./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3041645170 <...> Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. execve("./syz-executor3041645170", ["./syz-executor3041645170"], 0x7ffd491bf830 /* 10 vars */) = 0 brk(NULL) = 0x55557ee56000 brk(0x55557ee56d40) = 0x55557ee56d40 arch_prctl(ARCH_SET_FS, 0x55557ee563c0) = 0 set_tid_address(0x55557ee56690) = 5225 set_robust_list(0x55557ee566a0, 24) = 0 rseq(0x55557ee56ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3041645170", 4096) = 28 getrandom("\xdf\xda\xf9\x00\x0f\xca\x9a\xb0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557ee56d40 brk(0x55557ee77d40) = 0x55557ee77d40 brk(0x55557ee78000) = 0x55557ee78000 mprotect(0x7f624e7d0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.P0Xyq5", 0700) = 0 chmod("./syzkaller.P0Xyq5", 0777) = 0 chdir("./syzkaller.P0Xyq5") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached , child_tidptr=0x55557ee56690) = 5226 [pid 5226] set_robust_list(0x55557ee566a0, 24) = 0 [pid 5226] chdir("./0") = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5226] write(1, "executing program\n", 18) = 18 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] rt_sigaction(SIGRT_1, {sa_handler=0x7f624e761670, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f624e752820}, NULL, 8) = 0 [pid 5226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f624e6d1000 [pid 5226] mprotect(0x7f624e6d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f624e6f1990, parent_tid=0x7f624e6f1990, exit_signal=0, stack=0x7f624e6d1000, stack_size=0x20300, tls=0x7f624e6f16c0}./strace-static-x86_64: Process 5228 attached [pid 5228] rseq(0x7f624e6f1fe0, 0x20, 0, 0x53053053) = 0 [pid 5226] <... clone3 resumed> => {parent_tid=[5228]}, 88) = 5228 [pid 5228] set_robust_list(0x7f624e6f19a0, 24 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5228] <... set_robust_list resumed>) = 0 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] memfd_create("syzkaller", 0) = 3 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6246200000 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5228] munmap(0x7f6246200000, 138412032) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5228] close(3) = 0 [pid 5228] close(4) = 0 [pid 5228] mkdir("./file1", 0777) = 0 [ 71.039587][ T5228] loop0: detected capacity change from 0 to 32768 [ 71.085047][ T5228] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor304 (5228) [ 71.107226][ T5228] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.118082][ T5228] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 71.128581][ T5228] BTRFS info (device loop0): using free-space-tree [pid 5228] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "nossd_spread,nodatacow,enospc_debug,nossd,nodatasum,autodefrag,user_subvol_rm_allowed,max_inline=m3x"...) = 0 [pid 5228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5228] chdir("./file1") = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_CLR_FD) = 0 [pid 5228] close(4) = 0 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5228] openat(AT_FDCWD, ".", O_RDONLY [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... openat resumed>) = 4 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 1 [pid 5228] memfd_create("syzkaller", 0 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] <... memfd_create resumed>) = 5 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6246200000 [pid 5228] write(5, "\x58\x46\x53\x42\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xdc\x47\xfc\x10\xd8\x4e\xed\xa5\x62\x11\xa8\x31\xb3\xf7\x91\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x24\x40\x00\x00\x00\x00\x00\x00\x24\x41\x00\x00\x00\x00\x00\x00\x24\x42\x00\x00\x00\x02\x00\x00\x20\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x12\x00"..., 16777216) = 16777216 [pid 5228] munmap(0x7f6246200000, 138412032) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 5228] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 5228] ioctl(6, LOOP_CLR_FD) = 0 [pid 5228] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 5228] close(6) = 0 [pid 5228] close(5) = 0 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... open resumed>) = 5 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5228] creat("./bus", 000 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... creat resumed>) = 6 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] open("./bus", O_RDONLY [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... open resumed>) = 7 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5228] copy_file_range(7, NULL, 5, [65536], 6, 0 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... copy_file_range resumed>) = 0 [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5228] write(5, "\x00\x00\x00\x00\x18\x00\x00\xfa\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967100 [ 71.777434][ T29] audit: type=1804 audit(1727739516.074:2): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor304" name="/root/syzkaller.P0Xyq5/0/file1/bus" dev="loop0" ino=263 res=1 errno=0 [pid 5226] futex(0x7f624e7d66cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5226] futex(0x7f624e7d66dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f624e6b0000 [pid 5226] mprotect(0x7f624e6b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f624e6d0990, parent_tid=0x7f624e6d0990, exit_signal=0, stack=0x7f624e6b0000, stack_size=0x20300, tls=0x7f624e6d06c0}./strace-static-x86_64: Process 5248 attached => {parent_tid=[5248]}, 88) = 5248 [pid 5248] rseq(0x7f624e6d0fe0, 0x20, 0, 0x53053053 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] <... rseq resumed>) = 0 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] set_robust_list(0x7f624e6d09a0, 24 [pid 5226] futex(0x7f624e7d66d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5226] futex(0x7f624e7d66dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5248] fsync(-1) = -1 EBADF (Bad file descriptor) [pid 5248] futex(0x7f624e7d66dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5248] ioctl(4, FITRIM, {start=0x4100, len=4760810514716670597, minlen=0} [pid 5226] futex(0x7f624e7d66d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7f624e7d66dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5226] futex(0x7f624e7d66ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f624e68f000 [pid 5226] mprotect(0x7f624e690000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f624e6af990, parent_tid=0x7f624e6af990, exit_signal=0, stack=0x7f624e68f000, stack_size=0x20300, tls=0x7f624e6af6c0}./strace-static-x86_64: Process 5249 attached => {parent_tid=[5249]}, 88) = 5249 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5226] futex(0x7f624e7d66e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] rseq(0x7f624e6affe0, 0x20, 0, 0x53053053 [pid 5226] <... futex resumed>) = 0 [pid 5249] <... rseq resumed>) = 0 [pid 5226] futex(0x7f624e7d66ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] set_robust_list(0x7f624e6af9a0, 24) = 0 [pid 5249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 71.933417][ T61] BTRFS error (device loop0): allocation failed flags 1, wanted 8192 tree-log 0, relocation: 0 [ 71.944086][ T61] BTRFS info (device loop0): space_info DATA+METADATA has -6422528 free, is full [ 71.953857][ T61] BTRFS info (device loop0): space_info total=11534336, used=49152, pinned=24576, reserved=11460608, may_use=6422528, readonly=0 zone_unusable=0 [ 71.968748][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [pid 5249] memfd_create("syzkaller", 0) = 8 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6246200000 [pid 5248] <... ioctl resumed>) = 0 [ 71.978712][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 71.986440][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 71.994173][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 72.002068][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 360448 reserved 360448 [ 72.012225][ T61] BTRFS info (device loop0): block group 5242880 has 1638400 bytes, 45056 used 24576 pinned 1568768 reserved 139264 delalloc 0 super 0 zone_unusable (0 bytes available) [pid 5248] futex(0x7f624e7d66dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 72.030526][ T61] BTRFS info (device loop0): block group has cluster?: no [ 72.038336][ T61] BTRFS info (device loop0): 0 free space entries at or bigger than 8192 bytes [ 72.048752][ T61] BTRFS info (device loop0): block group 6881280 has 1638400 bytes, 4096 used 0 pinned 1634304 reserved 1634304 delalloc 0 super 0 zone_unusable (0 bytes available) [ 72.066034][ T61] BTRFS info (device loop0): block group has cluster?: no [ 72.073320][ T61] BTRFS info (device loop0): 0 free space entries at or bigger than 8192 bytes [pid 5248] futex(0x7f624e7d66d8, FUTEX_WAIT_PRIVATE, 0, NULL [ 72.082594][ T61] BTRFS info (device loop0): block group 8519680 has 8257536 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (8257536 bytes available) [ 72.098617][ T61] BTRFS critical (device loop0): entry offset 8519680, bytes 8257536, bitmap no [ 72.108393][ T61] BTRFS info (device loop0): block group has cluster?: no [ 72.115906][ T61] BTRFS info (device loop0): 1 free space entries at or bigger than 8192 bytes [ 72.124945][ T61] BTRFS info (device loop0): 8257536 bytes available across all block groups [pid 5249] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5249] munmap(0x7f6246200000, 138412032) = 0 [pid 5249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 9 [pid 5249] ioctl(9, LOOP_SET_FD, 8) = -1 EBUSY (Device or resource busy) [pid 5249] ioctl(9, LOOP_CLR_FD) = 0 [pid 5249] ioctl(9, LOOP_SET_FD, 8) = -1 EBUSY (Device or resource busy) [pid 5249] close(9) = 0 [pid 5249] close(8) = 0 [pid 5249] futex(0x7f624e7d66ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5249] futex(0x7f624e7d66e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 1 [pid 5248] getdents(-1, [pid 5226] futex(0x7f624e7d66dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... getdents resumed>0x20000080, 49) = -1 EBADF (Bad file descriptor) [pid 5248] futex(0x7f624e7d66dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5248] futex(0x7f624e7d66d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f624e7d66d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5248] copy_file_range(-1, NULL, -1, NULL, 38579, 0 [pid 5226] futex(0x7f624e7d66dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... copy_file_range resumed>) = -1 EBADF (Bad file descriptor) [pid 5248] futex(0x7f624e7d66dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [ 72.559153][ T2574] BTRFS info (device loop0): cannot satisfy tickets, dumping space info [ 72.567812][ T2574] BTRFS info (device loop0): space_info DATA+METADATA has 4096 free, is full [ 72.576956][ T2574] BTRFS info (device loop0): space_info total=11534336, used=9965568, pinned=0, reserved=0, may_use=1564672, readonly=0 zone_unusable=0 [ 72.590960][ T2574] BTRFS info (device loop0): failing ticket with 98304 bytes [ 72.598408][ T2574] BTRFS info (device loop0): failing ticket with 98304 bytes [ 72.606425][ T5228] BTRFS info (device loop0): space_info DATA+METADATA has 4096 free, is full [ 72.615464][ T5228] BTRFS info (device loop0): space_info total=11534336, used=9965568, pinned=0, reserved=0, may_use=1564672, readonly=0 zone_unusable=0 [ 72.629433][ T5228] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 72.638388][ T5228] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 72.646074][ T5228] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 72.653759][ T5228] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 72.661619][ T5228] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 72.669510][ T52] BTRFS info (device loop0): space_info DATA+METADATA has 4096 free, is full [ 72.678782][ T52] BTRFS info (device loop0): space_info total=11534336, used=9965568, pinned=0, reserved=0, may_use=1564672, readonly=0 zone_unusable=0 [ 72.692874][ T52] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 72.701920][ T52] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [pid 5248] futex(0x7f624e7d66d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 5228] futex(0x7f624e7d66cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] futex(0x7f624e7d66c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 72.709582][ T52] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 72.717241][ T52] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 72.725098][ T52] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [pid 5226] exit_group(0 [pid 5249] <... futex resumed>) = ? [pid 5248] <... futex resumed>) = ? [pid 5228] <... futex resumed>) = ? [pid 5226] <... exit_group resumed>) = ? [pid 5248] +++ exited with 0 +++ [pid 5228] +++ exited with 0 +++ [pid 5249] +++ exited with 0 +++ [pid 5226] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=120 /* 1.20 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ee57730 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 72.838033][ T5225] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.935721][ T61] BTRFS info (device loop0): cannot satisfy tickets, dumping space info [ 72.944348][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 72.953296][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 72.967326][ T61] BTRFS info (device loop0): failing ticket with 98304 bytes [ 72.975508][ T52] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 72.984484][ T52] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 72.998480][ T52] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 73.007308][ T52] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.015021][ T52] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.022904][ T52] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.030841][ T52] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 73.039420][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.048876][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 73.063342][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 73.072462][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.080195][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.087882][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.095867][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 73.105387][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.114607][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 73.128943][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 73.137957][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.145699][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.153499][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.161507][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 73.173377][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.183404][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 73.197649][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 73.206485][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.214268][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.221980][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.229855][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 73.238387][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.247380][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 73.261625][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 73.270506][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.278189][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.285920][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.293808][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 73.305010][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.313957][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 73.328194][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 73.337014][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.344721][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.352425][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.360312][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 73.368680][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.377615][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 73.391862][ T61] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 73.400733][ T61] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 73.408407][ T61] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 73.416116][ T61] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 73.423989][ T61] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 73.434817][ T61] BTRFS info (device loop0): cannot satisfy tickets, dumping space info [ 73.443390][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.452418][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 73.466689][ T61] BTRFS info (device loop0): failing ticket with 98304 bytes [ 73.474835][ T52] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 73.483856][ T52] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 73.497897][ T52] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 76.110593][ T61] _btrfs_printk: 15787 callbacks suppressed [ 76.110611][ T61] BTRFS info (device loop0): cannot satisfy tickets, dumping space info [ 76.124965][ T61] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.133989][ T61] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 76.147974][ T61] BTRFS info (device loop0): failing ticket with 98304 bytes [ 76.155490][ T52] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.164426][ T52] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 76.178657][ T52] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 76.187628][ T52] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.195354][ T52] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.203136][ T52] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.211039][ T52] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 76.219573][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.228549][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 76.242820][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 76.251673][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.259337][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.267134][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.275005][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 76.283511][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.292449][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 76.306701][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 76.315547][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.323302][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.331048][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.338910][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 76.351485][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.360449][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 76.374698][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 76.384103][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.391834][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.399496][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.407382][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 76.415823][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.424841][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 76.439084][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 76.447932][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.455863][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.463613][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.471545][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 76.482528][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.491517][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 76.505873][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 76.514722][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.522417][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.530137][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.537984][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 76.546621][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.555607][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 76.570104][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 76.578910][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.586650][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.594378][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.602485][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 76.613278][ T2891] BTRFS info (device loop0): cannot satisfy tickets, dumping space info [ 76.621675][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.630590][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 76.644630][ T2891] BTRFS info (device loop0): failing ticket with 98304 bytes [ 76.652321][ T52] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.661251][ T52] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 76.675488][ T52] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 76.684370][ T52] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.692056][ T52] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.699782][ T52] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.707684][ T52] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 76.716788][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.725786][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 76.740067][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 76.748914][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.756652][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.764375][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.772277][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 76.780770][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.789653][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 76.803905][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 76.812824][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.820602][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.828263][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.836159][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 76.846990][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.855964][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 76.870329][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 76.879215][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.886925][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.894651][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.902546][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 76.911038][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.919963][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=8192, may_use=1437696, readonly=0 zone_unusable=0 [ 76.934203][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1433600 [ 76.943065][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 76.951227][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 76.959310][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 76.967217][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 0 [ 76.978138][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 76.987188][ T2891] BTRFS info (device loop0): space_info total=11534336, used=9994240, pinned=0, reserved=4096, may_use=1441792, readonly=0 zone_unusable=0 [ 77.001497][ T2891] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 77.010337][ T2891] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 77.018004][ T2891] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 77.025761][ T2891] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 77.033639][ T2891] BTRFS info (device loop0): delayed_refs_rsv: size 262144 reserved 0 [ 77.042221][ T2891] BTRFS info (device loop0): space_info DATA+METADATA has 94208 free, is full [ 77.927458][ T52] ================================================================== [ 77.935641][ T52] BUG: KASAN: slab-use-after-free in __lock_acquire+0x77/0x2050 [ 77.943312][ T52] Read of size 8 at addr ffff8880272a8a18 by task kworker/u8:3/52 [ 77.951105][ T52] [ 77.953458][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.12.0-rc1-syzkaller #0 [ 77.962397][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.972455][ T52] Workqueue: btrfs-fixup btrfs_work_helper [ 77.978285][ T52] Call Trace: [ 77.981561][ T52] [ 77.984484][ T52] dump_stack_lvl+0x241/0x360 [ 77.989167][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.994361][ T52] ? __pfx__printk+0x10/0x10 [ 77.998944][ T52] ? _printk+0xd5/0x120 [ 78.003091][ T52] ? __virt_addr_valid+0x183/0x530 [ 78.008209][ T52] ? __virt_addr_valid+0x183/0x530 [ 78.013322][ T52] print_report+0x169/0x550 [ 78.017827][ T52] ? __virt_addr_valid+0x183/0x530 [ 78.022945][ T52] ? __virt_addr_valid+0x183/0x530 [ 78.028048][ T52] ? __virt_addr_valid+0x45f/0x530 [ 78.033176][ T52] ? __phys_addr+0xba/0x170 [ 78.037700][ T52] ? __lock_acquire+0x77/0x2050 [ 78.042570][ T52] kasan_report+0x143/0x180 [ 78.047087][ T52] ? __lock_acquire+0x77/0x2050 [ 78.051954][ T52] __lock_acquire+0x77/0x2050 [ 78.056645][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 78.061592][ T52] lock_acquire+0x1ed/0x550 [ 78.066118][ T52] ? try_to_wake_up+0xb0/0x1480 [ 78.070976][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 78.076012][ T52] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.081384][ T52] ? try_to_wake_up+0xb0/0x1480 [ 78.086230][ T52] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 78.092125][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.098179][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.104526][ T52] try_to_wake_up+0xb0/0x1480 [ 78.109294][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 78.115213][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 78.121115][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.127531][ T52] ? __pfx_try_to_wake_up+0x10/0x10 [ 78.132738][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 78.137953][ T52] ? btrfs_add_delayed_iput+0x26b/0x310 [ 78.143503][ T52] btrfs_writepage_fixup_worker+0xc16/0xdf0 [ 78.149397][ T52] ? __pfx_btrfs_writepage_fixup_worker+0x10/0x10 [ 78.155814][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 78.160863][ T52] btrfs_work_helper+0x390/0xc50 [ 78.165816][ T52] ? process_scheduled_works+0x976/0x1850 [ 78.171541][ T52] process_scheduled_works+0xa63/0x1850 [ 78.177097][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.183081][ T52] ? assign_work+0x364/0x3d0 [ 78.187686][ T52] worker_thread+0x870/0xd30 [ 78.192282][ T52] ? __kthread_parkme+0x169/0x1d0 [ 78.197320][ T52] ? __pfx_worker_thread+0x10/0x10 [ 78.202435][ T52] kthread+0x2f0/0x390 [ 78.206545][ T52] ? __pfx_worker_thread+0x10/0x10 [ 78.211682][ T52] ? __pfx_kthread+0x10/0x10 [ 78.216290][ T52] ret_from_fork+0x4b/0x80 [ 78.220811][ T52] ? __pfx_kthread+0x10/0x10 [ 78.225406][ T52] ret_from_fork_asm+0x1a/0x30 [ 78.230196][ T52] [ 78.233225][ T52] [ 78.235542][ T52] Allocated by task 2: [ 78.239597][ T52] kasan_save_track+0x3f/0x80 [ 78.244275][ T52] __kasan_slab_alloc+0x66/0x80 [ 78.249138][ T52] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 78.255027][ T52] dup_task_struct+0x57/0x8c0 [ 78.259703][ T52] copy_process+0x5d1/0x3d50 [ 78.264311][ T52] kernel_clone+0x223/0x880 [ 78.268815][ T52] kernel_thread+0x1bc/0x240 [ 78.273415][ T52] kthreadd+0x60d/0x810 [ 78.277573][ T52] ret_from_fork+0x4b/0x80 [ 78.282003][ T52] ret_from_fork_asm+0x1a/0x30 [ 78.286796][ T52] [ 78.289125][ T52] Freed by task 61: [ 78.292930][ T52] kasan_save_track+0x3f/0x80 [ 78.297621][ T52] kasan_save_free_info+0x40/0x50 [ 78.302646][ T52] __kasan_slab_free+0x59/0x70 [ 78.307415][ T52] kmem_cache_free+0x1a2/0x420 [ 78.312175][ T52] delayed_put_task_struct+0x125/0x300 [ 78.317646][ T52] rcu_core+0xaaa/0x17a0 [ 78.321984][ T52] handle_softirqs+0x2c5/0x980 [ 78.326754][ T52] __irq_exit_rcu+0xf4/0x1c0 [ 78.331355][ T52] irq_exit_rcu+0x9/0x30 [ 78.335610][ T52] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 78.341270][ T52] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 78.347262][ T52] [ 78.349580][ T52] Last potentially related work creation: [ 78.355299][ T52] kasan_save_stack+0x3f/0x60 [ 78.359989][ T52] __kasan_record_aux_stack+0xac/0xc0 [ 78.365373][ T52] call_rcu+0x167/0xa70 [ 78.369524][ T52] __schedule+0x184b/0x4ae0 [ 78.374028][ T52] schedule_idle+0x56/0x90 [ 78.378444][ T52] do_idle+0x56a/0x5d0 [ 78.382528][ T52] cpu_startup_entry+0x42/0x60 [ 78.387300][ T52] start_secondary+0x102/0x110 [ 78.392067][ T52] common_startup_64+0x13e/0x147 [ 78.397001][ T52] [ 78.399317][ T52] The buggy address belongs to the object at ffff8880272a8000 [ 78.399317][ T52] which belongs to the cache task_struct of size 7424 [ 78.413541][ T52] The buggy address is located 2584 bytes inside of [ 78.413541][ T52] freed 7424-byte region [ffff8880272a8000, ffff8880272a9d00) [ 78.427772][ T52] [ 78.430092][ T52] The buggy address belongs to the physical page: [ 78.436504][ T52] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x272a8 [ 78.445266][ T52] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 78.453790][ T52] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 78.461336][ T52] page_type: f5(slab) [ 78.465314][ T52] raw: 00fff00000000040 ffff88801bafa500 dead000000000122 0000000000000000 [ 78.473896][ T52] raw: 0000000000000000 0000000080040004 00000001f5000000 0000000000000000 [ 78.482501][ T52] head: 00fff00000000040 ffff88801bafa500 dead000000000122 0000000000000000 [ 78.491166][ T52] head: 0000000000000000 0000000080040004 00000001f5000000 0000000000000000 [ 78.499832][ T52] head: 00fff00000000003 ffffea00009caa01 ffffffffffffffff 0000000000000000 [ 78.508496][ T52] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 78.517162][ T52] page dumped because: kasan: bad access detected [ 78.523577][ T52] page_owner tracks the page as allocated [ 78.529283][ T52] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 71247381401, free_ts 71214998153 [ 78.549781][ T52] post_alloc_hook+0x1f3/0x230 [ 78.554580][ T52] get_page_from_freelist+0x3039/0x3180 [ 78.560129][ T52] __alloc_pages_noprof+0x256/0x6c0 [ 78.565327][ T52] alloc_pages_mpol_noprof+0x3e8/0x680 [ 78.570783][ T52] alloc_slab_page+0x6a/0x120 [ 78.575478][ T52] allocate_slab+0x5a/0x2f0 [ 78.580024][ T52] ___slab_alloc+0xcd1/0x14b0 [ 78.584718][ T52] __slab_alloc+0x58/0xa0 [ 78.589113][ T52] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 78.595022][ T52] dup_task_struct+0x57/0x8c0 [ 78.599712][ T52] copy_process+0x5d1/0x3d50 [ 78.604325][ T52] kernel_clone+0x223/0x880 [ 78.608835][ T52] kernel_thread+0x1bc/0x240 [ 78.613430][ T52] kthreadd+0x60d/0x810 [ 78.617586][ T52] ret_from_fork+0x4b/0x80 [ 78.622005][ T52] ret_from_fork_asm+0x1a/0x30 [ 78.626770][ T52] page last free pid 5230 tgid 5230 stack trace: [ 78.633088][ T52] free_unref_page+0xcd0/0xf00 [ 78.637850][ T52] __put_partials+0xeb/0x130 [ 78.642446][ T52] put_cpu_partial+0x17c/0x250 [ 78.647216][ T52] __slab_free+0x2ea/0x3d0 [ 78.651636][ T52] qlist_free_all+0x9a/0x140 [ 78.656226][ T52] kasan_quarantine_reduce+0x14f/0x170 [ 78.661688][ T52] __kasan_slab_alloc+0x23/0x80 [ 78.666541][ T52] kmem_cache_alloc_noprof+0x135/0x2a0 [ 78.671996][ T52] getname_flags+0xb7/0x540 [ 78.676491][ T52] do_sys_openat2+0xd2/0x1d0 [ 78.681103][ T52] __x64_sys_openat+0x247/0x2a0 [ 78.686025][ T52] do_syscall_64+0xf3/0x230 [ 78.690534][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.696444][ T52] [ 78.698765][ T52] Memory state around the buggy address: [ 78.704391][ T52] ffff8880272a8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.712447][ T52] ffff8880272a8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.720502][ T52] >ffff8880272a8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.728555][ T52] ^ [ 78.733519][ T52] ffff8880272a8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.741582][ T52] ffff8880272a8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.749664][ T52] ================================================================== [ 78.757728][ T52] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.764917][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.12.0-rc1-syzkaller #0 [ 78.773929][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.784032][ T52] Workqueue: btrfs-fixup btrfs_work_helper [ 78.789872][ T52] Call Trace: [ 78.793157][ T52] [ 78.796107][ T52] dump_stack_lvl+0x241/0x360 [ 78.800802][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.806001][ T52] ? __pfx__printk+0x10/0x10 [ 78.810692][ T52] ? rcu_is_watching+0x15/0xb0 [ 78.815454][ T52] ? lock_release+0xbf/0xa30 [ 78.820051][ T52] ? vscnprintf+0x5d/0x90 [ 78.824394][ T52] panic+0x349/0x880 [ 78.828284][ T52] ? check_panic_on_warn+0x21/0xb0 [ 78.833394][ T52] ? __pfx_panic+0x10/0x10 [ 78.837805][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.843005][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 78.848919][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.855248][ T52] ? print_report+0x502/0x550 [ 78.859933][ T52] check_panic_on_warn+0x86/0xb0 [ 78.864874][ T52] ? __lock_acquire+0x77/0x2050 [ 78.869734][ T52] end_report+0x77/0x160 [ 78.873992][ T52] kasan_report+0x154/0x180 [ 78.878510][ T52] ? __lock_acquire+0x77/0x2050 [ 78.883376][ T52] __lock_acquire+0x77/0x2050 [ 78.888069][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 78.893102][ T52] lock_acquire+0x1ed/0x550 [ 78.897617][ T52] ? try_to_wake_up+0xb0/0x1480 [ 78.902478][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 78.907524][ T52] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.912814][ T52] ? try_to_wake_up+0xb0/0x1480 [ 78.917658][ T52] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 78.923554][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.929550][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.935893][ T52] try_to_wake_up+0xb0/0x1480 [ 78.940577][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 78.946473][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 78.952371][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.958700][ T52] ? __pfx_try_to_wake_up+0x10/0x10 [ 78.963893][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 78.969113][ T52] ? btrfs_add_delayed_iput+0x26b/0x310 [ 78.974661][ T52] btrfs_writepage_fixup_worker+0xc16/0xdf0 [ 78.980569][ T52] ? __pfx_btrfs_writepage_fixup_worker+0x10/0x10 [ 78.986982][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 78.992033][ T52] btrfs_work_helper+0x390/0xc50 [ 78.997006][ T52] ? process_scheduled_works+0x976/0x1850 [ 79.002737][ T52] process_scheduled_works+0xa63/0x1850 [ 79.008301][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.014289][ T52] ? assign_work+0x364/0x3d0 [ 79.018956][ T52] worker_thread+0x870/0xd30 [ 79.023601][ T52] ? __kthread_parkme+0x169/0x1d0 [ 79.028637][ T52] ? __pfx_worker_thread+0x10/0x10 [ 79.033758][ T52] kthread+0x2f0/0x390 [ 79.037837][ T52] ? __pfx_worker_thread+0x10/0x10 [ 79.042997][ T52] ? __pfx_kthread+0x10/0x10 [ 79.047697][ T52] ret_from_fork+0x4b/0x80 [ 79.052137][ T52] ? __pfx_kthread+0x10/0x10 [ 79.056739][ T52] ret_from_fork_asm+0x1a/0x30 [ 79.061531][ T52] [ 79.064891][ T52] Kernel Offset: disabled [ 79.069230][ T52] Rebooting in 86400 seconds..