bad file descriptor) [pid 8098] close(23) = -1 EBADF (Bad file descriptor) [pid 8098] close(24) = -1 EBADF (Bad file descriptor) [pid 8098] close(25) = -1 EBADF (Bad file descriptor) [pid 8098] close(26) = -1 EBADF (Bad file descriptor) [pid 8098] close(27) = -1 EBADF (Bad file descriptor) [pid 8098] close(28) = -1 EBADF (Bad file descriptor) [pid 8098] close(29) = -1 EBADF (Bad file descriptor) [pid 8098] exit_group(0 [pid 8099] <... futex resumed>) = ? [pid 8098] <... exit_group resumed>) = ? [pid 8116] <... futex resumed>) = ? [pid 8099] +++ exited with 0 +++ [pid 8116] +++ exited with 0 +++ [pid 8098] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=485, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./161/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./161/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./161/cgroup.cpu") = 0 [pid 5007] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./161/binderfs") = 0 [pid 5007] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./161/file0") = 0 [pid 5007] umount2("./161/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./161/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./161/cgroup") = 0 [pid 5007] umount2("./161/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./161/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./161/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./161") = 0 [pid 5007] mkdir("./162", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8117 attached , child_tidptr=0x5555571235d0) = 488 [pid 8117] set_robust_list(0x5555571235e0, 24) = 0 [pid 8117] chdir("./162") = 0 [pid 8117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8117] setpgid(0, 0) = 0 [pid 8117] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8117] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8117] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8117] write(3, "1000", 4) = 4 [pid 8117] close(3) = 0 [pid 8117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8117] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8117] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8117] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8118 attached , parent_tid=[489], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 489 [pid 8118] set_robust_list(0x7fd090fc79e0, 24 [pid 8117] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8118] <... set_robust_list resumed>) = 0 [pid 8117] <... futex resumed>) = 0 [pid 8117] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8118] memfd_create("syzkaller", 0) = 3 [pid 8118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8118] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8118] close(3) = 0 [pid 8118] mkdir("./file0", 0777) = 0 [ 193.164190][ T8118] loop0: detected capacity change from 0 to 32768 [ 193.175701][ T8118] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8118) [ 193.191983][ T8118] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 193.200887][ T8118] BTRFS info (device loop0): using free space tree [pid 8118] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8118] chdir("./file0") = 0 [pid 8118] ioctl(4, LOOP_CLR_FD) = 0 [pid 8118] close(4) = 0 [pid 8118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8117] <... futex resumed>) = 0 [pid 8118] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8117] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8117] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8118] <... openat resumed>) = 4 [pid 8118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8117] <... futex resumed>) = 0 [pid 8117] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8117] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8118] <... futex resumed>) = 1 [ 193.221089][ T8118] BTRFS info (device loop0): enabling ssd optimizations [ 193.228390][ T8118] BTRFS info (device loop0): auto enabling async discard [pid 8118] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8117] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [ 193.269087][ T8118] BTRFS info (device loop0): balance: start -s [ 193.277532][ T8118] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8117] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8135 attached [pid 8135] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8135] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8117] <... clone resumed>, parent_tid=[490], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 490 [pid 8117] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8117] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8135] <... futex resumed>) = 0 [pid 8135] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8135] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8117] <... futex resumed>) = 0 [pid 8117] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8117] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8135] <... futex resumed>) = 1 [pid 8135] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8118] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 193.311420][ T8118] BTRFS info (device loop0): balance: ended with status: 0 [pid 8118] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8135] <... ioctl resumed>) = 0 [pid 8135] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8117] close(3 [pid 8135] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8117] <... close resumed>) = 0 [pid 8117] close(4) = 0 [pid 8117] close(5) = 0 [pid 8117] close(6) = -1 EBADF (Bad file descriptor) [pid 8117] close(7) = -1 EBADF (Bad file descriptor) [pid 8117] close(8) = -1 EBADF (Bad file descriptor) [pid 8117] close(9) = -1 EBADF (Bad file descriptor) [pid 8117] close(10) = -1 EBADF (Bad file descriptor) [pid 8117] close(11) = -1 EBADF (Bad file descriptor) [pid 8117] close(12) = -1 EBADF (Bad file descriptor) [pid 8117] close(13) = -1 EBADF (Bad file descriptor) [pid 8117] close(14) = -1 EBADF (Bad file descriptor) [pid 8117] close(15) = -1 EBADF (Bad file descriptor) [pid 8117] close(16) = -1 EBADF (Bad file descriptor) [pid 8117] close(17) = -1 EBADF (Bad file descriptor) [pid 8117] close(18) = -1 EBADF (Bad file descriptor) [pid 8117] close(19) = -1 EBADF (Bad file descriptor) [pid 8117] close(20) = -1 EBADF (Bad file descriptor) [pid 8117] close(21) = -1 EBADF (Bad file descriptor) [pid 8117] close(22) = -1 EBADF (Bad file descriptor) [pid 8117] close(23) = -1 EBADF (Bad file descriptor) [pid 8117] close(24) = -1 EBADF (Bad file descriptor) [pid 8117] close(25) = -1 EBADF (Bad file descriptor) [pid 8117] close(26) = -1 EBADF (Bad file descriptor) [pid 8117] close(27) = -1 EBADF (Bad file descriptor) [pid 8117] close(28) = -1 EBADF (Bad file descriptor) [pid 8117] close(29) = -1 EBADF (Bad file descriptor) [pid 8117] exit_group(0 [pid 8135] <... futex resumed>) = ? [pid 8118] <... futex resumed>) = ? [pid 8117] <... exit_group resumed>) = ? [pid 8135] +++ exited with 0 +++ [pid 8118] +++ exited with 0 +++ [pid 8117] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./162/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./162/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./162/cgroup.cpu") = 0 [pid 5007] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./162/binderfs") = 0 [pid 5007] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./162/file0") = 0 [pid 5007] umount2("./162/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./162/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./162/cgroup") = 0 [pid 5007] umount2("./162/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./162/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./162/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./162") = 0 [pid 5007] mkdir("./163", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8136 attached , child_tidptr=0x5555571235d0) = 491 [pid 8136] set_robust_list(0x5555571235e0, 24) = 0 [pid 8136] chdir("./163") = 0 [pid 8136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8136] setpgid(0, 0) = 0 [pid 8136] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8136] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8136] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8136] write(3, "1000", 4) = 4 [pid 8136] close(3) = 0 [pid 8136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8136] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8136] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8136] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[492], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 492 [pid 8136] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8136] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8137 attached [pid 8137] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8137] memfd_create("syzkaller", 0) = 3 [pid 8137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8137] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8137] close(3) = 0 [pid 8137] mkdir("./file0", 0777) = 0 [ 193.851450][ T8137] loop0: detected capacity change from 0 to 32768 [ 193.862715][ T8137] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8137) [ 193.880554][ T8137] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 193.889432][ T8137] BTRFS info (device loop0): using free space tree [pid 8137] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8137] chdir("./file0") = 0 [pid 8137] ioctl(4, LOOP_CLR_FD) = 0 [pid 8137] close(4) = 0 [pid 8137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8136] <... futex resumed>) = 0 [pid 8137] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8136] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8137] <... openat resumed>) = 4 [pid 8136] <... futex resumed>) = 0 [pid 8137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8136] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8137] <... futex resumed>) = 0 [pid 8136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8137] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8136] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 193.910397][ T8137] BTRFS info (device loop0): enabling ssd optimizations [ 193.917659][ T8137] BTRFS info (device loop0): auto enabling async discard [ 193.948520][ T8137] BTRFS info (device loop0): balance: start -s [ 193.957469][ T8137] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8136] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8136] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8136] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[493], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 493 [pid 8136] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8136] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8154 attached [pid 8154] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8154] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8154] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8136] <... futex resumed>) = 0 [pid 8136] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8136] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8154] <... futex resumed>) = 1 [pid 8154] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8137] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 193.993751][ T8137] BTRFS info (device loop0): balance: ended with status: 0 [pid 8137] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8136] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8154] <... ioctl resumed>) = 0 [pid 8154] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8154] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8136] close(3) = 0 [pid 8136] close(4) = 0 [pid 8136] close(5) = 0 [pid 8136] close(6) = -1 EBADF (Bad file descriptor) [pid 8136] close(7) = -1 EBADF (Bad file descriptor) [pid 8136] close(8) = -1 EBADF (Bad file descriptor) [pid 8136] close(9) = -1 EBADF (Bad file descriptor) [pid 8136] close(10) = -1 EBADF (Bad file descriptor) [pid 8136] close(11) = -1 EBADF (Bad file descriptor) [pid 8136] close(12) = -1 EBADF (Bad file descriptor) [pid 8136] close(13) = -1 EBADF (Bad file descriptor) [pid 8136] close(14) = -1 EBADF (Bad file descriptor) [pid 8136] close(15) = -1 EBADF (Bad file descriptor) [pid 8136] close(16) = -1 EBADF (Bad file descriptor) [pid 8136] close(17) = -1 EBADF (Bad file descriptor) [pid 8136] close(18) = -1 EBADF (Bad file descriptor) [pid 8136] close(19) = -1 EBADF (Bad file descriptor) [pid 8136] close(20) = -1 EBADF (Bad file descriptor) [pid 8136] close(21) = -1 EBADF (Bad file descriptor) [pid 8136] close(22) = -1 EBADF (Bad file descriptor) [pid 8136] close(23) = -1 EBADF (Bad file descriptor) [pid 8136] close(24) = -1 EBADF (Bad file descriptor) [pid 8136] close(25) = -1 EBADF (Bad file descriptor) [pid 8136] close(26) = -1 EBADF (Bad file descriptor) [pid 8136] close(27) = -1 EBADF (Bad file descriptor) [pid 8136] close(28) = -1 EBADF (Bad file descriptor) [pid 8136] close(29) = -1 EBADF (Bad file descriptor) [pid 8136] exit_group(0 [pid 8154] <... futex resumed>) = ? [pid 8137] <... futex resumed>) = ? [pid 8136] <... exit_group resumed>) = ? [pid 8154] +++ exited with 0 +++ [pid 8137] +++ exited with 0 +++ [pid 8136] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=491, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./163/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./163/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./163/cgroup.cpu") = 0 [pid 5007] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./163/binderfs") = 0 [pid 5007] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./163/file0") = 0 [pid 5007] umount2("./163/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./163/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./163/cgroup") = 0 [pid 5007] umount2("./163/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./163/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./163/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./163") = 0 [pid 5007] mkdir("./164", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8155 attached , child_tidptr=0x5555571235d0) = 494 [pid 8155] set_robust_list(0x5555571235e0, 24) = 0 [pid 8155] chdir("./164") = 0 [pid 8155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8155] setpgid(0, 0) = 0 [pid 8155] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8155] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8155] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8155] write(3, "1000", 4) = 4 [pid 8155] close(3) = 0 [pid 8155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8155] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8155] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8155] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8156 attached [pid 8156] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8156] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8155] <... clone resumed>, parent_tid=[495], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 495 [pid 8155] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8156] <... futex resumed>) = 0 [pid 8156] memfd_create("syzkaller", 0) = 3 [pid 8156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8155] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8156] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8156] close(3) = 0 [pid 8156] mkdir("./file0", 0777) = 0 [ 194.529976][ T8156] loop0: detected capacity change from 0 to 32768 [ 194.541338][ T8156] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8156) [ 194.558678][ T8156] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 194.567504][ T8156] BTRFS info (device loop0): using free space tree [pid 8156] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8156] chdir("./file0") = 0 [pid 8156] ioctl(4, LOOP_CLR_FD) = 0 [pid 8156] close(4) = 0 [pid 8156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8155] <... futex resumed>) = 0 [pid 8156] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8155] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8156] <... openat resumed>) = 4 [pid 8156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8155] <... futex resumed>) = 0 [pid 8156] <... futex resumed>) = 1 [pid 8155] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 194.587564][ T8156] BTRFS info (device loop0): enabling ssd optimizations [ 194.594701][ T8156] BTRFS info (device loop0): auto enabling async discard [pid 8156] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8155] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8155] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8155] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8173 attached [pid 8173] set_robust_list(0x7fd089ba69e0, 24 [pid 8155] <... clone resumed>, parent_tid=[496], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 496 [pid 8173] <... set_robust_list resumed>) = 0 [pid 8155] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8173] openat(AT_FDCWD, ".", O_RDONLY [pid 8155] <... futex resumed>) = 0 [pid 8173] <... openat resumed>) = 5 [pid 8155] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8173] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8155] <... futex resumed>) = 0 [pid 8173] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8155] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8155] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8156] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 194.636891][ T8156] BTRFS info (device loop0): balance: start -s [ 194.646546][ T8156] BTRFS info (device loop0): relocating block group 1048576 flags system [ 194.675111][ T8156] BTRFS info (device loop0): balance: ended with status: 0 [pid 8156] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8155] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8173] <... ioctl resumed>) = 0 [pid 8173] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8173] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8155] close(3) = 0 [pid 8155] close(4) = 0 [pid 8155] close(5) = 0 [pid 8155] close(6) = -1 EBADF (Bad file descriptor) [pid 8155] close(7) = -1 EBADF (Bad file descriptor) [pid 8155] close(8) = -1 EBADF (Bad file descriptor) [pid 8155] close(9) = -1 EBADF (Bad file descriptor) [pid 8155] close(10) = -1 EBADF (Bad file descriptor) [pid 8155] close(11) = -1 EBADF (Bad file descriptor) [pid 8155] close(12) = -1 EBADF (Bad file descriptor) [pid 8155] close(13) = -1 EBADF (Bad file descriptor) [pid 8155] close(14) = -1 EBADF (Bad file descriptor) [pid 8155] close(15) = -1 EBADF (Bad file descriptor) [pid 8155] close(16) = -1 EBADF (Bad file descriptor) [pid 8155] close(17) = -1 EBADF (Bad file descriptor) [pid 8155] close(18) = -1 EBADF (Bad file descriptor) [pid 8155] close(19) = -1 EBADF (Bad file descriptor) [pid 8155] close(20) = -1 EBADF (Bad file descriptor) [pid 8155] close(21) = -1 EBADF (Bad file descriptor) [pid 8155] close(22) = -1 EBADF (Bad file descriptor) [pid 8155] close(23) = -1 EBADF (Bad file descriptor) [pid 8155] close(24) = -1 EBADF (Bad file descriptor) [pid 8155] close(25) = -1 EBADF (Bad file descriptor) [pid 8155] close(26) = -1 EBADF (Bad file descriptor) [pid 8155] close(27) = -1 EBADF (Bad file descriptor) [pid 8155] close(28) = -1 EBADF (Bad file descriptor) [pid 8155] close(29) = -1 EBADF (Bad file descriptor) [pid 8155] exit_group(0 [pid 8173] <... futex resumed>) = ? [pid 8156] <... futex resumed>) = ? [pid 8155] <... exit_group resumed>) = ? [pid 8173] +++ exited with 0 +++ [pid 8156] +++ exited with 0 +++ [pid 8155] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=494, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./164/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./164/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./164/cgroup.cpu") = 0 [pid 5007] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./164/binderfs") = 0 [pid 5007] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./164/file0") = 0 [pid 5007] umount2("./164/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./164/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./164/cgroup") = 0 [pid 5007] umount2("./164/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./164/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./164/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./164") = 0 [pid 5007] mkdir("./165", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8174 attached , child_tidptr=0x5555571235d0) = 497 [pid 8174] set_robust_list(0x5555571235e0, 24) = 0 [pid 8174] chdir("./165") = 0 [pid 8174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8174] setpgid(0, 0) = 0 [pid 8174] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8174] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8174] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8174] write(3, "1000", 4) = 4 [pid 8174] close(3) = 0 [pid 8174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8174] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8174] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8174] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8175 attached [pid 8175] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8174] <... clone resumed>, parent_tid=[498], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 498 [pid 8174] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8174] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8175] memfd_create("syzkaller", 0) = 3 [pid 8175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8175] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8175] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8175] close(3) = 0 [pid 8175] mkdir("./file0", 0777) = 0 [ 195.216677][ T8175] loop0: detected capacity change from 0 to 32768 [ 195.228091][ T8175] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8175) [ 195.244815][ T8175] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 195.253718][ T8175] BTRFS info (device loop0): using free space tree [pid 8175] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8175] chdir("./file0") = 0 [pid 8175] ioctl(4, LOOP_CLR_FD) = 0 [pid 8175] close(4) = 0 [pid 8175] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8175] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8174] <... futex resumed>) = 0 [pid 8174] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8175] <... futex resumed>) = 0 [pid 8174] <... futex resumed>) = 1 [pid 8175] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8174] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8175] <... openat resumed>) = 4 [pid 8175] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8174] <... futex resumed>) = 0 [pid 8175] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8174] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 195.273481][ T8175] BTRFS info (device loop0): enabling ssd optimizations [ 195.280584][ T8175] BTRFS info (device loop0): auto enabling async discard [pid 8174] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8174] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8174] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8192 attached [pid 8192] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8192] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8174] <... clone resumed>, parent_tid=[499], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 499 [pid 8174] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8174] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8192] <... futex resumed>) = 0 [pid 8192] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8192] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8174] <... futex resumed>) = 0 [pid 8192] <... futex resumed>) = 1 [pid 8174] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8192] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8174] <... futex resumed>) = 0 [ 195.336023][ T8175] BTRFS info (device loop0): balance: start -s [ 195.344345][ T8175] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8174] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 195.415178][ T8175] BTRFS info (device loop0): balance: ended with status: 0 [pid 8192] <... ioctl resumed>) = 0 [pid 8192] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8192] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8175] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8175] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8174] close(3 [pid 8175] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8174] <... close resumed>) = 0 [pid 8174] close(4) = 0 [pid 8174] close(5) = 0 [pid 8174] close(6) = -1 EBADF (Bad file descriptor) [pid 8174] close(7) = -1 EBADF (Bad file descriptor) [pid 8174] close(8) = -1 EBADF (Bad file descriptor) [pid 8174] close(9) = -1 EBADF (Bad file descriptor) [pid 8174] close(10) = -1 EBADF (Bad file descriptor) [pid 8174] close(11) = -1 EBADF (Bad file descriptor) [pid 8174] close(12) = -1 EBADF (Bad file descriptor) [pid 8174] close(13) = -1 EBADF (Bad file descriptor) [pid 8174] close(14) = -1 EBADF (Bad file descriptor) [pid 8174] close(15) = -1 EBADF (Bad file descriptor) [pid 8174] close(16) = -1 EBADF (Bad file descriptor) [pid 8174] close(17) = -1 EBADF (Bad file descriptor) [pid 8174] close(18) = -1 EBADF (Bad file descriptor) [pid 8174] close(19) = -1 EBADF (Bad file descriptor) [pid 8174] close(20) = -1 EBADF (Bad file descriptor) [pid 8174] close(21) = -1 EBADF (Bad file descriptor) [pid 8174] close(22) = -1 EBADF (Bad file descriptor) [pid 8174] close(23) = -1 EBADF (Bad file descriptor) [pid 8174] close(24) = -1 EBADF (Bad file descriptor) [pid 8174] close(25) = -1 EBADF (Bad file descriptor) [pid 8174] close(26) = -1 EBADF (Bad file descriptor) [pid 8174] close(27) = -1 EBADF (Bad file descriptor) [pid 8174] close(28) = -1 EBADF (Bad file descriptor) [pid 8174] close(29) = -1 EBADF (Bad file descriptor) [pid 8174] exit_group(0 [pid 8192] <... futex resumed>) = ? [pid 8175] <... futex resumed>) = ? [pid 8192] +++ exited with 0 +++ [pid 8175] +++ exited with 0 +++ [pid 8174] <... exit_group resumed>) = ? [pid 8174] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=497, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./165/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./165/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./165/cgroup.cpu") = 0 [pid 5007] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./165/binderfs") = 0 [pid 5007] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./165/file0") = 0 [pid 5007] umount2("./165/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./165/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./165/cgroup") = 0 [pid 5007] umount2("./165/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./165/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./165/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./165") = 0 [pid 5007] mkdir("./166", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 500 ./strace-static-x86_64: Process 8193 attached [pid 8193] set_robust_list(0x5555571235e0, 24) = 0 [pid 8193] chdir("./166") = 0 [pid 8193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8193] setpgid(0, 0) = 0 [pid 8193] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8193] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8193] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8193] write(3, "1000", 4) = 4 [pid 8193] close(3) = 0 [pid 8193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8193] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8193] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8193] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8194 attached [pid 8194] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 8194] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8193] <... clone resumed>, parent_tid=[501], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 501 [pid 8193] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8194] <... futex resumed>) = 0 [pid 8193] <... futex resumed>) = 1 [pid 8194] memfd_create("syzkaller", 0 [pid 8193] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8194] <... memfd_create resumed>) = 3 [pid 8194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8194] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8194] close(3) = 0 [pid 8194] mkdir("./file0", 0777) = 0 [ 195.929487][ T8194] loop0: detected capacity change from 0 to 32768 [ 195.940341][ T8194] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8194) [ 195.955992][ T8194] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 195.964751][ T8194] BTRFS info (device loop0): using free space tree [pid 8194] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8194] chdir("./file0") = 0 [pid 8194] ioctl(4, LOOP_CLR_FD) = 0 [pid 8194] close(4) = 0 [pid 8194] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8193] <... futex resumed>) = 0 [pid 8194] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8193] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8194] <... openat resumed>) = 4 [pid 8193] <... futex resumed>) = 0 [pid 8194] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8193] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8194] <... futex resumed>) = 0 [pid 8193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8194] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8193] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 195.985555][ T8194] BTRFS info (device loop0): enabling ssd optimizations [ 195.992628][ T8194] BTRFS info (device loop0): auto enabling async discard [pid 8193] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8193] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8193] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8193] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[502], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 502 [pid 8193] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8193] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8211 attached [pid 8211] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8211] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8211] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8193] <... futex resumed>) = 0 [pid 8193] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8193] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 196.028050][ T8194] BTRFS info (device loop0): balance: start -s [ 196.038766][ T8194] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8211] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 196.096383][ T8194] BTRFS info (device loop0): balance: ended with status: 0 [pid 8194] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8194] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8194] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8211] <... ioctl resumed>) = 0 [pid 8211] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8193] close(3) = 0 [pid 8193] close(4) = 0 [pid 8193] close(5) = 0 [pid 8193] close(6) = -1 EBADF (Bad file descriptor) [pid 8193] close(7) = -1 EBADF (Bad file descriptor) [pid 8193] close(8) = -1 EBADF (Bad file descriptor) [pid 8193] close(9) = -1 EBADF (Bad file descriptor) [pid 8193] close(10) = -1 EBADF (Bad file descriptor) [pid 8193] close(11) = -1 EBADF (Bad file descriptor) [pid 8193] close(12) = -1 EBADF (Bad file descriptor) [pid 8193] close(13) = -1 EBADF (Bad file descriptor) [pid 8193] close(14) = -1 EBADF (Bad file descriptor) [pid 8193] close(15) = -1 EBADF (Bad file descriptor) [pid 8193] close(16) = -1 EBADF (Bad file descriptor) [pid 8193] close(17) = -1 EBADF (Bad file descriptor) [pid 8193] close(18) = -1 EBADF (Bad file descriptor) [pid 8211] <... futex resumed>) = 0 [pid 8193] close(19) = -1 EBADF (Bad file descriptor) [pid 8193] close(20) = -1 EBADF (Bad file descriptor) [pid 8193] close(21) = -1 EBADF (Bad file descriptor) [pid 8193] close(22) = -1 EBADF (Bad file descriptor) [pid 8193] close(23) = -1 EBADF (Bad file descriptor) [pid 8193] close(24) = -1 EBADF (Bad file descriptor) [pid 8193] close(25) = -1 EBADF (Bad file descriptor) [pid 8193] close(26) = -1 EBADF (Bad file descriptor) [pid 8193] close(27) = -1 EBADF (Bad file descriptor) [pid 8193] close(28) = -1 EBADF (Bad file descriptor) [pid 8193] close(29) = -1 EBADF (Bad file descriptor) [pid 8193] exit_group(0 [pid 8194] <... futex resumed>) = ? [pid 8193] <... exit_group resumed>) = ? [pid 8194] +++ exited with 0 +++ [pid 8211] +++ exited with 0 +++ [pid 8193] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=500, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./166/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./166/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./166/cgroup.cpu") = 0 [pid 5007] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./166/binderfs") = 0 [pid 5007] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./166/file0") = 0 [pid 5007] umount2("./166/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./166/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./166/cgroup") = 0 [pid 5007] umount2("./166/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./166/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./166/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./166") = 0 [pid 5007] mkdir("./167", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 503 ./strace-static-x86_64: Process 8212 attached [pid 8212] set_robust_list(0x5555571235e0, 24) = 0 [pid 8212] chdir("./167") = 0 [pid 8212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8212] setpgid(0, 0) = 0 [pid 8212] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 8212] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 8212] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 8212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8212] write(3, "1000", 4) = 4 [pid 8212] close(3) = 0 [pid 8212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8212] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 8212] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8212] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8213 attached [pid 8213] set_robust_list(0x7fd090fc79e0, 24 [pid 8212] <... clone resumed>, parent_tid=[504], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 504 [pid 8213] <... set_robust_list resumed>) = 0 [pid 8212] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8212] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8213] memfd_create("syzkaller", 0) = 3 [pid 8213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 8213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8213] munmap(0x7fd088ba7000, 16777216) = 0 [pid 8213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8213] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8213] close(3) = 0 [pid 8213] mkdir("./file0", 0777) = 0 [ 196.576411][ T8213] loop0: detected capacity change from 0 to 32768 [ 196.588020][ T8213] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (8213) [ 196.605629][ T8213] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 196.614489][ T8213] BTRFS info (device loop0): using free space tree [pid 8213] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 8213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8213] chdir("./file0") = 0 [pid 8213] ioctl(4, LOOP_CLR_FD) = 0 [pid 8213] close(4) = 0 [pid 8213] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8213] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8212] <... futex resumed>) = 0 [pid 8212] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8212] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8213] <... futex resumed>) = 0 [pid 8213] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 8213] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 8212] <... futex resumed>) = 0 [pid 8212] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8212] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8213] <... futex resumed>) = 1 [ 196.634306][ T8213] BTRFS info (device loop0): enabling ssd optimizations [ 196.641520][ T8213] BTRFS info (device loop0): auto enabling async discard [pid 8213] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8212] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 8212] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8212] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8230 attached , parent_tid=[505], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 505 [pid 8230] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 8212] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8212] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8230] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 8230] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 8212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8212] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8212] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8230] <... futex resumed>) = 0 [ 196.690136][ T8213] BTRFS info (device loop0): balance: start -s [ 196.699633][ T8213] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8230] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 8212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 196.798622][ T8213] ------------[ cut here ]------------ [ 196.804419][ T8213] BTRFS: Transaction aborted (error -28) [ 196.826202][ T8213] WARNING: CPU: 0 PID: 8213 at fs/btrfs/volumes.c:3191 btrfs_remove_chunk+0x1979/0x1990 [ 196.836346][ T8213] Modules linked in: [ 196.840289][ T8213] CPU: 0 PID: 8213 Comm: syz-executor318 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 196.850435][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 196.860760][ T8213] RIP: 0010:btrfs_remove_chunk+0x1979/0x1990 [ 196.866940][ T8213] Code: 00 00 48 c7 c6 40 ec 95 8a 48 8b 78 50 e8 1f 62 19 00 e9 95 fa ff ff e8 e5 bc 10 fe 89 ee 48 c7 c7 e0 eb 95 8a e8 e7 69 d8 fd <0f> 0b e9 7b fa ff ff 48 8b 7c 24 48 e8 06 bd 63 fe eb b9 0f 1f 40 [ 196.886717][ T8213] RSP: 0018:ffffc900075bf858 EFLAGS: 00010282 [ 196.893038][ T8213] RAX: 0000000000000000 RBX: 000000002a6b8801 RCX: 0000000000000000 [ 196.901208][ T8213] RDX: ffff88802d789dc0 RSI: ffffffff814bd247 RDI: 0000000000000001 [ 196.909359][ T8213] RBP: ffffffffffffffe4 R08: 0000000000000001 R09: 0000000000000000 [ 196.917479][ T8213] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802a6b8800 [ 196.925612][ T8213] R13: 00000000ffffffe4 R14: ffff8880763445e8 R15: ffff888076344634 [ 196.933813][ T8213] FS: 00007fd090fc7700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 196.942864][ T8213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.949659][ T8213] CR2: 00007fd09105d8c0 CR3: 000000007c658000 CR4: 00000000003506f0 [ 196.957751][ T8213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.965812][ T8213] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.973831][ T8213] Call Trace: [ 196.977233][ T8213] [ 196.980233][ T8213] ? btrfs_chunk_alloc_add_chunk_item+0xec0/0xec0 [ 196.986811][ T8213] ? btrfs_record_root_in_trans+0x60/0x1b0 [ 196.992683][ T8213] ? start_transaction+0x2aa/0x14c0 [ 196.998039][ T8213] btrfs_relocate_chunk+0x266/0x440 [ 197.003315][ T8213] btrfs_balance+0x1e8f/0x40f0 [ 197.008300][ T8213] ? __kmem_cache_alloc_node+0x48/0x320 [ 197.013900][ T8213] ? btrfs_relocate_chunk+0x440/0x440 [ 197.019444][ T8213] ? __kmem_cache_alloc_node+0xd0/0x320 [ 197.025104][ T8213] ? btrfs_ioctl+0x50d7/0x5b30 [ 197.029963][ T8213] btrfs_ioctl+0x12a6/0x5b30 [ 197.034645][ T8213] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 197.040577][ T8213] ? btrfs_ioctl_get_supported_features+0x50/0x50 [pid 8212] close(3) = 0 [pid 8212] close(4) = 0 [pid 8212] close(5) = 0 [pid 8212] close(6) = -1 EBADF (Bad file descriptor) [pid 8212] close(7) = -1 EBADF (Bad file descriptor) [pid 8212] close(8) = -1 EBADF (Bad file descriptor) [pid 8212] close(9) = -1 EBADF (Bad file descriptor) [pid 8212] close(10) = -1 EBADF (Bad file descriptor) [pid 8212] close(11) = -1 EBADF (Bad file descriptor) [pid 8212] close(12) = -1 EBADF (Bad file descriptor) [pid 8212] close(13) = -1 EBADF (Bad file descriptor) [pid 8212] close(14) = -1 EBADF (Bad file descriptor) [pid 8212] close(15) = -1 EBADF (Bad file descriptor) [pid 8212] close(16) = -1 EBADF (Bad file descriptor) [pid 8212] close(17) = -1 EBADF (Bad file descriptor) [ 197.047110][ T8213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.053050][ T8213] ? do_vfs_ioctl+0x132/0x1670 [ 197.057927][ T8213] ? vfs_fileattr_set+0xc40/0xc40 [ 197.063143][ T8213] ? trace_lock_acquire+0x12d/0x180 [ 197.068513][ T8213] ? trace_event_raw_event_initcall_level+0x1e2/0x200 [ 197.075381][ T8213] ? receive_fd+0x110/0x110 [ 197.079943][ T8213] ? __fget_files+0x26a/0x480 [ 197.084690][ T8213] ? bpf_lsm_file_ioctl+0x9/0x10 [ 197.089788][ T8213] ? btrfs_ioctl_get_supported_features+0x50/0x50 [pid 8212] close(18) = -1 EBADF (Bad file descriptor) [pid 8212] close(19) = -1 EBADF (Bad file descriptor) [pid 8212] close(20) = -1 EBADF (Bad file descriptor) [pid 8212] close(21) = -1 EBADF (Bad file descriptor) [pid 8212] close(22) = -1 EBADF (Bad file descriptor) [pid 8212] close(23) = -1 EBADF (Bad file descriptor) [pid 8212] close(24) = -1 EBADF (Bad file descriptor) [pid 8212] close(25) = -1 EBADF (Bad file descriptor) [pid 8212] close(26) = -1 EBADF (Bad file descriptor) [pid 8212] close(27) = -1 EBADF (Bad file descriptor) [pid 8212] close(28) = -1 EBADF (Bad file descriptor) [pid 8212] close(29) = -1 EBADF (Bad file descriptor) [pid 8212] exit_group(0) = ? [pid 8230] <... ioctl resumed>) = ? [pid 8230] +++ exited with 0 +++ [ 197.097083][ T8213] __x64_sys_ioctl+0x197/0x210 [ 197.102508][ T8213] do_syscall_64+0x39/0xb0 [ 197.107270][ T8213] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 197.110580][ T8230] BTRFS warning (device loop0: state A): failed to trim 1 device(s), last error -4 [ 197.114115][ T8213] RIP: 0033:0x7fd09101c1a9 [ 197.127281][ T8213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 197.147504][ T8213] RSP: 002b:00007fd090fc72f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.156091][ T8213] RAX: ffffffffffffffda RBX: 00007fd0910a67a0 RCX: 00007fd09101c1a9 [ 197.164139][ T8213] RDX: 0000000020000480 RSI: 00000000c4009420 RDI: 0000000000000004 [ 197.172274][ T8213] RBP: 00007fd0910733b8 R08: 0000000000000000 R09: 0000000000000000 [ 197.180377][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000640 [ 197.188482][ T8213] R13: 0030656c69662f2e R14: 0040000000000000 R15: 00007fd0910a67a8 [ 197.196573][ T8213] [ 197.199680][ T8213] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.206993][ T8213] CPU: 0 PID: 8213 Comm: syz-executor318 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 197.216919][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 197.227086][ T8213] Call Trace: [ 197.230383][ T8213] [ 197.233333][ T8213] dump_stack_lvl+0xd9/0x150 [ 197.237993][ T8213] panic+0x686/0x730 [ 197.241950][ T8213] ? panic_smp_self_stop+0xa0/0xa0 [ 197.247134][ T8213] ? show_trace_log_lvl+0x285/0x390 [ 197.252418][ T8213] ? btrfs_remove_chunk+0x1979/0x1990 [ 197.257855][ T8213] check_panic_on_warn+0xb1/0xc0 [ 197.262848][ T8213] __warn+0xf2/0x390 [ 197.266809][ T8213] ? preempt_schedule_notrace+0x5f/0xd0 [ 197.272404][ T8213] ? btrfs_remove_chunk+0x1979/0x1990 [ 197.277827][ T8213] report_bug+0x2da/0x500 [ 197.282243][ T8213] handle_bug+0x3c/0x70 [ 197.286467][ T8213] exc_invalid_op+0x18/0x50 [ 197.290994][ T8213] asm_exc_invalid_op+0x1a/0x20 [ 197.295896][ T8213] RIP: 0010:btrfs_remove_chunk+0x1979/0x1990 [ 197.301979][ T8213] Code: 00 00 48 c7 c6 40 ec 95 8a 48 8b 78 50 e8 1f 62 19 00 e9 95 fa ff ff e8 e5 bc 10 fe 89 ee 48 c7 c7 e0 eb 95 8a e8 e7 69 d8 fd <0f> 0b e9 7b fa ff ff 48 8b 7c 24 48 e8 06 bd 63 fe eb b9 0f 1f 40 [ 197.321627][ T8213] RSP: 0018:ffffc900075bf858 EFLAGS: 00010282 [ 197.327726][ T8213] RAX: 0000000000000000 RBX: 000000002a6b8801 RCX: 0000000000000000 [ 197.335721][ T8213] RDX: ffff88802d789dc0 RSI: ffffffff814bd247 RDI: 0000000000000001 [ 197.343722][ T8213] RBP: ffffffffffffffe4 R08: 0000000000000001 R09: 0000000000000000 [ 197.351801][ T8213] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802a6b8800 [ 197.359798][ T8213] R13: 00000000ffffffe4 R14: ffff8880763445e8 R15: ffff888076344634 [ 197.367893][ T8213] ? __warn_printk+0x187/0x310 [ 197.372709][ T8213] ? btrfs_remove_chunk+0x1979/0x1990 [ 197.378135][ T8213] ? btrfs_chunk_alloc_add_chunk_item+0xec0/0xec0 [ 197.384588][ T8213] ? btrfs_record_root_in_trans+0x60/0x1b0 [ 197.390522][ T8213] ? start_transaction+0x2aa/0x14c0 [ 197.395769][ T8213] btrfs_relocate_chunk+0x266/0x440 [ 197.401024][ T8213] btrfs_balance+0x1e8f/0x40f0 [ 197.405872][ T8213] ? __kmem_cache_alloc_node+0x48/0x320 [ 197.411454][ T8213] ? btrfs_relocate_chunk+0x440/0x440 [ 197.416869][ T8213] ? __kmem_cache_alloc_node+0xd0/0x320 [ 197.422440][ T8213] ? btrfs_ioctl+0x50d7/0x5b30 [ 197.427292][ T8213] btrfs_ioctl+0x12a6/0x5b30 [ 197.431931][ T8213] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 197.437774][ T8213] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 197.444234][ T8213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.450177][ T8213] ? do_vfs_ioctl+0x132/0x1670 [ 197.454966][ T8213] ? vfs_fileattr_set+0xc40/0xc40 [ 197.460059][ T8213] ? trace_lock_acquire+0x12d/0x180 [ 197.465305][ T8213] ? trace_event_raw_event_initcall_level+0x1e2/0x200 [ 197.472120][ T8213] ? receive_fd+0x110/0x110 [ 197.476659][ T8213] ? __fget_files+0x26a/0x480 [ 197.481369][ T8213] ? bpf_lsm_file_ioctl+0x9/0x10 [ 197.486362][ T8213] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 197.492825][ T8213] __x64_sys_ioctl+0x197/0x210 [ 197.497622][ T8213] do_syscall_64+0x39/0xb0 [ 197.502096][ T8213] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 197.508035][ T8213] RIP: 0033:0x7fd09101c1a9 [ 197.512478][ T8213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 197.532201][ T8213] RSP: 002b:00007fd090fc72f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.540642][ T8213] RAX: ffffffffffffffda RBX: 00007fd0910a67a0 RCX: 00007fd09101c1a9 [ 197.548635][ T8213] RDX: 0000000020000480 RSI: 00000000c4009420 RDI: 0000000000000004 [ 197.556625][ T8213] RBP: 00007fd0910733b8 R08: 0000000000000000 R09: 0000000000000000 [ 197.564619][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000640 [ 197.572617][ T8213] R13: 0030656c69662f2e R14: 0040000000000000 R15: 00007fd0910a67a8 [ 197.580628][ T8213] [ 197.583891][ T8213] Kernel Offset: disabled [ 197.588357][ T8213] Rebooting in 86400 seconds..