./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor276036230 <...> Warning: Permanently added '10.128.10.45' (ED25519) to the list of known hosts. execve("./syz-executor276036230", ["./syz-executor276036230"], 0x7ffed1129900 /* 10 vars */) = 0 brk(NULL) = 0x555556f26000 brk(0x555556f26d40) = 0x555556f26d40 arch_prctl(ARCH_SET_FS, 0x555556f263c0) = 0 set_tid_address(0x555556f26690) = 5818 set_robust_list(0x555556f266a0, 24) = 0 rseq(0x555556f26ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor276036230", 4096) = 27 getrandom("\x5b\x00\x97\x21\xf9\x5d\x7f\x56", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556f26d40 brk(0x555556f47d40) = 0x555556f47d40 brk(0x555556f48000) = 0x555556f48000 mprotect(0x7f981859f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 [ 68.093587][ T5818] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 68.219094][ T5818] cgroup: Unknown subsys name 'cpuset' [ 68.231110][ T5818] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 5819 ./strace-static-x86_64: Process 5819 attached [pid 5818] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5819] set_robust_list(0x555556f266a0, 24) = 0 ./strace-static-x86_64: Process 5820 attached [pid 5818] <... clone resumed>, child_tidptr=0x555556f26690) = 5820 [pid 5818] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] set_robust_list(0x555556f266a0, 24 [pid 5819] mkdir("./syzkaller.v5jbMc", 0700./strace-static-x86_64: Process 5821 attached [pid 5820] <... set_robust_list resumed>) = 0 [pid 5820] mkdir("./syzkaller.0qoIDs", 0700 [pid 5819] <... mkdir resumed>) = 0 [pid 5821] set_robust_list(0x555556f266a0, 24) = 0 [pid 5820] <... mkdir resumed>) = 0 [pid 5819] chmod("./syzkaller.v5jbMc", 0777 [pid 5818] <... clone resumed>, child_tidptr=0x555556f26690) = 5821 [pid 5818] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] mkdir("./syzkaller.9QNMJn", 0700 [pid 5820] chmod("./syzkaller.0qoIDs", 0777 [pid 5819] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5822 attached [pid 5820] <... chmod resumed>) = 0 [pid 5819] chdir("./syzkaller.v5jbMc" [pid 5818] <... clone resumed>, child_tidptr=0x555556f26690) = 5822 [pid 5821] <... mkdir resumed>) = 0 [pid 5822] set_robust_list(0x555556f266a0, 24 [pid 5818] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] chdir("./syzkaller.0qoIDs" [pid 5819] <... chdir resumed>) = 0 [pid 5820] <... chdir resumed>) = 0 [pid 5819] unshare(CLONE_NEWPID./strace-static-x86_64: Process 5823 attached [pid 5822] <... set_robust_list resumed>) = 0 [pid 5821] chmod("./syzkaller.9QNMJn", 0777 [pid 5820] unshare(CLONE_NEWPID [pid 5819] <... unshare resumed>) = 0 [pid 5818] <... clone resumed>, child_tidptr=0x555556f26690) = 5823 [pid 5822] mkdir("./syzkaller.lVLEEF", 0700 [pid 5823] set_robust_list(0x555556f266a0, 24 [pid 5821] <... chmod resumed>) = 0 [pid 5820] <... unshare resumed>) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5822] <... mkdir resumed>) = 0 [pid 5823] <... set_robust_list resumed>) = 0 [pid 5821] chdir("./syzkaller.9QNMJn" [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5824 attached [pid 5823] mkdir("./syzkaller.yb8Lfn", 0700 [pid 5822] chmod("./syzkaller.lVLEEF", 0777 [pid 5821] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5825 attached [pid 5824] set_robust_list(0x555556f266a0, 24 [pid 5822] <... chmod resumed>) = 0 [pid 5821] unshare(CLONE_NEWPID [pid 5824] <... set_robust_list resumed>) = 0 [pid 5822] chdir("./syzkaller.lVLEEF" [pid 5820] <... clone resumed>, child_tidptr=0x555556f26690) = 5824 [pid 5819] <... clone resumed>, child_tidptr=0x555556f26690) = 5825 [pid 5821] <... unshare resumed>) = 0 [pid 5825] set_robust_list(0x555556f266a0, 24 [pid 5824] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5822] <... chdir resumed>) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... set_robust_list resumed>) = 0 [pid 5825] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5823] <... mkdir resumed>) = 0 [pid 5825] <... socket resumed>) = 3 ./strace-static-x86_64: Process 5826 attached [pid 5824] <... socket resumed>) = 3 [pid 5823] chmod("./syzkaller.yb8Lfn", 0777 [pid 5822] unshare(CLONE_NEWPID [pid 5826] set_robust_list(0x555556f266a0, 24 [pid 5821] <... clone resumed>, child_tidptr=0x555556f26690) = 5826 [pid 5826] <... set_robust_list resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5824] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5823] <... chmod resumed>) = 0 [pid 5822] <... unshare resumed>) = 0 [pid 5826] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] <... socket resumed>) = 3 [pid 5825] <... openat resumed>) = 4 [pid 5824] <... openat resumed>) = 4 [pid 5823] chdir("./syzkaller.yb8Lfn" [pid 5826] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5825] dup2(4, 202 [pid 5824] dup2(4, 202 [pid 5823] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5827 attached [pid 5826] <... openat resumed>) = 4 [pid 5825] <... dup2 resumed>) = 202 [pid 5824] <... dup2 resumed>) = 202 [pid 5827] set_robust_list(0x555556f266a0, 24 [pid 5823] unshare(CLONE_NEWPID [pid 5822] <... clone resumed>, child_tidptr=0x555556f26690) = 5827 [pid 5825] close(4 [pid 5824] close(4 [pid 5823] <... unshare resumed>) = 0 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5826] dup2(4, 202 [pid 5825] write(202, "\xff\x00", 2 [pid 5824] write(202, "\xff\x00", 2./strace-static-x86_64: Process 5828 attached [pid 5826] <... dup2 resumed>) = 202 [pid 5827] <... socket resumed>) = 3 [pid 5826] close(4) = 0 [pid 5826] write(202, "\xff\x00", 2 [pid 5827] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5828] set_robust_list(0x555556f266a0, 24) = 0 [pid 5828] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5827] <... openat resumed>) = 4 [pid 5823] <... clone resumed>, child_tidptr=0x555556f26690) = 5828 [pid 5828] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5827] dup2(4, 202 [pid 5828] <... openat resumed>) = 4 [pid 5827] <... dup2 resumed>) = 202 [pid 5828] dup2(4, 202 [pid 5827] close(4 [pid 5828] <... dup2 resumed>) = 202 [pid 5827] <... close resumed>) = 0 [pid 5828] close(4 [pid 5827] write(202, "\xff\x00", 2 [pid 5828] <... close resumed>) = 0 [pid 5828] write(202, "\xff\x00", 2 [pid 5824] <... write resumed>) = 2 [pid 5826] <... write resumed>) = 2 [pid 5826] read(202, [pid 5828] <... write resumed>) = 2 [pid 5827] <... write resumed>) = 2 [pid 5825] <... write resumed>) = 2 [pid 5824] read(202, [pid 5828] read(202, [pid 5826] <... read resumed>"\xff\x00\x01\x00", 4) = 4 [pid 5828] <... read resumed>"\xff\x00\x04\x00", 4) = 4 [pid 5826] rt_sigaction(SIGRT_1, {sa_handler=0x7f981853e320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f981852f4d0}, [pid 5828] rt_sigaction(SIGRT_1, {sa_handler=0x7f981853e320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f981852f4d0}, [pid 5826] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5828] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5827] read(202, [pid 5826] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5825] read(202, [pid 5824] <... read resumed>"\xff\x00\x02\x00", 4) = 4 [pid 5827] <... read resumed>"\xff\x00\x03\x00", 4) = 4 [pid 5825] <... read resumed>"\xff\x00\x00\x00", 4) = 4 [pid 5828] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5824] rt_sigaction(SIGRT_1, {sa_handler=0x7f981853e320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f981852f4d0}, [pid 5827] rt_sigaction(SIGRT_1, {sa_handler=0x7f981853e320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f981852f4d0}, [pid 5826] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5825] rt_sigaction(SIGRT_1, {sa_handler=0x7f981853e320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f981852f4d0}, [pid 5824] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5827] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5825] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5824] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5824] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5824] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5827] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5826] <... mmap resumed>) = 0x7f9817ccd000 [pid 5825] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5824] <... mmap resumed>) = 0x7f9817ccd000 [pid 5828] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5827] <... mmap resumed>) = 0x7f9817ccd000 [pid 5826] mprotect(0x7f9817cce000, 8388608, PROT_READ|PROT_WRITE [pid 5825] <... mmap resumed>) = 0x7f9817ccd000 [pid 5828] <... mmap resumed>) = 0x7f9817ccd000 [pid 5826] <... mprotect resumed>) = 0 [pid 5824] mprotect(0x7f9817cce000, 8388608, PROT_READ|PROT_WRITE [pid 5828] mprotect(0x7f9817cce000, 8388608, PROT_READ|PROT_WRITE [pid 5827] mprotect(0x7f9817cce000, 8388608, PROT_READ|PROT_WRITE [pid 5826] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5825] mprotect(0x7f9817cce000, 8388608, PROT_READ|PROT_WRITE [pid 5828] <... mprotect resumed>) = 0 [pid 5826] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5824] <... mprotect resumed>) = 0 [pid 5828] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5827] <... mprotect resumed>) = 0 [pid 5825] <... mprotect resumed>) = 0 [pid 5828] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5827] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f98184cd990, parent_tid=0x7f98184cd990, exit_signal=0, stack=0x7f9817ccd000, stack_size=0x800300, tls=0x7f98184cd6c0}./strace-static-x86_64: Process 5838 attached [pid 5828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f98184cd990, parent_tid=0x7f98184cd990, exit_signal=0, stack=0x7f9817ccd000, stack_size=0x800300, tls=0x7f98184cd6c0} [pid 5827] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5825] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5824] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5839 attached [pid 5827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f98184cd990, parent_tid=0x7f98184cd990, exit_signal=0, stack=0x7f9817ccd000, stack_size=0x800300, tls=0x7f98184cd6c0} [pid 5825] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5838] rseq(0x7f98184cdfe0, 0x20, 0, 0x53053053 [pid 5828] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5826] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f98184cd990, parent_tid=0x7f98184cd990, exit_signal=0, stack=0x7f9817ccd000, stack_size=0x800300, tls=0x7f98184cd6c0}./strace-static-x86_64: Process 5840 attached [pid 5839] rseq(0x7f98184cdfe0, 0x20, 0, 0x53053053 [pid 5838] <... rseq resumed>) = 0 [pid 5828] rt_sigprocmask(SIG_SETMASK, [], [pid 5826] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5841 attached [pid 5839] <... rseq resumed>) = 0 [pid 5824] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5841] rseq(0x7f98184cdfe0, 0x20, 0, 0x53053053 [pid 5840] rseq(0x7f98184cdfe0, 0x20, 0, 0x53053053 [pid 5839] set_robust_list(0x7f98184cd9a0, 24 [pid 5838] set_robust_list(0x7f98184cd9a0, 24 [pid 5828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5824] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f98184cd990, parent_tid=0x7f98184cd990, exit_signal=0, stack=0x7f9817ccd000, stack_size=0x800300, tls=0x7f98184cd6c0} [pid 5841] <... rseq resumed>) = 0 [pid 5840] <... rseq resumed>) = 0 [pid 5839] <... set_robust_list resumed>) = 0 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5828] ioctl(3, HCIDEVUP [pid 5827] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5826] ioctl(3, HCIDEVUP [pid 5825] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 ./strace-static-x86_64: Process 5842 attached [pid 5841] set_robust_list(0x7f98184cd9a0, 24 [pid 5840] set_robust_list(0x7f98184cd9a0, 24 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5827] rt_sigprocmask(SIG_SETMASK, [], [pid 5825] rt_sigprocmask(SIG_SETMASK, [], [pid 5842] rseq(0x7f98184cdfe0, 0x20, 0, 0x53053053 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5824] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5842] <... rseq resumed>) = 0 [pid 5841] rt_sigprocmask(SIG_SETMASK, [], [pid 5840] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] read(202, [pid 5838] read(202, [pid 5827] ioctl(3, HCIDEVUP [pid 5825] ioctl(3, HCIDEVUP [pid 5824] rt_sigprocmask(SIG_SETMASK, [], [pid 5842] set_robust_list(0x7f98184cd9a0, 24 [pid 5841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5838] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5824] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5842] <... set_robust_list resumed>) = 0 [pid 5840] read(202, [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5824] ioctl(3, HCIDEVUP [pid 5841] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5842] rt_sigprocmask(SIG_SETMASK, [], [pid 5840] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5839] <... writev resumed>) = 255 [pid 5838] <... writev resumed>) = 255 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] read(202, [pid 5838] read(202, [pid 5842] read(202, [pid 5841] <... writev resumed>) = 255 [pid 5840] <... writev resumed>) = 255 [pid 5841] read(202, [pid 5839] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5842] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5841] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5840] read(202, [pid 5838] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5840] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... writev resumed>) = 255 [pid 5839] <... writev resumed>) = 255 [ 68.500137][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.508310][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.518203][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.518293][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.540092][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [pid 5839] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5842] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5841] <... writev resumed>) = 255 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] <... writev resumed>) = 255 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5841] read(202, [pid 5840] <... writev resumed>) = 255 [pid 5839] read(202, [pid 5842] read(202, [pid 5838] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5841] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5840] read(202, [pid 5839] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5838] <... writev resumed>) = 255 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5842] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [ 68.540448][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.549832][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.556469][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.563064][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.569883][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.576146][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.585103][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [pid 5838] read(202, [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5842] <... writev resumed>) = 255 [pid 5841] <... writev resumed>) = 255 [pid 5840] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5839] <... writev resumed>) = 13 [pid 5841] read(202, [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] read(202, [pid 5842] read(202, [pid 5841] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5840] <... writev resumed>) = 255 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5838] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5838] read(202, [pid 5842] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5840] read(202, [pid 5839] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5838] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5841] <... writev resumed>) = 13 [pid 5840] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... writev resumed>) = 13 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5842] read(202, [pid 5840] <... writev resumed>) = 13 [pid 5838] <... writev resumed>) = 255 [pid 5840] read(202, [pid 5839] <... writev resumed>) = 14 [pid 5841] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5841] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5840] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5839] read(202, [pid 5838] read(202, [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5839] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5838] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5842] <... writev resumed>) = 14 [pid 5840] <... writev resumed>) = 14 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] read(202, [pid 5841] <... writev resumed>) = 255 [pid 5840] read(202, [pid 5839] <... writev resumed>) = 255 [pid 5841] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5842] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5840] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5839] read(202, [pid 5838] <... writev resumed>) = 255 [ 68.591634][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.599011][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.606199][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.628256][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.628967][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.639648][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5841] read(202, [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5838] read(202, [pid 5841] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5840] <... writev resumed>) = 255 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5840] read(202, [pid 5839] <... writev resumed>) = 255 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... writev resumed>) = 255 [pid 5841] <... writev resumed>) = 255 [pid 5842] read(202, [pid 5838] <... writev resumed>) = 255 [pid 5842] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5842] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5841] read(202, [pid 5840] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5839] read(202, [pid 5838] read(202, [pid 5841] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5840] <... writev resumed>) = 255 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5842] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5841] <... writev resumed>) = 255 [pid 5839] <... writev resumed>) = 255 [ 68.655390][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.656665][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.662584][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.670464][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.680386][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.686862][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.694283][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [pid 5840] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5842] <... writev resumed>) = 255 [pid 5841] read(202, [pid 5839] read(202, [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5841] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5842] read(202, [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5838] <... writev resumed>) = 255 [pid 5842] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5840] <... writev resumed>) = 255 [pid 5841] <... writev resumed>) = 255 [pid 5841] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5825] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [pid 5825] ioctl(3, HCISETSCAN [pid 5841] read(202, "\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5841] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5841] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5825] <... ioctl resumed>, 0x7ffca7feed30) = 0 [pid 5825] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] read(202, [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] read(202, [pid 5842] <... writev resumed>) = 255 [pid 5839] <... writev resumed>) = 255 [pid 5838] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5839] read(202, [pid 5842] read(202, [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5838] <... writev resumed>) = 255 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] read(202, [pid 5842] <... writev resumed>) = 255 [pid 5842] read(202, [pid 5825] <... writev resumed>) = 13 [pid 5841] madvise(0x7f9817ccd000, 8372224, MADV_DONTNEED [pid 5840] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5839] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5838] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5825] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5824] <... ioctl resumed>, 0x2) = -1 EALREADY (Operation already in progress) [pid 5841] <... madvise resumed>) = 0 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [ 68.697989][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.716675][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.717154][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.741736][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5826] <... ioctl resumed>, 0x1) = -1 EALREADY (Operation already in progress) [pid 5825] <... writev resumed>) = 14 [pid 5824] ioctl(3, HCISETSCAN [pid 5842] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5838] read(202, [pid 5826] ioctl(3, HCISETSCAN [pid 5825] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5842] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5841] exit(0 [pid 5840] <... writev resumed>) = 255 [pid 5839] <... writev resumed>) = 255 [pid 5841] <... exit resumed>) = ? [pid 5841] +++ exited with 0 +++ [pid 5840] read(202, [pid 5839] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5839] read(202, [pid 5842] <... writev resumed>) = 7 [pid 5842] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5838] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5825] <... writev resumed>) = 14 [pid 5842] madvise(0x7f9817ccd000, 8372224, MADV_DONTNEED [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5842] <... madvise resumed>) = 0 [pid 5840] <... writev resumed>) = 255 [pid 5838] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5842] exit(0 [pid 5840] read(202, [pid 5838] <... writev resumed>) = 7 [pid 5828] <... ioctl resumed>, 0x4) = -1 EALREADY (Operation already in progress) [pid 5826] <... ioctl resumed>, 0x7ffca7feed30) = 0 [pid 5825] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5824] <... ioctl resumed>, 0x7ffca7feed30) = 0 [pid 5842] <... exit resumed>) = ? [pid 5840] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5828] ioctl(3, HCISETSCAN [pid 5826] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5825] <... writev resumed>) = 22 [pid 5824] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5842] +++ exited with 0 +++ [pid 5825] close(3 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5839] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] <... writev resumed>) = 13 [pid 5825] <... close resumed>) = 0 [pid 5824] <... writev resumed>) = 13 [pid 5839] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5826] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5840] <... writev resumed>) = 255 [pid 5838] madvise(0x7f9817ccd000, 8372224, MADV_DONTNEED [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5840] read(202, [pid 5838] <... madvise resumed>) = 0 [pid 5825] <... prctl resumed>) = 0 [pid 5824] <... writev resumed>) = 14 [pid 5838] exit(0 [pid 5825] getppid( [pid 5824] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5838] <... exit resumed>) = ? [pid 5825] <... getppid resumed>) = 0 [pid 5838] +++ exited with 0 +++ [pid 5825] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5824] <... writev resumed>) = 14 [pid 5839] <... writev resumed>) = 7 [pid 5828] <... ioctl resumed>, 0x7ffca7feed30) = 0 [pid 5827] <... ioctl resumed>, 0x3) = -1 EALREADY (Operation already in progress) [pid 5826] <... writev resumed>) = 14 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5828] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5827] ioctl(3, HCISETSCAN [pid 5840] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5839] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5825] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5824] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5840] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5828] <... writev resumed>) = 13 [pid 5826] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5840] <... writev resumed>) = 7 [pid 5827] <... ioctl resumed>, 0x7ffca7feed30) = 0 [pid 5826] <... writev resumed>) = 14 [pid 5825] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5824] <... writev resumed>) = 22 [pid 5840] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5839] madvise(0x7f9817ccd000, 8372224, MADV_DONTNEED [pid 5828] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5827] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5826] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5828] <... writev resumed>) = 14 [pid 5825] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5824] close(3 [pid 5840] madvise(0x7f9817ccd000, 8372224, MADV_DONTNEED [pid 5828] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] <... close resumed>) = 0 [pid 5840] <... madvise resumed>) = 0 [pid 5839] <... madvise resumed>) = 0 [pid 5828] <... writev resumed>) = 14 [pid 5827] <... writev resumed>) = 13 [pid 5828] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5840] exit(0 [pid 5828] <... writev resumed>) = 22 [pid 5826] <... writev resumed>) = 22 [pid 5840] <... exit resumed>) = ? [pid 5825] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5824] <... prctl resumed>) = 0 [pid 5840] +++ exited with 0 +++ [pid 5828] futex(0x7f98184cd990, FUTEX_WAIT_BITSET|FUTEX_CLOCK_REALTIME, 2, NULL, FUTEX_BITSET_MATCH_ANY [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] getppid( [pid 5839] exit(0 [pid 5827] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5826] close(3 [pid 5825] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5824] <... getppid resumed>) = 0 [pid 5827] <... writev resumed>) = 14 [pid 5826] <... close resumed>) = 0 [pid 5825] <... prlimit64 resumed>NULL) = 0 [pid 5824] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5825] unshare(CLONE_NEWNS [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5839] <... exit resumed>) = ? [pid 5827] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] <... unshare resumed>) = 0 [pid 5839] +++ exited with 0 +++ [pid 5827] <... writev resumed>) = 14 [pid 5828] <... futex resumed>) = 0 [pid 5824] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5828] close(3 [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5828] <... close resumed>) = 0 [pid 5827] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5826] <... prctl resumed>) = 0 [pid 5825] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5824] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... writev resumed>) = 22 [pid 5826] getppid( [pid 5827] close(3 [pid 5826] <... getppid resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5828] <... prctl resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5828] getppid( [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] unshare(CLONE_NEWIPC [pid 5824] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5828] <... getppid resumed>) = 0 [pid 5827] <... prctl resumed>) = 0 [pid 5826] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5828] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5824] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5828] <... prlimit64 resumed>NULL) = 0 [pid 5825] <... unshare resumed>) = 0 [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5828] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5827] getppid( [pid 5824] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5828] <... prlimit64 resumed>NULL) = 0 [pid 5827] <... getppid resumed>) = 0 [pid 5826] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5825] unshare(CLONE_NEWCGROUP [pid 5824] <... prlimit64 resumed>NULL) = 0 [pid 5828] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5827] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5824] unshare(CLONE_NEWNS [pid 5828] <... prlimit64 resumed>NULL) = 0 [pid 5827] <... prlimit64 resumed>NULL) = 0 [pid 5826] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5825] <... unshare resumed>) = 0 [pid 5828] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5827] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] unshare(CLONE_NEWUTS [pid 5824] <... unshare resumed>) = 0 [pid 5828] <... prlimit64 resumed>NULL) = 0 [pid 5827] <... prlimit64 resumed>NULL) = 0 [pid 5826] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5825] <... unshare resumed>) = 0 [pid 5828] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5827] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] unshare(CLONE_SYSVSEM [pid 5828] <... prlimit64 resumed>NULL) = 0 [pid 5827] <... prlimit64 resumed>NULL) = 0 [pid 5826] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5825] <... unshare resumed>) = 0 [pid 5824] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5828] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5827] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5826] <... prlimit64 resumed>NULL) = 0 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5828] <... prlimit64 resumed>NULL) = 0 [pid 5827] <... prlimit64 resumed>NULL) = 0 [pid 5826] unshare(CLONE_NEWNS [pid 5825] <... openat resumed>) = 3 [pid 5824] <... mount resumed>) = 0 [pid 5828] unshare(CLONE_NEWNS [pid 5827] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5826] <... unshare resumed>) = 0 [pid 5825] write(3, "16777216", 8 [pid 5827] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5826] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5828] <... unshare resumed>) = 0 [pid 5827] <... prlimit64 resumed>NULL) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5825] <... write resumed>) = 8 [pid 5827] unshare(CLONE_NEWNS [pid 5826] unshare(CLONE_NEWIPC [pid 5825] close(3 [pid 5824] unshare(CLONE_NEWIPC [pid 5826] <... unshare resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... unshare resumed>) = 0 [pid 5828] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5827] <... unshare resumed>) = 0 [pid 5826] unshare(CLONE_NEWCGROUP [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5828] <... mount resumed>) = 0 [pid 5827] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5826] <... unshare resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] unshare(CLONE_NEWCGROUP [pid 5828] unshare(CLONE_NEWIPC [pid 5827] <... mount resumed>) = 0 [pid 5824] <... unshare resumed>) = 0 [pid 5827] unshare(CLONE_NEWIPC [pid 5826] unshare(CLONE_NEWUTS [pid 5824] unshare(CLONE_NEWUTS [pid 5828] <... unshare resumed>) = 0 [pid 5825] write(3, "536870912", 9 [pid 5827] <... unshare resumed>) = 0 [pid 5826] <... unshare resumed>) = 0 [pid 5824] <... unshare resumed>) = 0 [pid 5826] unshare(CLONE_SYSVSEM [pid 5825] <... write resumed>) = 9 [pid 5824] unshare(CLONE_SYSVSEM [pid 5828] unshare(CLONE_NEWCGROUP [pid 5827] unshare(CLONE_NEWCGROUP [pid 5826] <... unshare resumed>) = 0 [pid 5825] close(3 [pid 5824] <... unshare resumed>) = 0 [pid 5828] <... unshare resumed>) = 0 [pid 5827] <... unshare resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5828] unshare(CLONE_NEWUTS [pid 5827] unshare(CLONE_NEWUTS [pid 5826] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5828] <... unshare resumed>) = 0 [pid 5827] <... unshare resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5828] unshare(CLONE_SYSVSEM [pid 5827] unshare(CLONE_SYSVSEM [pid 5826] write(3, "16777216", 8 [pid 5825] <... openat resumed>) = 3 [ 68.759892][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [pid 5828] <... unshare resumed>) = 0 [pid 5827] <... unshare resumed>) = 0 [pid 5826] <... write resumed>) = 8 [pid 5824] write(3, "16777216", 8 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5824] <... write resumed>) = 8 [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5826] close(3 [pid 5825] write(3, "1024", 4 [pid 5824] close(3 [pid 5828] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... close resumed>) = 0 [pid 5825] <... write resumed>) = 4 [pid 5824] <... close resumed>) = 0 [pid 5828] write(3, "16777216", 8 [pid 5827] write(3, "16777216", 8 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5825] close(3 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5828] <... write resumed>) = 8 [pid 5827] <... write resumed>) = 8 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... close resumed>) = 0 [pid 5828] close(3 [pid 5827] close(3 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5828] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] write(3, "536870912", 9 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5826] <... write resumed>) = 9 [pid 5828] <... openat resumed>) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] close(3 [pid 5825] write(3, "8192", 4 [pid 5828] write(3, "536870912", 9 [pid 5826] <... close resumed>) = 0 [pid 5828] <... write resumed>) = 9 [pid 5827] write(3, "536870912", 9 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5825] <... write resumed>) = 4 [pid 5828] close(3 [pid 5827] <... write resumed>) = 9 [pid 5826] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5828] <... close resumed>) = 0 [pid 5827] close(3 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5827] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "1024", 4 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5827] <... openat resumed>) = 3 [pid 5826] <... write resumed>) = 4 [pid 5825] <... openat resumed>) = 3 [pid 5824] write(3, "536870912", 9 [pid 5828] write(3, "1024", 4 [pid 5824] <... write resumed>) = 9 [pid 5827] write(3, "1024", 4 [pid 5826] close(3 [pid 5824] close(3 [pid 5828] <... write resumed>) = 4 [pid 5827] <... write resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5825] write(3, "1024", 4 [pid 5824] <... close resumed>) = 0 [pid 5827] close(3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5825] <... write resumed>) = 4 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5828] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5824] <... openat resumed>) = 3 [pid 5828] <... close resumed>) = 0 [pid 5824] write(3, "1024", 4 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5827] <... openat resumed>) = 3 [pid 5826] write(3, "8192", 4 [pid 5825] <... close resumed>) = 0 [pid 5824] <... write resumed>) = 4 [pid 5828] write(3, "8192", 4 [pid 5827] write(3, "8192", 4 [pid 5826] <... write resumed>) = 4 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5828] <... write resumed>) = 4 [pid 5827] <... write resumed>) = 4 [pid 5824] close(3 [pid 5828] close(3) = 0 [pid 5827] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5828] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5825] write(3, "1024", 4 [pid 5828] write(3, "1024", 4 [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5825] <... write resumed>) = 4 [pid 5824] <... openat resumed>) = 3 [pid 5828] <... write resumed>) = 4 [pid 5827] write(3, "1024", 4 [pid 5826] <... openat resumed>) = 3 [pid 5828] close(3) = 0 [pid 5827] <... write resumed>) = 4 [pid 5825] close(3 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5827] close(3 [pid 5826] write(3, "1024", 4 [pid 5825] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] <... write resumed>) = 4 [pid 5825] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5828] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5826] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5824] write(3, "8192", 4 [pid 5828] write(3, "1024", 4 [pid 5827] <... openat resumed>) = 3 [pid 5828] <... write resumed>) = 4 [pid 5826] <... close resumed>) = 0 [pid 5824] <... write resumed>) = 4 [pid 5828] close(3 [pid 5827] write(3, "1024", 4 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5825] write(3, "1024 1048576 500 1024", 21 [pid 5828] <... close resumed>) = 0 [pid 5827] <... write resumed>) = 4 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... write resumed>) = 21 [pid 5824] close(3 [pid 5828] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "1024", 4 [pid 5824] <... close resumed>) = 0 [pid 5827] close(3 [pid 5826] <... write resumed>) = 4 [pid 5825] close(3 [pid 5828] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5828] write(3, "1024 1048576 500 1024", 21 [pid 5827] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5825] getpid( [pid 5828] <... write resumed>) = 21 [pid 5827] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5825] <... getpid resumed>) = 1 [pid 5824] <... openat resumed>) = 3 [pid 5828] close(3 [pid 5827] write(3, "1024 1048576 500 1024", 21 [pid 5825] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5824] write(3, "1024", 4 [pid 5828] <... close resumed>) = 0 [pid 5824] <... write resumed>) = 4 [pid 5828] getpid( [pid 5824] close(3 [pid 5828] <... getpid resumed>) = 1 [pid 5826] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5828] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5827] <... write resumed>) = 21 [pid 5826] write(3, "1024 1048576 500 1024", 21 [pid 5825] <... capget resumed>{effective=1< [pid 5827] close(3 [pid 5826] <... write resumed>) = 21 [pid 5825] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5824] <... openat resumed>) = 3 [pid 5828] <... capset resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5826] close(3 [pid 5825] <... capset resumed>) = 0 [pid 5827] getpid( [pid 5826] <... close resumed>) = 0 [pid 5825] unshare(CLONE_NEWNET [pid 5828] unshare(CLONE_NEWNET [pid 5827] <... getpid resumed>) = 1 [pid 5824] write(3, "1024", 4 [pid 5827] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5824] <... write resumed>) = 4 [pid 5827] <... capget resumed>{effective=1< [pid 5824] close(3 [pid 5827] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5826] <... getpid resumed>) = 1 [pid 5827] <... capset resumed>) = 0 [pid 5826] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5824] <... close resumed>) = 0 [pid 5827] unshare(CLONE_NEWNET [pid 5826] <... capget resumed>{effective=1< [pid 5826] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5824] <... openat resumed>) = 3 [pid 5824] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5824] close(3) = 0 [pid 5824] getpid() = 1 [pid 5824] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5827] <... unshare resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5828] <... unshare resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5827] <... openat resumed>) = 3 [pid 5827] write(3, "0 65535", 7) = 7 [pid 5827] close(3) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5828] write(3, "0 65535", 7 [pid 5827] <... openat resumed>) = 3 [pid 5827] write(3, "100000", 6) = 6 [pid 5827] close(3) = 0 [pid 5827] mkdir("./syz-tmp", 0777 [pid 5828] <... write resumed>) = 7 [pid 5827] <... mkdir resumed>) = 0 [pid 5828] close(3) = 0 [pid 5827] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5828] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5828] write(3, "100000", 6) = 6 [pid 5827] <... mount resumed>) = 0 [pid 5828] close(3 [pid 5827] mkdir("./syz-tmp/newroot", 0777 [pid 5828] <... close resumed>) = 0 [pid 5828] mkdir("./syz-tmp", 0777 [pid 5827] <... mkdir resumed>) = 0 [pid 5828] <... mkdir resumed>) = 0 [pid 5824] <... unshare resumed>) = 0 [pid 5828] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5827] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5826] <... unshare resumed>) = 0 [pid 5825] <... unshare resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5828] <... mount resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5828] mkdir("./syz-tmp/newroot", 0777 [pid 5826] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5824] <... openat resumed>) = 3 [pid 5827] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5828] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5826] <... openat resumed>) = 3 [pid 5828] <... mkdir resumed>) = 0 [pid 5825] write(3, "0 65535", 7 [pid 5828] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... write resumed>) = 7 [pid 5827] <... mount resumed>) = 0 [pid 5826] write(3, "0 65535", 7 [pid 5824] write(3, "0 65535", 7 [pid 5828] <... mount resumed>) = 0 [pid 5825] close(3 [pid 5826] <... write resumed>) = 7 [pid 5824] <... write resumed>) = 7 [pid 5826] close(3 [pid 5824] close(3 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5828] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5825] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5827] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5826] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5824] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5828] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5828] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5826] write(3, "100000", 6 [pid 5825] write(3, "100000", 6 [pid 5824] write(3, "100000", 6 [pid 5827] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5826] <... write resumed>) = 6 [pid 5824] <... write resumed>) = 6 [pid 5828] <... mount resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5826] close(3 [pid 5825] <... write resumed>) = 6 [pid 5824] close(3 [pid 5826] <... close resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5826] mkdir("./syz-tmp", 0777 [pid 5824] mkdir("./syz-tmp", 0777 [pid 5828] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5827] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5825] close(3 [pid 5828] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] mkdir("./syz-tmp", 0777 [pid 5828] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... mkdir resumed>) = 0 [pid 5826] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5827] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5824] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5828] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5826] <... mount resumed>) = 0 [pid 5828] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5827] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/newroot", 0777 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5827] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot", 0777 [pid 5828] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5827] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5826] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5824] mkdir("./syz-tmp/newroot", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 5828] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... mount resumed>) = 0 [pid 5826] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5824] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5827] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mount resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5826] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5825] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... mount resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5827] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mount resumed>) = 0 [pid 5828] <... mount resumed>) = 0 [pid 5826] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5825] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5827] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5828] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mount resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5827] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5828] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5825] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5824] <... mkdir resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5828] <... mount resumed>) = 0 [pid 5827] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5828] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5827] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5826] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5824] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5828] <... mkdir resumed>) = 0 [pid 5826] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5827] <... mkdir resumed>) = 0 [pid 5828] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5827] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5826] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] <... mkdir resumed>) = 0 [pid 5824] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5825] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5828] <... mkdir resumed>) = 0 [pid 5824] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5827] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5825] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5824] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5828] <... mkdir resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5828] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mount resumed>) = 0 [pid 5827] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5824] <... mkdir resumed>) = 0 [pid 5826] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5827] <... mount resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5824] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mount resumed>) = 0 [pid 5826] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5827] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... mount resumed>) = 0 [pid 5826] <... mount resumed>) = 0 [pid 5825] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mount resumed>) = 0 [pid 5827] mkdir("./syz-tmp/pivot", 0777 [pid 5826] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mount resumed>) = 0 [pid 5828] mkdir("./syz-tmp/pivot", 0777 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5828] <... mkdir resumed>) = 0 [pid 5827] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5826] <... mount resumed>) = 0 [pid 5825] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5827] <... pivot_root resumed>) = 0 [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5825] <... mount resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5828] <... pivot_root resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mount resumed>) = 0 [pid 5827] chdir("/" [pid 5824] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700) = 0 [pid 5826] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5826] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mount resumed>) = 0 [pid 5828] chdir("/" [pid 5827] <... chdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5828] <... chdir resumed>) = 0 [pid 5827] umount2("./pivot", MNT_DETACH [pid 5826] <... mount resumed>) = 0 [pid 5825] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... mkdir resumed>) = 0 [pid 5828] umount2("./pivot", MNT_DETACH [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5826] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] <... umount2 resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 5828] chroot("./newroot" [pid 5827] chroot("./newroot" [pid 5826] <... mount resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5828] <... chroot resumed>) = 0 [pid 5827] <... chroot resumed>) = 0 [pid 5826] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] chdir("/" [pid 5827] chdir("/" [pid 5826] <... mount resumed>) = 0 [pid 5828] <... chdir resumed>) = 0 [pid 5827] <... chdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5827] mkdir("/dev/binderfs", 0777 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 5828] mkdir("/dev/binderfs", 0777 [pid 5826] mkdir("./syz-tmp/pivot", 0777 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5828] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5827] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5826] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 5824] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... mount resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5828] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5824] <... mount resumed>) = 0 [pid 5828] getpid( [pid 5827] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5826] <... pivot_root resumed>) = 0 [pid 5825] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 5824] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5828] <... getpid resumed>) = 1 [pid 5826] chdir("/" [pid 5828] mkdir("/syzcgroup/unified/syz4", 0777 [pid 5827] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... chdir resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5826] umount2("./pivot", MNT_DETACH [pid 5825] <... mkdir resumed>) = 0 [pid 5827] getpid( [pid 5828] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5825] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... getpid resumed>) = 1 [pid 5826] chroot("./newroot" [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 5827] mkdir("/syzcgroup/unified/syz3", 0777 [pid 5826] <... chroot resumed>) = 0 [pid 5825] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5827] <... mkdir resumed>) = 0 [pid 5824] mkdir("./syz-tmp/pivot", 0777 [pid 5826] chdir("/") = 0 [pid 5826] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5824] <... mkdir resumed>) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5826] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5824] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5828] write(3, "32", 2 [pid 5827] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 5826] <... mount resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5828] <... write resumed>) = 2 [pid 5827] <... openat resumed>) = 3 [pid 5826] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5825] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5824] <... pivot_root resumed>) = 0 [pid 5828] close(3 [pid 5825] <... mount resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 5827] write(3, "32", 2 [pid 5826] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] mkdir("./syz-tmp/pivot", 0777 [pid 5828] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5827] <... write resumed>) = 2 [pid 5825] <... mkdir resumed>) = 0 [pid 5826] getpid( [pid 5824] chdir("/" [pid 5828] <... openat resumed>) = 3 [pid 5827] close(3 [pid 5826] <... getpid resumed>) = 1 [pid 5825] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5824] <... chdir resumed>) = 0 [pid 5826] mkdir("/syzcgroup/unified/syz2", 0777 [pid 5824] umount2("./pivot", MNT_DETACH [pid 5827] <... close resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... pivot_root resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5828] write(3, "1", 1 [pid 5827] <... openat resumed>) = 3 [pid 5827] write(3, "1", 1 [pid 5825] chdir("/" [pid 5824] <... umount2 resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 5824] chroot("./newroot" [pid 5825] <... chdir resumed>) = 0 [pid 5826] write(3, "32", 2 [pid 5825] umount2("./pivot", MNT_DETACH [pid 5824] <... chroot resumed>) = 0 [pid 5828] <... write resumed>) = 1 [pid 5827] <... write resumed>) = 1 [pid 5826] <... write resumed>) = 2 [pid 5828] close(3 [pid 5826] close(3 [pid 5824] chdir("/" [pid 5828] <... close resumed>) = 0 [pid 5827] close(3 [pid 5826] <... close resumed>) = 0 [pid 5824] <... chdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] mkdir("/dev/binderfs", 0777 [pid 5828] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 5827] <... close resumed>) = 0 [pid 5825] chroot("./newroot" [pid 5826] write(3, "1", 1 [pid 5824] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5828] <... mkdir resumed>) = 0 [pid 5824] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5828] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5827] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 5826] <... write resumed>) = 1 [pid 5825] <... chroot resumed>) = 0 [pid 5824] <... mount resumed>) = 0 [pid 5824] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5824] getpid( [pid 5828] <... openat resumed>) = 3 [pid 5827] <... mkdir resumed>) = 0 [pid 5826] close(3 [pid 5825] chdir("/" [pid 5827] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5825] <... chdir resumed>) = 0 [pid 5828] write(3, "1", 1 [pid 5824] <... getpid resumed>) = 1 [pid 5827] <... openat resumed>) = 3 [pid 5826] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 5825] mkdir("/dev/binderfs", 0777 [pid 5828] <... write resumed>) = 1 [pid 5827] write(3, "1", 1 [pid 5824] mkdir("/syzcgroup/unified/syz1", 0777 [pid 5828] close(3 [pid 5825] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5828] <... close resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5828] <... openat resumed>) = 3 [pid 5827] <... write resumed>) = 1 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] write(3, "313524224", 9 [pid 5827] close(3 [pid 5825] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5826] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5824] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC [pid 5826] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 3 [pid 5826] write(3, "1", 1) = 1 [pid 5826] close(3) = 0 [pid 5826] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5824] write(3, "32", 2 [pid 5826] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5825] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5824] <... write resumed>) = 2 [pid 5828] <... write resumed>) = 9 [pid 5824] close(3 [pid 5828] close(3) = 0 [pid 5827] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5826] write(3, "313524224", 9 [pid 5825] getpid( [pid 5824] <... close resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5826] <... write resumed>) = 9 [pid 5825] <... getpid resumed>) = 1 [pid 5828] <... openat resumed>) = 3 [pid 5824] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5827] <... openat resumed>) = 3 [pid 5825] mkdir("/syzcgroup/unified/syz0", 0777 [pid 5828] write(3, "314572800", 9 [pid 5827] write(3, "313524224", 9 [pid 5826] close(3 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5827] <... write resumed>) = 9 [pid 5828] <... write resumed>) = 9 [pid 5827] close(3 [pid 5826] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 5824] write(3, "1", 1 [pid 5828] close(3 [pid 5827] <... close resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5828] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5826] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... write resumed>) = 1 [pid 5828] mkdir("/syzcgroup/net/syz4", 0777 [pid 5827] <... openat resumed>) = 3 [pid 5826] write(3, "314572800", 9 [pid 5824] close(3 [pid 5825] write(3, "32", 2 [pid 5826] <... write resumed>) = 9 [pid 5827] write(3, "314572800", 9 [pid 5825] <... write resumed>) = 2 [pid 5827] <... write resumed>) = 9 [pid 5825] close(3 [pid 5827] close(3 [pid 5825] <... close resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5827] mkdir("/syzcgroup/net/syz3", 0777 [pid 5828] <... mkdir resumed>) = 0 [pid 5826] close(3 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... close resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] <... close resumed>) = 0 [pid 5824] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 5827] <... mkdir resumed>) = 0 [pid 5825] write(3, "1", 1 [pid 5826] mkdir("/syzcgroup/net/syz2", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5827] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5828] write(3, "1", 1 [pid 5824] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5825] <... write resumed>) = 1 [pid 5825] close(3 [pid 5828] <... write resumed>) = 1 [pid 5827] <... openat resumed>) = 3 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5828] close(3 [pid 5827] write(3, "1", 1 [pid 5826] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5825] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 5824] write(3, "1", 1 [pid 5828] <... close resumed>) = 0 [pid 5828] mkdir("./0", 0777 [pid 5827] <... write resumed>) = 1 [pid 5824] <... write resumed>) = 1 [pid 5826] <... openat resumed>) = 3 [pid 5824] close(3 [pid 5827] close(3 [pid 5824] <... close resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5828] <... mkdir resumed>) = 0 [pid 5826] write(3, "1", 1 [pid 5824] write(3, "313524224", 9 [ 69.257584][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5827] <... close resumed>) = 0 [pid 5826] <... write resumed>) = 1 [pid 5825] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5824] <... write resumed>) = 9 [pid 5828] <... openat resumed>) = 3 [pid 5827] mkdir("./0", 0777 [pid 5826] close(3 [pid 5824] close(3) = 0 [pid 5827] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5826] mkdir("./0", 0777 [pid 5824] write(3, "314572800", 9) = 9 [pid 5824] close(3 [pid 5826] <... mkdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5828] ioctl(3, LOOP_CLR_FD [pid 5827] <... openat resumed>) = 3 [pid 5824] mkdir("/syzcgroup/net/syz1", 0777 [pid 5828] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5825] <... openat resumed>) = 3 [pid 5828] close(3 [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5826] <... openat resumed>) = 3 [pid 5828] <... close resumed>) = 0 [pid 5827] close(3 [pid 5825] write(3, "1", 1 [pid 5824] <... mkdir resumed>) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... close resumed>) = 0 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5825] <... write resumed>) = 1 ./strace-static-x86_64: Process 5850 attached [pid 5824] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] close(3 [pid 5850] set_robust_list(0x555556f266a0, 24) = 0 [pid 5826] close(3 [pid 5825] <... close resumed>) = 0 [pid 5824] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5851 attached [pid 5826] <... close resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5850] chdir("./0" [pid 5851] set_robust_list(0x555556f266a0, 24 [pid 5824] write(3, "1", 1 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] <... chdir resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... write resumed>) = 1 ./strace-static-x86_64: Process 5852 attached [pid 5824] close(3 [pid 5852] set_robust_list(0x555556f266a0, 24 [pid 5825] write(3, "313524224", 9 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] <... close resumed>) = 0 [pid 5825] <... write resumed>) = 9 [pid 5825] close(3 [pid 5851] chdir("./0" [pid 5825] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5852] chdir("./0" [pid 5850] <... prctl resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] mkdir("./0", 0777 [pid 5851] <... chdir resumed>) = 0 [pid 5850] setpgid(0, 0 [pid 5828] <... clone resumed>, child_tidptr=0x555556f26690) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... setpgid resumed>) = 0 [pid 5852] <... chdir resumed>) = 0 [pid 5851] <... prctl resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... clone resumed>, child_tidptr=0x555556f26690) = 3 [pid 5850] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5851] setpgid(0, 0 [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 3 [pid 5851] <... setpgid resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5850] <... symlink resumed>) = 0 [pid 5825] write(3, "314572800", 9) = 9 [pid 5851] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5825] close(3 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5851] <... symlink resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] mkdir("/syzcgroup/net/syz0", 0777 [pid 5850] <... symlink resumed>) = 0 [pid 5852] <... prctl resumed>) = 0 [pid 5851] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5850] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5824] close(3 [pid 5852] setpgid(0, 0) = 0 [pid 5851] <... symlink resumed>) = 0 [pid 5850] <... symlink resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5852] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5851] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... symlink resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5824] <... clone resumed>, child_tidptr=0x555556f26690) = 3 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] write(3, "1", 1 [pid 5850] write(3, "1000", 4 [pid 5825] <... write resumed>) = 1 [pid 5825] close(3 [pid 5851] <... openat resumed>) = 3 [pid 5850] <... write resumed>) = 4 [pid 5851] write(3, "1000", 4 [pid 5850] close(3 [pid 5851] <... write resumed>) = 4 [pid 5850] <... close resumed>) = 0 [pid 5851] close(3 [pid 5850] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 executing program executing program ./strace-static-x86_64: Process 5853 attached [pid 5852] <... symlink resumed>) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... symlink resumed>) = 0 [pid 5825] mkdir("./0", 0777) = 0 [pid 5850] write(1, "executing program\n", 18 [pid 5853] set_robust_list(0x555556f266a0, 24 [pid 5851] <... symlink resumed>) = 0 [pid 5850] <... write resumed>) = 18 [pid 5851] write(1, "executing program\n", 18 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] memfd_create("syzkaller", 0 [pid 5851] <... write resumed>) = 18 [pid 5825] <... openat resumed>) = 3 [pid 5852] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5850] <... memfd_create resumed>) = 3 [pid 5851] memfd_create("syzkaller", 0 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5852] <... symlink resumed>) = 0 [pid 5853] chdir("./0" [pid 5851] <... memfd_create resumed>) = 3 [pid 5850] <... mmap resumed>) = 0x7f980f800000 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5853] <... chdir resumed>) = 0 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5853] setpgid(0, 0 [pid 5825] close(3 [pid 5853] <... setpgid resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5853] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] <... symlink resumed>) = 0 [pid 5853] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5851] <... mmap resumed>) = 0x7f980f800000 [pid 5853] <... symlink resumed>) = 0 [pid 5853] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 ./strace-static-x86_64: Process 5854 attached [pid 5854] set_robust_list(0x555556f266a0, 24) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 3 [pid 5854] chdir("./0") = 0 [pid 5853] <... openat resumed>) = 3 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5853] write(3, "1000", 4 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5854] setpgid(0, 0 [pid 5853] <... write resumed>) = 4 [pid 5852] <... openat resumed>) = 3 [pid 5854] <... setpgid resumed>) = 0 [pid 5853] close(3 [pid 5852] write(3, "1000", 4 [pid 5854] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5853] <... close resumed>) = 0 [pid 5852] <... write resumed>) = 4 [pid 5854] <... symlink resumed>) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs" [pid 5852] close(3 [pid 5853] <... symlink resumed>) = 0 [pid 5852] <... close resumed>) = 0 executing program [pid 5854] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5853] write(1, "executing program\n", 18 [pid 5852] symlink("/dev/binderfs", "./binderfs" [pid 5854] <... symlink resumed>) = 0 [pid 5853] <... write resumed>) = 18 [pid 5852] <... symlink resumed>) = 0 executing program [pid 5854] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5853] memfd_create("syzkaller", 0 [pid 5852] write(1, "executing program\n", 18 [pid 5854] <... symlink resumed>) = 0 [pid 5853] <... memfd_create resumed>) = 3 [pid 5852] <... write resumed>) = 18 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] memfd_create("syzkaller", 0 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... mmap resumed>) = 0x7f980f800000 [pid 5852] <... memfd_create resumed>) = 3 [pid 5854] write(3, "1000", 4 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5854] <... write resumed>) = 4 [pid 5852] <... mmap resumed>) = 0x7f980f800000 [pid 5854] close(3) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5854] write(1, "executing program\n", 18) = 18 [pid 5854] memfd_create("syzkaller", 0) = 3 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5853] <... write resumed>) = 16777216 [pid 5853] munmap(0x7f980f800000, 138412032) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5854] <... write resumed>) = 16777216 [pid 5850] <... write resumed>) = 16777216 [pid 5854] munmap(0x7f980f800000, 138412032 [pid 5853] close(3 [pid 5851] <... write resumed>) = 16777216 [pid 5853] <... close resumed>) = 0 [pid 5850] munmap(0x7f980f800000, 138412032 [pid 5853] close(4 [pid 5851] munmap(0x7f980f800000, 138412032 [pid 5854] <... munmap resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5853] mkdir("./file1", 0777) = 0 [ 70.009847][ T5853] loop1: detected capacity change from 0 to 32768 [pid 5853] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5851] <... munmap resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... write resumed>) = 16777216 [pid 5850] <... munmap resumed>) = 0 [pid 5854] <... openat resumed>) = 4 [pid 5852] munmap(0x7f980f800000, 138412032 [pid 5851] <... openat resumed>) = 4 [pid 5850] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5851] ioctl(4, LOOP_SET_FD, 3 [pid 5854] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... openat resumed>) = 4 [pid 5850] ioctl(4, LOOP_SET_FD, 3) = 0 [ 70.061634][ T5853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (5853) [ 70.090328][ T5851] loop3: detected capacity change from 0 to 32768 [ 70.090399][ T5854] loop0: detected capacity change from 0 to 32768 [ 70.105504][ T5850] loop4: detected capacity change from 0 to 32768 [pid 5854] <... ioctl resumed>) = 0 [pid 5852] <... munmap resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 5854] close(3) = 0 [pid 5854] close(4) = 0 [pid 5854] mkdir("./file1", 0777) = 0 [pid 5854] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] close(3 [pid 5850] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5851] <... close resumed>) = 0 [pid 5850] close(4 [pid 5852] ioctl(4, LOOP_SET_FD, 3 [pid 5851] close(4) = 0 [pid 5851] mkdir("./file1", 0777) = 0 [pid 5850] <... close resumed>) = 0 [ 70.120233][ T5853] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.130741][ T5854] BTRFS: device /dev/loop0 (7:0) using temp-fsid f045c219-6686-42bb-9145-38b031fba180 [ 70.140914][ T5853] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 70.150659][ T5853] BTRFS info (device loop1): using free-space-tree [ 70.163551][ T5852] loop2: detected capacity change from 0 to 32768 [pid 5852] <... ioctl resumed>) = 0 [pid 5851] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5850] mkdir("./file1", 0777 [pid 5852] close(3) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5852] close(4 [pid 5850] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5852] <... close resumed>) = 0 [pid 5852] mkdir("./file1", 0777) = 0 [ 70.171935][ T5854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (5854) [ 70.231694][ T5851] BTRFS: device /dev/loop3 (7:3) using temp-fsid c8515807-ac83-47d4-bf97-ad397643bda7 [ 70.232541][ T5854] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.253189][ T5851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (5851) [ 70.266622][ T5854] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 70.276897][ T5850] BTRFS: device /dev/loop4 (7:4) using temp-fsid ec802f89-9bc7-4e52-b169-1e5a7ecea77d [ 70.288006][ T5851] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.298237][ T5851] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 70.305969][ T5854] BTRFS info (device loop0): using free-space-tree [ 70.308048][ T5851] BTRFS info (device loop3): using free-space-tree [ 70.322940][ T5850] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (5850) [ 70.364069][ T5852] BTRFS: device /dev/loop2 (7:2) using temp-fsid fce1617d-b59b-4f64-b2dc-3c4b734af129 [ 70.378234][ T5850] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.388867][ T5850] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 70.399204][ T5850] BTRFS info (device loop4): using free-space-tree [ 70.406376][ T5852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (5852) [ 70.583721][ T5852] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.598507][ T5852] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 70.610646][ T5852] BTRFS info (device loop2): using free-space-tree [pid 5852] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5853] <... mount resumed>) = 0 [pid 5853] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file1") = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_CLR_FD) = 0 [pid 5853] close(4 [pid 5851] <... mount resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5851] chdir("./file1") = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5851] ioctl(4, LOOP_CLR_FD) = 0 [pid 5851] close(4) = 0 [ 70.753043][ T5834] Bluetooth: hci0: command tx timeout [pid 5851] truncate("./file1", 24066 [pid 5853] <... close resumed>) = 0 [pid 5853] truncate("./file1", 24066) = 0 [pid 5853] close(3) = 0 [pid 5853] close(4) = -1 EBADF (Bad file descriptor) [pid 5853] close(5) = -1 EBADF (Bad file descriptor) [pid 5853] close(6) = -1 EBADF (Bad file descriptor) [pid 5853] close(7) = -1 EBADF (Bad file descriptor) [pid 5853] close(8) = -1 EBADF (Bad file descriptor) [pid 5853] close(9 [pid 5851] <... truncate resumed>) = 0 [pid 5851] close(3) = 0 [pid 5851] close(4) = -1 EBADF (Bad file descriptor) [pid 5851] close(5) = -1 EBADF (Bad file descriptor) [pid 5851] close(6) = -1 EBADF (Bad file descriptor) [pid 5851] close(7) = -1 EBADF (Bad file descriptor) [pid 5851] close(8) = -1 EBADF (Bad file descriptor) [pid 5851] close(9) = -1 EBADF (Bad file descriptor) [pid 5851] close(10) = -1 EBADF (Bad file descriptor) [pid 5851] close(11) = -1 EBADF (Bad file descriptor) [pid 5851] close(12) = -1 EBADF (Bad file descriptor) [pid 5851] close(13) = -1 EBADF (Bad file descriptor) [pid 5851] close(14) = -1 EBADF (Bad file descriptor) [pid 5851] close(15) = -1 EBADF (Bad file descriptor) [pid 5851] close(16) = -1 EBADF (Bad file descriptor) [pid 5851] close(17) = -1 EBADF (Bad file descriptor) [pid 5851] close(18) = -1 EBADF (Bad file descriptor) [pid 5851] close(19) = -1 EBADF (Bad file descriptor) [pid 5851] close(20) = -1 EBADF (Bad file descriptor) [pid 5851] close(21) = -1 EBADF (Bad file descriptor) [pid 5851] close(22) = -1 EBADF (Bad file descriptor) [pid 5851] close(23) = -1 EBADF (Bad file descriptor) [pid 5851] close(24) = -1 EBADF (Bad file descriptor) [pid 5851] close(25) = -1 EBADF (Bad file descriptor) [pid 5851] close(26) = -1 EBADF (Bad file descriptor) [pid 5851] close(27) = -1 EBADF (Bad file descriptor) [pid 5851] close(28) = -1 EBADF (Bad file descriptor) [pid 5851] close(29) = -1 EBADF (Bad file descriptor) [pid 5851] exit_group(0) = ? [pid 5851] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...> [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] close(10 [pid 5827] <... restart_syscall resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... mount resumed>) = 0 [pid 5853] close(11 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5854] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5853] close(12 [pid 5827] <... openat resumed>) = 3 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 70.832548][ T5834] Bluetooth: hci3: command tx timeout [ 70.838217][ T5831] Bluetooth: hci4: command tx timeout [ 70.844126][ T5843] Bluetooth: hci1: command tx timeout [ 70.844139][ T5133] Bluetooth: hci2: command tx timeout [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5854] chdir("./file1" [pid 5853] close(13 [pid 5854] <... chdir resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] getdents64(3, [pid 5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5853] close(14 [pid 5827] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5854] <... openat resumed>) = 4 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] ioctl(4, LOOP_CLR_FD [pid 5853] close(15 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] <... ioctl resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5854] close(4 [pid 5853] close(16 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] unlink("./0/cgroup" [pid 5854] truncate("./file1", 24066 [pid 5853] close(17 [pid 5854] <... truncate resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5854] close(3 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... close resumed>) = 0 [pid 5850] <... mount resumed>) = 0 [pid 5854] close(4 [pid 5853] close(18 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5854] close(5 [pid 5853] close(19 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5827] unlink("./0/cgroup.cpu" [pid 5854] close(6 [pid 5853] close(20 [pid 5850] <... openat resumed>) = 3 [pid 5827] <... unlink resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] chdir("./file1" [pid 5827] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] close(7 [pid 5853] close(21 [pid 5850] <... chdir resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5827] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5854] close(8 [pid 5853] close(22 [pid 5850] <... openat resumed>) = 4 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] ioctl(4, LOOP_CLR_FD [pid 5827] unlink("./0/cgroup.net" [pid 5854] close(9 [pid 5853] close(23 [pid 5850] <... ioctl resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... unlink resumed>) = 0 [pid 5854] close(10 [pid 5853] close(24 [pid 5850] close(4 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... close resumed>) = 0 [pid 5827] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] close(11 [pid 5853] close(25 [pid 5850] truncate("./file1", 24066 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... truncate resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] close(12 [pid 5853] close(26 [pid 5850] close(3 [pid 5827] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... close resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] close(13 [pid 5853] close(27 [pid 5850] close(4 [pid 5827] unlink("./0/binderfs" [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... mount resumed>) = 0 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... unlink resumed>) = 0 [pid 5854] close(14 [pid 5853] close(28 [pid 5852] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5850] close(5 [pid 5827] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... openat resumed>) = 3 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(15 [pid 5853] close(29 [pid 5852] chdir("./file1" [pid 5850] close(6 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... chdir resumed>) = 0 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(16 [pid 5853] exit_group(0 [pid 5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] close(7 [pid 5853] <... exit_group resumed>) = ? [pid 5852] <... openat resumed>) = 4 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] +++ exited with 0 +++ [pid 5852] ioctl(4, LOOP_CLR_FD [pid 5850] close(8 [pid 5852] <... ioctl resumed>) = 0 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(4 [pid 5850] close(9 [pid 5854] close(17 [pid 5852] <... close resumed>) = 0 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] truncate("./file1", 24066 [pid 5850] close(10 [pid 5854] close(18 [pid 5852] <... truncate resumed>) = 0 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(11 [pid 5854] close(19 [pid 5852] close(3 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = 0 [pid 5850] close(12 [pid 5854] close(20 [pid 5852] close(4 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(13 [pid 5854] close(21 [pid 5852] close(5 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(14 [pid 5854] close(22 [pid 5852] close(6 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(23 [pid 5850] close(15 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(7 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(24 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(16 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(8 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(25 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(17 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=33 /* 0.33 s */} --- [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(9 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(26 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(18 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(27 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(19 [pid 5854] close(28 [pid 5852] close(10 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(20 [pid 5824] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(11 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] close(29 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(21 [pid 5824] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] close(12 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(22 [pid 5852] close(13 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(23 [pid 5824] newfstatat(3, "", [pid 5854] exit_group(0 [pid 5852] close(14 [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... exit_group resumed>) = ? [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(24) = -1 EBADF (Bad file descriptor) [pid 5850] close(25) = -1 EBADF (Bad file descriptor) [pid 5850] close(26) = -1 EBADF (Bad file descriptor) [pid 5850] close(27 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(15 [pid 5850] close(28 [pid 5854] +++ exited with 0 +++ [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(29) = -1 EBADF (Bad file descriptor) [pid 5850] exit_group(0 [pid 5852] close(16 [pid 5850] <... exit_group resumed>) = ? [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] +++ exited with 0 +++ [pid 5824] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] close(17) = -1 EBADF (Bad file descriptor) [pid 5852] close(18 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] unlink("./0/cgroup" [pid 5852] close(19 [pid 5825] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(20 [pid 5825] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 5824] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5825] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(21 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] close(22 [pid 5825] unlink("./0/cgroup" [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... unlink resumed>) = 0 [pid 5852] close(23 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] unlink("./0/cgroup.cpu" [pid 5828] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(24 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5824] <... unlink resumed>) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5824] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] newfstatat(3, "", [pid 5852] close(25 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./0/cgroup.cpu" [pid 5824] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5828] getdents64(3, [pid 5852] close(26 [pid 5828] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./0/cgroup.net" [pid 5852] close(27 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5852] close(28 [pid 5828] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] unlink("./0/cgroup.net" [pid 5852] close(29 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] unlink("./0/cgroup") = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] exit_group(0 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./0/binderfs" [pid 5852] <... exit_group resumed>) = ? [pid 5825] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... unlink resumed>) = 0 [pid 5828] unlink("./0/cgroup.cpu" [pid 5824] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] +++ exited with 0 +++ [pid 5828] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5825] unlink("./0/binderfs" [pid 5828] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5825] <... unlink resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5828] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5826] <... openat resumed>) = 3 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] newfstatat(3, "", [pid 5828] unlink("./0/cgroup.net" [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [ 71.083960][ T5827] BTRFS info (device loop3): last unmount of filesystem c8515807-ac83-47d4-bf97-ad397643bda7 [pid 5826] getdents64(3, [pid 5828] <... unlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5826] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./0/binderfs" [pid 5826] unlink("./0/cgroup" [pid 5828] <... unlink resumed>) = 0 [pid 5828] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... unlink resumed>) = 0 [pid 5826] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./0/cgroup.cpu") = 0 [pid 5826] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./0/cgroup.net") = 0 [pid 5826] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 71.162950][ T5825] BTRFS info (device loop0): last unmount of filesystem f045c219-6686-42bb-9145-38b031fba180 [ 71.182976][ T5824] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 5826] unlink("./0/binderfs") = 0 [ 71.224426][ T5828] BTRFS info (device loop4): last unmount of filesystem ec802f89-9bc7-4e52-b169-1e5a7ecea77d [ 71.317524][ T5826] BTRFS info (device loop2): last unmount of filesystem fce1617d-b59b-4f64-b2dc-3c4b734af129 [pid 5826] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5826] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./0/file1") = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./0") = 0 [pid 5826] mkdir("./1", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x555556f266a0, 24 [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 4 [pid 5943] <... set_robust_list resumed>) = 0 [pid 5943] chdir("./1") = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5943] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 5943] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] write(3, "1000", 4) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] write(1, "executing program\n", 18executing program ) = 18 [pid 5943] memfd_create("syzkaller", 0) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./0/file1") = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 5825] getdents64(3, [pid 5824] <... umount2 resumed>) = 0 [pid 5825] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] close(3 [pid 5824] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] rmdir("./0" [pid 5824] newfstatat(AT_FDCWD, "./0/file1", [pid 5825] <... rmdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] mkdir("./1", 0777 [pid 5824] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... mkdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... openat resumed>) = 3 [pid 5824] <... openat resumed>) = 4 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] newfstatat(4, "", [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] close(3 [pid 5824] getdents64(4, [pid 5825] <... close resumed>) = 0 [pid 5824] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] getdents64(4, ./strace-static-x86_64: Process 5944 attached 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5944] set_robust_list(0x555556f266a0, 24 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 4 [pid 5824] close(4 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5828] <... umount2 resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 5944] chdir("./1" [pid 5828] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] rmdir("./0/file1" [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5944] <... chdir resumed>) = 0 [pid 5828] newfstatat(AT_FDCWD, "./0/file1", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... rmdir resumed>) = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] newfstatat(AT_FDCWD, "./0/file1", [pid 5824] getdents64(3, [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] close(3 [pid 5944] <... prctl resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... close resumed>) = 0 [pid 5944] setpgid(0, 0 [pid 5827] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] rmdir("./0") = 0 [pid 5824] mkdir("./1", 0777 [pid 5827] <... openat resumed>) = 4 [pid 5824] <... mkdir resumed>) = 0 [pid 5827] newfstatat(4, "", [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5944] <... setpgid resumed>) = 0 [pid 5827] getdents64(4, [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5944] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5828] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] getdents64(4, [pid 5824] close(3 [pid 5827] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5824] <... close resumed>) = 0 [pid 5827] close(4 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached [pid 5827] <... close resumed>) = 0 [pid 5945] set_robust_list(0x555556f266a0, 24 [pid 5827] rmdir("./0/file1" [pid 5824] <... clone resumed>, child_tidptr=0x555556f26690) = 4 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5827] <... rmdir resumed>) = 0 [pid 5945] chdir("./1" [pid 5944] <... symlink resumed>) = 0 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./0") = 0 [pid 5827] mkdir("./1", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5945] <... chdir resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5828] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5944] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5828] <... openat resumed>) = 4 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5945] <... prctl resumed>) = 0 [pid 5944] <... symlink resumed>) = 0 [pid 5828] newfstatat(4, "", [pid 5827] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5945] setpgid(0, 0 [pid 5944] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5827] close(3 [pid 5945] <... setpgid resumed>) = 0 [pid 5944] <... symlink resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5945] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached [pid 5945] <... symlink resumed>) = 0 [pid 5944] <... openat resumed>) = 3 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5946] set_robust_list(0x555556f266a0, 24 [pid 5945] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5944] write(3, "1000", 4 [pid 5828] getdents64(4, [pid 5827] <... clone resumed>, child_tidptr=0x555556f26690) = 4 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5945] <... symlink resumed>) = 0 [pid 5944] <... write resumed>) = 4 [pid 5946] chdir("./1" [pid 5945] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5944] close(3 [pid 5946] <... chdir resumed>) = 0 [pid 5945] <... symlink resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5944] symlink("/dev/binderfs", "./binderfs" [pid 5946] <... prctl resumed>) = 0 [pid 5945] <... openat resumed>) = 3 [pid 5944] <... symlink resumed>) = 0 [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 executing program [pid 5946] setpgid(0, 0 [pid 5945] write(3, "1000", 4 [pid 5944] write(1, "executing program\n", 18 [pid 5946] <... setpgid resumed>) = 0 [pid 5945] <... write resumed>) = 4 [pid 5944] <... write resumed>) = 18 [pid 5828] getdents64(4, [pid 5946] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5945] close(3 [pid 5944] memfd_create("syzkaller", 0 [pid 5946] <... symlink resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5944] <... memfd_create resumed>) = 3 [pid 5946] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5945] symlink("/dev/binderfs", "./binderfs" [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5946] <... symlink resumed>) = 0 [pid 5945] <... symlink resumed>) = 0 [pid 5944] <... mmap resumed>) = 0x7f980f800000 executing program [pid 5946] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5945] write(1, "executing program\n", 18 [pid 5943] <... write resumed>) = 16777216 [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5943] munmap(0x7f980f800000, 138412032 [pid 5828] close(4 [pid 5945] <... write resumed>) = 18 [pid 5828] <... close resumed>) = 0 [pid 5828] rmdir("./0/file1" [pid 5946] <... symlink resumed>) = 0 [pid 5828] <... rmdir resumed>) = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5828] close(3) = 0 [pid 5828] rmdir("./0") = 0 [pid 5828] mkdir("./1", 0777) = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5945] memfd_create("syzkaller", 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5828] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5828] close(3) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5945] <... memfd_create resumed>) = 3 [pid 5828] <... clone resumed>, child_tidptr=0x555556f26690) = 4 [pid 5946] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5947 attached [pid 5946] write(3, "1000", 4 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] set_robust_list(0x555556f266a0, 24 [pid 5946] <... write resumed>) = 4 [pid 5945] <... mmap resumed>) = 0x7f980f800000 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5943] <... munmap resumed>) = 0 [pid 5947] <... set_robust_list resumed>) = 0 [pid 5946] close(3 [pid 5943] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5946] <... close resumed>) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs" [pid 5943] <... openat resumed>) = 4 [pid 5947] chdir("./1" executing program [pid 5946] <... symlink resumed>) = 0 [pid 5946] write(1, "executing program\n", 18 [pid 5947] <... chdir resumed>) = 0 [pid 5946] <... write resumed>) = 18 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5946] memfd_create("syzkaller", 0) = 3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] <... prctl resumed>) = 0 [pid 5946] <... mmap resumed>) = 0x7f980f800000 [pid 5943] <... ioctl resumed>) = 0 [pid 5943] close(3) = 0 [pid 5943] close(4) = 0 [pid 5943] mkdir("./file1", 0777) = 0 [pid 5943] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5947] setpgid(0, 0) = 0 [pid 5947] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5947] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5947] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 executing program [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4) = 4 [pid 5947] close(3) = 0 [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5947] write(1, "executing program\n", 18) = 18 [pid 5947] memfd_create("syzkaller", 0) = 3 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 72.166476][ T5943] loop2: detected capacity change from 0 to 32768 [ 72.194438][ T5943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (5943) [ 72.277666][ T5943] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.308405][ T5943] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 72.322418][ T5943] BTRFS info (device loop2): using free-space-tree [pid 5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5947] munmap(0x7f980f800000, 138412032 [pid 5943] <... mount resumed>) = 0 [pid 5943] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5943] chdir("./file1") = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5943] ioctl(4, LOOP_CLR_FD) = 0 [pid 5943] close(4) = 0 [pid 5943] truncate("./file1", 24066 [pid 5947] <... munmap resumed>) = 0 [pid 5946] <... write resumed>) = 16777216 [pid 5944] <... write resumed>) = 16777216 [pid 5943] <... truncate resumed>) = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5946] munmap(0x7f980f800000, 138412032 [pid 5944] munmap(0x7f980f800000, 138412032 [pid 5943] close(3 [pid 5947] <... openat resumed>) = 4 [pid 5943] <... close resumed>) = 0 [pid 5947] ioctl(4, LOOP_SET_FD, 3 [pid 5943] close(4 [pid 5947] <... ioctl resumed>) = 0 [pid 5947] close(3 [pid 5946] <... munmap resumed>) = 0 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5947] <... close resumed>) = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5943] close(5 [pid 5947] close(4 [pid 5946] <... openat resumed>) = 4 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5947] <... close resumed>) = 0 [pid 5946] ioctl(4, LOOP_SET_FD, 3 [pid 5943] close(6 [pid 5947] mkdir("./file1", 0777 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5947] <... mkdir resumed>) = 0 [pid 5943] close(7 [pid 5947] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5944] <... munmap resumed>) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 72.792307][ T5947] loop4: detected capacity change from 0 to 32768 [ 72.831385][ T5947] BTRFS: device /dev/loop4 (7:4) using temp-fsid bd2acaed-c7e0-48d4-a64a-0dbee750bf2e [pid 5943] close(8 [pid 5944] <... openat resumed>) = 4 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5944] ioctl(4, LOOP_SET_FD, 3 [ 72.842581][ T5843] Bluetooth: hci0: command tx timeout [ 72.842647][ T5947] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (5947) [ 72.867534][ T5946] loop3: detected capacity change from 0 to 32768 [ 72.880101][ T5947] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 5943] close(9 [pid 5946] <... ioctl resumed>) = 0 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] close(3 [pid 5943] close(10 [pid 5946] <... close resumed>) = 0 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] close(4 [pid 5943] close(11 [pid 5946] <... close resumed>) = 0 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] mkdir("./file1", 0777 [ 72.892592][ T5947] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 72.901330][ T5947] BTRFS info (device loop4): using free-space-tree [ 72.912717][ T5834] Bluetooth: hci2: command tx timeout [ 72.918298][ T5834] Bluetooth: hci3: command tx timeout [ 72.925271][ T5831] Bluetooth: hci4: command tx timeout [ 72.930860][ T5843] Bluetooth: hci1: command tx timeout [pid 5943] close(12 [pid 5946] <... mkdir resumed>) = 0 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5943] close(13) = -1 EBADF (Bad file descriptor) [pid 5943] close(14) = -1 EBADF (Bad file descriptor) [pid 5945] <... write resumed>) = 16777216 [ 72.947414][ T5946] BTRFS: device /dev/loop3 (7:3) using temp-fsid 7016f386-fca4-4edc-9407-5b36dbd72eb6 [ 72.958509][ T5946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (5946) [pid 5943] close(15 [pid 5945] munmap(0x7f980f800000, 138412032 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 72.994037][ T5944] loop0: detected capacity change from 0 to 32768 [ 73.025412][ T5946] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 5944] <... ioctl resumed>) = 0 [pid 5944] close(3) = 0 [pid 5944] close(4 [pid 5943] close(16 [pid 5945] <... munmap resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5944] mkdir("./file1", 0777 [pid 5945] <... openat resumed>) = 4 [pid 5944] <... mkdir resumed>) = 0 [pid 5943] close(17 [pid 5944] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5943] close(18) = -1 EBADF (Bad file descriptor) [pid 5945] ioctl(4, LOOP_SET_FD, 3 [ 73.035931][ T5946] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 73.045473][ T5946] BTRFS info (device loop3): using free-space-tree [ 73.067197][ T5944] BTRFS: device /dev/loop0 (7:0) using temp-fsid c77e01e1-b9d4-4637-8ee4-cdfbca521614 [ 73.083143][ T5945] loop1: detected capacity change from 0 to 32768 [pid 5943] close(19) = -1 EBADF (Bad file descriptor) [pid 5943] close(20) = -1 EBADF (Bad file descriptor) [pid 5943] close(21) = -1 EBADF (Bad file descriptor) [pid 5945] <... ioctl resumed>) = 0 [pid 5943] close(22) = -1 EBADF (Bad file descriptor) [pid 5943] close(23) = -1 EBADF (Bad file descriptor) [pid 5943] close(24) = -1 EBADF (Bad file descriptor) [pid 5943] close(25) = -1 EBADF (Bad file descriptor) [pid 5943] close(26) = -1 EBADF (Bad file descriptor) [pid 5943] close(27 [pid 5945] close(3 [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5943] close(28) = -1 EBADF (Bad file descriptor) [pid 5945] <... close resumed>) = 0 [pid 5947] <... mount resumed>) = 0 [pid 5945] close(4 [pid 5943] close(29 [pid 5947] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5943] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 73.088058][ T5944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (5944) [pid 5947] <... openat resumed>) = 3 [pid 5943] exit_group(0 [pid 5945] <... close resumed>) = 0 [pid 5945] mkdir("./file1", 0777) = 0 [pid 5945] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5943] <... exit_group resumed>) = ? [pid 5947] chdir("./file1" [pid 5943] +++ exited with 0 +++ [pid 5947] <... chdir resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5947] <... openat resumed>) = 4 [pid 5947] ioctl(4, LOOP_CLR_FD) = 0 [pid 5947] close(4) = 0 [pid 5947] truncate("./file1", 24066) = 0 [pid 5947] close(3 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5947] <... close resumed>) = 0 [pid 5947] close(4) = -1 EBADF (Bad file descriptor) [ 73.135269][ T5944] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.145704][ T5945] BTRFS: device /dev/loop1 (7:1) using temp-fsid 57c9cef6-9a69-4569-a293-89174558db4c [ 73.170731][ T5945] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (5945) [pid 5826] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] close(5 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5947] close(6 [pid 5826] <... openat resumed>) = 3 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(3, "", [pid 5947] close(7 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] getdents64(3, [pid 5947] close(8 [pid 5826] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] close(9 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5947] close(10 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./1/cgroup" [pid 5947] close(11 [pid 5826] <... unlink resumed>) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] close(12 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5947] close(13 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./1/cgroup.cpu" [pid 5947] close(14 [pid 5826] <... unlink resumed>) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] close(15 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5947] close(16 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./1/cgroup.net" [pid 5947] close(17 [pid 5826] <... unlink resumed>) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] close(18 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5947] close(19 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] unlink("./1/binderfs" [pid 5947] close(20 [pid 5826] <... unlink resumed>) = 0 [pid 5947] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] close(21) = -1 EBADF (Bad file descriptor) [pid 5947] close(22) = -1 EBADF (Bad file descriptor) [pid 5947] close(23) = -1 EBADF (Bad file descriptor) [ 73.172475][ T5944] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [pid 5947] close(24) = -1 EBADF (Bad file descriptor) [pid 5947] close(25) = -1 EBADF (Bad file descriptor) [pid 5947] close(26) = -1 EBADF (Bad file descriptor) [pid 5947] close(27) = -1 EBADF (Bad file descriptor) [pid 5947] close(28) = -1 EBADF (Bad file descriptor) [pid 5947] close(29) = -1 EBADF (Bad file descriptor) [pid 5947] exit_group(0) = ? [pid 5947] +++ exited with 0 +++ [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5828] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5828] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5828] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./1/cgroup") = 0 [pid 5828] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./1/cgroup.cpu") = 0 [pid 5828] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./1/cgroup.net") = 0 [pid 5828] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./1/binderfs") = 0 [ 73.266778][ T5826] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.275602][ T5944] BTRFS info (device loop0): using free-space-tree [ 73.304453][ T5945] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 5828] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5946] <... mount resumed>) = 0 [pid 5946] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5946] chdir("./file1") = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5946] ioctl(4, LOOP_CLR_FD) = 0 [pid 5946] close(4) = 0 [pid 5946] truncate("./file1", 24066) = 0 [pid 5946] close(3) = 0 [pid 5946] close(4) = -1 EBADF (Bad file descriptor) [pid 5946] close(5) = -1 EBADF (Bad file descriptor) [pid 5946] close(6) = -1 EBADF (Bad file descriptor) [ 73.329555][ T5828] BTRFS info (device loop4): last unmount of filesystem bd2acaed-c7e0-48d4-a64a-0dbee750bf2e [ 73.353703][ T5945] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [pid 5946] close(7) = -1 EBADF (Bad file descriptor) [ 73.409564][ T5945] BTRFS info (device loop1): using free-space-tree [pid 5946] close(8) = -1 EBADF (Bad file descriptor) [pid 5946] close(9) = -1 EBADF (Bad file descriptor) [pid 5946] close(10) = -1 EBADF (Bad file descriptor) [pid 5946] close(11) = -1 EBADF (Bad file descriptor) [pid 5946] close(12) = -1 EBADF (Bad file descriptor) [pid 5946] close(13) = -1 EBADF (Bad file descriptor) [pid 5946] close(14) = -1 EBADF (Bad file descriptor) [pid 5946] close(15) = -1 EBADF (Bad file descriptor) [pid 5946] close(16) = -1 EBADF (Bad file descriptor) [pid 5946] close(17) = -1 EBADF (Bad file descriptor) [pid 5946] close(18) = -1 EBADF (Bad file descriptor) [pid 5946] close(19) = -1 EBADF (Bad file descriptor) [pid 5946] close(20) = -1 EBADF (Bad file descriptor) [pid 5946] close(21) = -1 EBADF (Bad file descriptor) [pid 5946] close(22) = -1 EBADF (Bad file descriptor) [pid 5946] close(23) = -1 EBADF (Bad file descriptor) [pid 5946] close(24) = -1 EBADF (Bad file descriptor) [pid 5946] close(25) = -1 EBADF (Bad file descriptor) [pid 5946] close(26) = -1 EBADF (Bad file descriptor) [pid 5946] close(27) = -1 EBADF (Bad file descriptor) [pid 5946] close(28) = -1 EBADF (Bad file descriptor) [pid 5946] close(29) = -1 EBADF (Bad file descriptor) [pid 5946] exit_group(0) = ? [pid 5826] <... umount2 resumed>) = 0 [pid 5946] +++ exited with 0 +++ [pid 5826] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./1/file1", [pid 5827] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5944] <... mount resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./1/file1") = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./1") = 0 [pid 5826] mkdir("./2", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6018 attached [pid 6018] set_robust_list(0x555556f266a0, 24 [pid 5944] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5827] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 5 [pid 6018] <... set_robust_list resumed>) = 0 [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5827] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./1/cgroup") = 0 [pid 5827] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./1/cgroup.cpu") = 0 [pid 5827] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./1/cgroup.net") = 0 [pid 5827] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./1/binderfs") = 0 [pid 5827] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6018] chdir("./2" [pid 5944] <... openat resumed>) = 3 [pid 6018] <... chdir resumed>) = 0 [pid 5944] chdir("./file1" [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5944] <... chdir resumed>) = 0 [pid 6018] <... prctl resumed>) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6018] setpgid(0, 0 [pid 5944] <... openat resumed>) = 4 [pid 6018] <... setpgid resumed>) = 0 [pid 5944] ioctl(4, LOOP_CLR_FD [pid 6018] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5944] <... ioctl resumed>) = 0 [pid 6018] <... symlink resumed>) = 0 [pid 5944] close(4 [pid 6018] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5944] <... close resumed>) = 0 [pid 6018] <... symlink resumed>) = 0 [pid 5944] truncate("./file1", 24066 [pid 6018] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5944] <... truncate resumed>) = 0 [pid 6018] <... symlink resumed>) = 0 [pid 5944] close(3 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5944] <... close resumed>) = 0 [pid 6018] <... openat resumed>) = 3 [pid 5944] close(4 [pid 6018] write(3, "1000", 4 [pid 5944] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] <... write resumed>) = 4 [pid 5944] close(5 [pid 6018] close(3 [pid 5944] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] <... close resumed>) = 0 [pid 5944] close(6 [pid 6018] symlink("/dev/binderfs", "./binderfs" [pid 5944] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] <... symlink resumed>) = 0 [pid 5944] close(7 [pid 6018] write(1, "executing program\n", 18) = 18 [pid 5944] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] memfd_create("syzkaller", 0 [pid 5944] close(8 [pid 6018] <... memfd_create resumed>) = 3 [pid 5944] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] close(9 [pid 6018] <... mmap resumed>) = 0x7f980f800000 [pid 5944] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5944] close(10) = -1 EBADF (Bad file descriptor) [pid 5944] close(11) = -1 EBADF (Bad file descriptor) [pid 5944] close(12) = -1 EBADF (Bad file descriptor) [pid 5944] close(13) = -1 EBADF (Bad file descriptor) [pid 5944] close(14) = -1 EBADF (Bad file descriptor) [pid 5944] close(15) = -1 EBADF (Bad file descriptor) [pid 5944] close(16) = -1 EBADF (Bad file descriptor) [pid 5944] close(17) = -1 EBADF (Bad file descriptor) [pid 5944] close(18) = -1 EBADF (Bad file descriptor) [pid 5944] close(19) = -1 EBADF (Bad file descriptor) [pid 5944] close(20) = -1 EBADF (Bad file descriptor) [pid 5944] close(21) = -1 EBADF (Bad file descriptor) [pid 5944] close(22) = -1 EBADF (Bad file descriptor) [pid 5944] close(23) = -1 EBADF (Bad file descriptor) [pid 5944] close(24) = -1 EBADF (Bad file descriptor) [pid 5944] close(25) = -1 EBADF (Bad file descriptor) [pid 5944] close(26) = -1 EBADF (Bad file descriptor) [pid 5944] close(27) = -1 EBADF (Bad file descriptor) [pid 5944] close(28) = -1 EBADF (Bad file descriptor) [pid 5944] close(29) = -1 EBADF (Bad file descriptor) [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ [pid 5828] <... umount2 resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5828] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5828] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5828] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5828] close(4) = 0 [pid 5828] rmdir("./1/file1") = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5828] close(3) = 0 [pid 5828] rmdir("./1") = 0 [pid 5828] mkdir("./2", 0777) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5825] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5828] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] close(3 [pid 5825] unlink("./1/cgroup" [pid 5828] <... close resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] <... clone resumed>, child_tidptr=0x555556f26690) = 5 [pid 5825] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./1/cgroup.cpu") = 0 [pid 5825] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./1/cgroup.net") = 0 [pid 5825] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./1/binderfs") = 0 [pid 5825] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x555556f266a0, 24) = 0 [pid 6029] chdir("./2") = 0 [ 73.723399][ T5827] BTRFS info (device loop3): last unmount of filesystem 7016f386-fca4-4edc-9407-5b36dbd72eb6 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6029] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6029] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6029] write(1, "executing program\n", 18 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5945] <... mount resumed>) = 0 executing program [pid 6029] <... write resumed>) = 18 [pid 5945] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6029] memfd_create("syzkaller", 0 [pid 5945] <... openat resumed>) = 3 [pid 6029] <... memfd_create resumed>) = 3 [pid 5945] chdir("./file1" [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5945] <... chdir resumed>) = 0 [pid 6029] <... mmap resumed>) = 0x7f980f800000 [pid 5945] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5945] ioctl(4, LOOP_CLR_FD) = 0 [pid 5945] close(4) = 0 [pid 5945] truncate("./file1", 24066) = 0 [ 73.814421][ T5825] BTRFS info (device loop0): last unmount of filesystem c77e01e1-b9d4-4637-8ee4-cdfbca521614 [pid 5945] close(3) = 0 [pid 5945] close(4) = -1 EBADF (Bad file descriptor) [pid 5945] close(5) = -1 EBADF (Bad file descriptor) [pid 5945] close(6) = -1 EBADF (Bad file descriptor) [pid 5945] close(7) = -1 EBADF (Bad file descriptor) [pid 5945] close(8) = -1 EBADF (Bad file descriptor) [pid 5945] close(9) = -1 EBADF (Bad file descriptor) [pid 5945] close(10) = -1 EBADF (Bad file descriptor) [pid 5945] close(11) = -1 EBADF (Bad file descriptor) [pid 5945] close(12) = -1 EBADF (Bad file descriptor) [pid 5945] close(13) = -1 EBADF (Bad file descriptor) [pid 5945] close(14) = -1 EBADF (Bad file descriptor) [pid 5945] close(15) = -1 EBADF (Bad file descriptor) [pid 5945] close(16) = -1 EBADF (Bad file descriptor) [pid 5945] close(17) = -1 EBADF (Bad file descriptor) [pid 5945] close(18) = -1 EBADF (Bad file descriptor) [pid 5945] close(19) = -1 EBADF (Bad file descriptor) [pid 5945] close(20) = -1 EBADF (Bad file descriptor) [pid 5945] close(21) = -1 EBADF (Bad file descriptor) [pid 5945] close(22) = -1 EBADF (Bad file descriptor) [pid 5945] close(23) = -1 EBADF (Bad file descriptor) [pid 5945] close(24) = -1 EBADF (Bad file descriptor) [pid 5945] close(25) = -1 EBADF (Bad file descriptor) [pid 5945] close(26) = -1 EBADF (Bad file descriptor) [pid 5945] close(27) = -1 EBADF (Bad file descriptor) [pid 5945] close(28) = -1 EBADF (Bad file descriptor) [pid 5945] close(29) = -1 EBADF (Bad file descriptor) [pid 5945] exit_group(0) = ? [pid 5945] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5824] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./1/file1", [pid 5824] <... openat resumed>) = 3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] newfstatat(3, "", [pid 5827] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./1/file1") = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./1") = 0 [pid 5827] mkdir("./2", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6032 attached [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6032] set_robust_list(0x555556f266a0, 24 [pid 5827] <... clone resumed>, child_tidptr=0x555556f26690) = 5 [pid 6032] <... set_robust_list resumed>) = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 6032] chdir("./2" [pid 5824] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] <... chdir resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] newfstatat(AT_FDCWD, "./1/cgroup", [pid 6032] <... prctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./1/cgroup" [pid 6032] setpgid(0, 0) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 6032] <... symlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6032] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5825] <... umount2 resumed>) = 0 [pid 6032] <... symlink resumed>) = 0 [pid 5825] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] unlink("./1/cgroup.cpu" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6032] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5825] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./1/file1") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./1") = 0 [pid 5825] mkdir("./2", 0777) = 0 [pid 5824] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6032] <... symlink resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5825] <... ioctl resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6032] <... openat resumed>) = 3 [pid 5824] unlink("./1/cgroup.net" [pid 6032] write(3, "1000", 4 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 5 ./strace-static-x86_64: Process 6034 attached [pid 6032] <... write resumed>) = 4 [pid 5824] <... unlink resumed>) = 0 [pid 6034] set_robust_list(0x555556f266a0, 24 [pid 6032] close(3 [pid 5824] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... set_robust_list resumed>) = 0 [pid 6032] <... close resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] symlink("/dev/binderfs", "./binderfs" [pid 5824] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6032] <... symlink resumed>) = 0 [pid 5824] unlink("./1/binderfs" [pid 6032] write(1, "executing program\n", 18executing program ) = 18 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] chdir("./2" [pid 6032] memfd_create("syzkaller", 0 [pid 6034] <... chdir resumed>) = 0 [pid 6032] <... memfd_create resumed>) = 3 [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6034] setpgid(0, 0 [pid 6032] <... mmap resumed>) = 0x7f980f800000 [pid 6034] <... setpgid resumed>) = 0 [pid 6034] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6034] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6034] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6034] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6034] write(1, "executing program\n", 18) = 18 [pid 6034] memfd_create("syzkaller", 0) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 74.174238][ T5824] BTRFS info (device loop1): last unmount of filesystem 57c9cef6-9a69-4569-a293-89174558db4c [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, [pid 6018] <... write resumed>) = 16777216 [pid 5824] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 6018] munmap(0x7f980f800000, 138412032 [pid 5824] rmdir("./1/file1" [pid 6018] <... munmap resumed>) = 0 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./1" [pid 6018] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./2", 0777 [pid 6018] <... openat resumed>) = 4 [pid 5824] <... mkdir resumed>) = 0 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 5824] close(3) = 0 [pid 6018] <... ioctl resumed>) = 0 [pid 6018] close(3) = 0 [pid 6018] close(4) = 0 [pid 6018] mkdir("./file1", 0777) = 0 [pid 6018] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6035 attached , child_tidptr=0x555556f26690) = 5 [pid 6035] set_robust_list(0x555556f266a0, 24) = 0 [ 74.402030][ T6018] loop2: detected capacity change from 0 to 32768 [pid 6035] chdir("./2") = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6035] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6035] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6035] write(3, "1000", 4) = 4 [pid 6035] close(3) = 0 [pid 6035] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6035] write(1, "executing program\n", 18executing program [ 74.453564][ T6018] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6018) ) = 18 [pid 6035] memfd_create("syzkaller", 0) = 3 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 74.522675][ T6018] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.542364][ T6018] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 74.569331][ T6018] BTRFS info (device loop2): using free-space-tree [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6029] <... write resumed>) = 16777216 [pid 6029] munmap(0x7f980f800000, 138412032) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6029] <... openat resumed>) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6029] close(3) = 0 [ 74.893689][ T6029] loop4: detected capacity change from 0 to 32768 [ 74.932276][ T5834] Bluetooth: hci0: command tx timeout [pid 6029] close(4) = 0 [pid 6029] mkdir("./file1", 0777) = 0 [ 74.992656][ T5834] Bluetooth: hci2: command tx timeout [ 75.002358][ T5834] Bluetooth: hci3: command tx timeout [ 75.008614][ T5834] Bluetooth: hci1: command tx timeout [ 75.020632][ T5843] Bluetooth: hci4: command tx timeout [pid 6029] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6034] <... write resumed>) = 16777216 [pid 6034] munmap(0x7f980f800000, 138412032) = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6032] <... write resumed>) = 16777216 [pid 6032] munmap(0x7f980f800000, 138412032 [pid 6034] ioctl(4, LOOP_SET_FD, 3 [pid 6032] <... munmap resumed>) = 0 [pid 6018] <... mount resumed>) = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 75.058310][ T6029] BTRFS: device /dev/loop4 (7:4) using temp-fsid 95ed6798-3a6e-4c1b-9c23-d0a8e258be95 [ 75.068409][ T6029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (6029) [pid 6032] ioctl(4, LOOP_SET_FD, 3 [pid 6018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6018] chdir("./file1") = 0 [pid 6018] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6035] <... write resumed>) = 16777216 [pid 6018] <... openat resumed>) = 4 [pid 6035] munmap(0x7f980f800000, 138412032 [pid 6018] ioctl(4, LOOP_CLR_FD [pid 6034] <... ioctl resumed>) = 0 [pid 6018] <... ioctl resumed>) = 0 [pid 6018] close(4) = 0 [pid 6018] truncate("./file1", 24066) = 0 [pid 6018] close(3 [pid 6032] <... ioctl resumed>) = 0 [pid 6018] <... close resumed>) = 0 [pid 6032] close(3 [pid 6018] close(4 [pid 6032] <... close resumed>) = 0 [pid 6018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6032] close(4 [pid 6018] close(5) = -1 EBADF (Bad file descriptor) [pid 6018] close(6) = -1 EBADF (Bad file descriptor) [pid 6018] close(7) = -1 EBADF (Bad file descriptor) [pid 6018] close(8) = -1 EBADF (Bad file descriptor) [pid 6018] close(9) = -1 EBADF (Bad file descriptor) [pid 6018] close(10 [pid 6032] <... close resumed>) = 0 [pid 6018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] close(11 [pid 6032] mkdir("./file1", 0777 [pid 6018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6032] <... mkdir resumed>) = 0 [pid 6018] close(12 [pid 6032] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] close(13) = -1 EBADF (Bad file descriptor) [pid 6018] close(14) = -1 EBADF (Bad file descriptor) [pid 6018] close(15) = -1 EBADF (Bad file descriptor) [pid 6018] close(16) = -1 EBADF (Bad file descriptor) [pid 6018] close(17) = -1 EBADF (Bad file descriptor) [pid 6018] close(18) = -1 EBADF (Bad file descriptor) [pid 6018] close(19) = -1 EBADF (Bad file descriptor) [pid 6018] close(20) = -1 EBADF (Bad file descriptor) [pid 6018] close(21) = -1 EBADF (Bad file descriptor) [pid 6018] close(22) = -1 EBADF (Bad file descriptor) [pid 6018] close(23) = -1 EBADF (Bad file descriptor) [pid 6035] <... munmap resumed>) = 0 [pid 6034] close(3 [pid 6018] close(24) = -1 EBADF (Bad file descriptor) [pid 6018] close(25 [pid 6035] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] <... openat resumed>) = 4 [pid 6018] close(26 [pid 6035] ioctl(4, LOOP_SET_FD, 3 [pid 6018] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] close(27) = -1 EBADF (Bad file descriptor) [pid 6018] close(28) = -1 EBADF (Bad file descriptor) [pid 6018] close(29) = -1 EBADF (Bad file descriptor) [pid 6018] exit_group(0) = ? [pid 6018] +++ exited with 0 +++ [ 75.107694][ T6032] loop3: detected capacity change from 0 to 32768 [ 75.108555][ T6034] loop0: detected capacity change from 0 to 32768 [ 75.130324][ T6029] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.146431][ T6035] loop1: detected capacity change from 0 to 32768 [pid 6035] <... ioctl resumed>) = 0 [pid 6034] <... close resumed>) = 0 [pid 6035] close(3) = 0 [pid 6035] close(4) = 0 [pid 6035] mkdir("./file1", 0777) = 0 [ 75.159384][ T6029] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 75.168982][ T6032] BTRFS: device /dev/loop3 (7:3) using temp-fsid ed311cda-fab5-4d88-9da9-b2611d1dcff0 [ 75.191123][ T6032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (6032) [pid 6035] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6034] close(4 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 6034] <... close resumed>) = 0 [pid 6034] mkdir("./file1", 0777 [pid 5826] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5826] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/cgroup") = 0 [pid 5826] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 75.209539][ T6029] BTRFS info (device loop4): using free-space-tree [ 75.247883][ T6035] BTRFS: device /dev/loop1 (7:1) using temp-fsid fa1e3183-65d7-44d4-a914-f82018855530 [pid 5826] unlink("./2/cgroup.cpu") = 0 [pid 5826] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/cgroup.net") = 0 [pid 5826] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./2/binderfs") = 0 [ 75.266041][ T6035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (6035) [ 75.280593][ T6032] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.291417][ T6032] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 75.301559][ T6032] BTRFS info (device loop3): using free-space-tree [ 75.334366][ T5826] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.347794][ T6034] BTRFS: device /dev/loop0 (7:0) using temp-fsid ec9b063f-82e8-4e20-8e03-847e536b7f6a [ 75.360557][ T6034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6034) [ 75.468133][ T6035] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.481004][ T6034] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.493969][ T6034] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 75.503756][ T6034] BTRFS info (device loop0): using free-space-tree [pid 5826] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] <... mount resumed>) = 0 [pid 6029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6029] chdir("./file1") = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_CLR_FD) = 0 [pid 6029] close(4) = 0 [pid 6029] truncate("./file1", 24066) = 0 [pid 6029] close(3) = 0 [pid 6029] close(4) = -1 EBADF (Bad file descriptor) [pid 6029] close(5) = -1 EBADF (Bad file descriptor) [pid 6029] close(6) = -1 EBADF (Bad file descriptor) [pid 6029] close(7) = -1 EBADF (Bad file descriptor) [pid 6029] close(8) = -1 EBADF (Bad file descriptor) [pid 6029] close(9) = -1 EBADF (Bad file descriptor) [pid 6029] close(10) = -1 EBADF (Bad file descriptor) [pid 6029] close(11) = -1 EBADF (Bad file descriptor) [pid 6029] close(12) = -1 EBADF (Bad file descriptor) [pid 6029] close(13) = -1 EBADF (Bad file descriptor) [pid 6029] close(14) = -1 EBADF (Bad file descriptor) [pid 6029] close(15) = -1 EBADF (Bad file descriptor) [pid 6029] close(16) = -1 EBADF (Bad file descriptor) [pid 6029] close(17) = -1 EBADF (Bad file descriptor) [pid 6029] close(18) = -1 EBADF (Bad file descriptor) [pid 6029] close(19) = -1 EBADF (Bad file descriptor) [pid 6029] close(20) = -1 EBADF (Bad file descriptor) [pid 6029] close(21) = -1 EBADF (Bad file descriptor) [pid 6029] close(22) = -1 EBADF (Bad file descriptor) [pid 6029] close(23) = -1 EBADF (Bad file descriptor) [pid 6029] close(24) = -1 EBADF (Bad file descriptor) [pid 6029] close(25) = -1 EBADF (Bad file descriptor) [pid 6029] close(26) = -1 EBADF (Bad file descriptor) [pid 6029] close(27) = -1 EBADF (Bad file descriptor) [pid 6029] close(28) = -1 EBADF (Bad file descriptor) [pid 6029] close(29) = -1 EBADF (Bad file descriptor) [ 75.514769][ T6035] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [pid 6029] exit_group(0) = ? [pid 6029] +++ exited with 0 +++ [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5828] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5828] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./2/cgroup") = 0 [pid 5828] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./2/cgroup.cpu") = 0 [pid 5828] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./2/cgroup.net") = 0 [pid 5828] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./2/binderfs") = 0 [ 75.555718][ T6035] BTRFS info (device loop1): using free-space-tree [ 75.632148][ T5828] BTRFS info (device loop4): last unmount of filesystem 95ed6798-3a6e-4c1b-9c23-d0a8e258be95 [pid 5828] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] <... mount resumed>) = 0 [pid 6032] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6032] chdir("./file1") = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6032] ioctl(4, LOOP_CLR_FD) = 0 [pid 6032] close(4) = 0 [pid 6032] truncate("./file1", 24066) = 0 [pid 6032] close(3) = 0 [pid 6032] close(4) = -1 EBADF (Bad file descriptor) [pid 6032] close(5) = -1 EBADF (Bad file descriptor) [pid 6032] close(6) = -1 EBADF (Bad file descriptor) [pid 6032] close(7) = -1 EBADF (Bad file descriptor) [pid 6032] close(8) = -1 EBADF (Bad file descriptor) [pid 6032] close(9) = -1 EBADF (Bad file descriptor) [pid 6032] close(10) = -1 EBADF (Bad file descriptor) [pid 6032] close(11) = -1 EBADF (Bad file descriptor) [pid 6032] close(12) = -1 EBADF (Bad file descriptor) [pid 6032] close(13) = -1 EBADF (Bad file descriptor) [pid 6032] close(14) = -1 EBADF (Bad file descriptor) [pid 6032] close(15) = -1 EBADF (Bad file descriptor) [pid 6032] close(16) = -1 EBADF (Bad file descriptor) [pid 6032] close(17) = -1 EBADF (Bad file descriptor) [pid 6032] close(18) = -1 EBADF (Bad file descriptor) [pid 6032] close(19) = -1 EBADF (Bad file descriptor) [pid 6032] close(20) = -1 EBADF (Bad file descriptor) [pid 6032] close(21) = -1 EBADF (Bad file descriptor) [pid 6032] close(22) = -1 EBADF (Bad file descriptor) [pid 6032] close(23) = -1 EBADF (Bad file descriptor) [pid 6032] close(24) = -1 EBADF (Bad file descriptor) [pid 6032] close(25) = -1 EBADF (Bad file descriptor) [pid 6032] close(26) = -1 EBADF (Bad file descriptor) [pid 6032] close(27) = -1 EBADF (Bad file descriptor) [pid 6032] close(28) = -1 EBADF (Bad file descriptor) [pid 6032] close(29) = -1 EBADF (Bad file descriptor) [pid 6032] exit_group(0) = ? [pid 6032] +++ exited with 0 +++ [pid 5828] <... umount2 resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5826] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./2/file1", [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", [pid 5826] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... openat resumed>) = 4 [pid 5827] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] newfstatat(4, "", [pid 5827] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./2/file1") = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5826] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... close resumed>) = 0 [pid 5826] rmdir("./2" [pid 5827] unlink("./2/cgroup") = 0 [pid 5826] <... rmdir resumed>) = 0 [pid 5827] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] mkdir("./3", 0777 [pid 5827] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5826] <... mkdir resumed>) = 0 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] unlink("./2/cgroup.cpu") = 0 [pid 5826] <... openat resumed>) = 3 [pid 5827] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5826] close(3 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./2/cgroup.net" [pid 5826] <... close resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 6 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./2/binderfs") = 0 [pid 5827] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... mount resumed>) = 0 [pid 6034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6034] chdir("./file1") = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6034] ioctl(4, LOOP_CLR_FD) = 0 [pid 6034] close(4) = 0 [pid 6034] truncate("./file1", 24066) = 0 [pid 6034] close(3) = 0 [pid 6034] close(4) = -1 EBADF (Bad file descriptor) [pid 6034] close(5) = -1 EBADF (Bad file descriptor) [pid 6034] close(6) = -1 EBADF (Bad file descriptor) [pid 6034] close(7) = -1 EBADF (Bad file descriptor) [pid 6034] close(8) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 6118 attached [pid 6034] close(9 [pid 5828] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6118] set_robust_list(0x555556f266a0, 24 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6118] <... set_robust_list resumed>) = 0 [pid 5828] newfstatat(AT_FDCWD, "./2/file1", [pid 6118] chdir("./3" [pid 6034] close(10 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6118] <... chdir resumed>) = 0 [pid 6035] <... mount resumed>) = 0 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6118] <... prctl resumed>) = 0 [pid 5828] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6118] setpgid(0, 0 [pid 5828] <... openat resumed>) = 4 [pid 6118] <... setpgid resumed>) = 0 [pid 5828] newfstatat(4, "", [pid 6118] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6118] <... symlink resumed>) = 0 [pid 5828] getdents64(4, [pid 6118] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 6118] <... symlink resumed>) = 0 [pid 6035] <... openat resumed>) = 3 [pid 6034] close(11 [pid 5828] getdents64(4, [pid 6118] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 6118] <... symlink resumed>) = 0 [pid 5828] close(4 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5828] <... close resumed>) = 0 [pid 6118] <... openat resumed>) = 3 [pid 5828] rmdir("./2/file1" [pid 6118] write(3, "1000", 4 [pid 5828] <... rmdir resumed>) = 0 [pid 6118] <... write resumed>) = 4 [pid 6035] chdir("./file1" [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] getdents64(3, [pid 6118] close(3 [pid 5828] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 6118] <... close resumed>) = 0 [pid 5828] close(3 [pid 6118] symlink("/dev/binderfs", "./binderfs" [pid 5828] <... close resumed>) = 0 [pid 6118] <... symlink resumed>) = 0 [pid 6035] <... chdir resumed>) = 0 [pid 6034] close(12 [pid 5828] rmdir("./2"executing program [pid 6118] write(1, "executing program\n", 18 [pid 6035] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... rmdir resumed>) = 0 [pid 6118] <... write resumed>) = 18 [pid 6035] <... openat resumed>) = 4 [pid 6034] close(13 [pid 5828] mkdir("./3", 0777 [pid 6118] memfd_create("syzkaller", 0 [pid 6035] ioctl(4, LOOP_CLR_FD [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... mkdir resumed>) = 0 [pid 6118] <... memfd_create resumed>) = 3 [pid 6035] <... ioctl resumed>) = 0 [pid 6034] close(14 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6035] close(4 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... openat resumed>) = 3 [pid 6118] <... mmap resumed>) = 0x7f980f800000 [pid 6035] <... close resumed>) = 0 [pid 5828] ioctl(3, LOOP_CLR_FD [pid 6034] close(15 [pid 6035] truncate("./file1", 24066 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6034] close(16 [pid 5828] close(3) = 0 [pid 6035] <... truncate resumed>) = 0 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] close(17 [pid 6035] close(3 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6034] close(18) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 6119 attached [pid 6035] <... close resumed>) = 0 [pid 6034] close(19 [pid 6119] set_robust_list(0x555556f266a0, 24 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... clone resumed>, child_tidptr=0x555556f26690) = 6 [pid 6119] <... set_robust_list resumed>) = 0 [pid 6035] close(4 [pid 6034] close(20 [pid 6119] chdir("./3" [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] <... chdir resumed>) = 0 [pid 6119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6119] setpgid(0, 0) = 0 [pid 6119] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 76.079697][ T5827] BTRFS info (device loop3): last unmount of filesystem ed311cda-fab5-4d88-9da9-b2611d1dcff0 [pid 6035] close(5 [pid 6119] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] close(21 [pid 6035] close(6) = -1 EBADF (Bad file descriptor) [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] close(7 [pid 6034] close(22 [pid 6119] <... symlink resumed>) = 0 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] close(23 [pid 6035] close(8) = -1 EBADF (Bad file descriptor) [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 6035] close(9 [pid 6034] close(24 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] <... symlink resumed>) = 0 [pid 6035] close(10 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] close(25 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6035] close(11 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] <... openat resumed>) = 3 [pid 6034] close(26 [pid 6035] close(12 [pid 6119] write(3, "1000", 4 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] close(13 [pid 6034] close(27 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] <... write resumed>) = 4 [pid 6035] close(14 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] close(28 [pid 6035] close(15 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] close(29 [pid 6035] close(16 [pid 6034] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(3 [pid 6035] close(17 [pid 6034] exit_group(0 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] <... exit_group resumed>) = ? [pid 6035] close(18 [pid 6119] <... close resumed>) = 0 [pid 6119] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] write(1, "executing program\n", 18) = 18 [pid 6119] memfd_create("syzkaller", 0 [pid 6035] close(19 [pid 6034] +++ exited with 0 +++ [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6035] close(20) = -1 EBADF (Bad file descriptor) [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 6035] close(21) = -1 EBADF (Bad file descriptor) [pid 6035] close(22 [pid 6119] <... memfd_create resumed>) = 3 [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6035] close(23 [pid 5825] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6035] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] close(24) = -1 EBADF (Bad file descriptor) [pid 5825] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6035] close(25) = -1 EBADF (Bad file descriptor) [pid 5825] <... openat resumed>) = 3 [pid 6035] close(26) = -1 EBADF (Bad file descriptor) [pid 6035] close(27) = -1 EBADF (Bad file descriptor) [pid 6035] close(28) = -1 EBADF (Bad file descriptor) [pid 6035] close(29) = -1 EBADF (Bad file descriptor) [pid 5825] newfstatat(3, "", [pid 6035] exit_group(0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6035] <... exit_group resumed>) = ? [pid 5825] getdents64(3, [pid 6035] +++ exited with 0 +++ [pid 5825] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] unlink("./2/cgroup" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5825] unlink("./2/cgroup.cpu" [pid 5824] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... unlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/cgroup" [pid 5825] unlink("./2/cgroup.net" [pid 5824] <... unlink resumed>) = 0 [pid 5825] <... unlink resumed>) = 0 [pid 5824] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5825] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./2/binderfs" [pid 5824] unlink("./2/cgroup.cpu" [pid 5825] <... unlink resumed>) = 0 [pid 5825] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/cgroup.net") = 0 [pid 5824] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./2/binderfs") = 0 [ 76.306250][ T5825] BTRFS info (device loop0): last unmount of filesystem ec9b063f-82e8-4e20-8e03-847e536b7f6a [ 76.319550][ T5824] BTRFS info (device loop1): last unmount of filesystem fa1e3183-65d7-44d4-a914-f82018855530 [pid 5824] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./2/file1") = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./2") = 0 [pid 5827] mkdir("./3", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 6 ./strace-static-x86_64: Process 6122 attached [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6118] <... write resumed>) = 16777216 [pid 6118] munmap(0x7f980f800000, 138412032) = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6122] set_robust_list(0x555556f266a0, 24 [pid 6119] <... write resumed>) = 16777216 [pid 6118] mkdir("./file1", 0777 [pid 6122] <... set_robust_list resumed>) = 0 [pid 6119] munmap(0x7f980f800000, 138412032 [pid 6122] chdir("./3" [pid 6119] <... munmap resumed>) = 0 [ 76.656649][ T6118] loop2: detected capacity change from 0 to 32768 [pid 6118] <... mkdir resumed>) = 0 [pid 6122] <... chdir resumed>) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6119] <... openat resumed>) = 4 [pid 6118] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6122] <... prctl resumed>) = 0 [pid 6119] ioctl(4, LOOP_SET_FD, 3 [pid 6122] setpgid(0, 0 [pid 6119] <... ioctl resumed>) = 0 [pid 6122] <... setpgid resumed>) = 0 [pid 6119] close(3 [pid 6122] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6119] <... close resumed>) = 0 [pid 6122] <... symlink resumed>) = 0 [pid 6119] close(4 [pid 6122] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6119] <... close resumed>) = 0 [pid 6122] <... symlink resumed>) = 0 [pid 6119] mkdir("./file1", 0777 [pid 6122] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6119] <... mkdir resumed>) = 0 [pid 6122] <... symlink resumed>) = 0 [pid 6119] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6122] write(3, "1000", 4) = 4 [pid 6122] close(3) = 0 [pid 6122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6122] write(1, "executing program\n", 18executing program ) = 18 [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 76.722852][ T6119] loop4: detected capacity change from 0 to 32768 [ 76.725193][ T6118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6118) [ 76.792602][ T6119] BTRFS: device /dev/loop4 (7:4) using temp-fsid 71117014-990f-4eda-969a-a4021127cc33 [ 76.839406][ T6119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (6119) [ 76.842284][ T6118] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.893232][ T6118] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 76.922559][ T6118] BTRFS info (device loop2): using free-space-tree [pid 5825] <... umount2 resumed>) = 0 [ 76.956990][ T6119] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 5825] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./2/file1") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./2") = 0 [pid 5825] mkdir("./3", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [ 77.024605][ T6119] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 77.040247][ T5831] Bluetooth: hci0: command tx timeout [ 77.072550][ T5831] Bluetooth: hci4: command tx timeout [ 77.078581][ T5843] Bluetooth: hci1: command tx timeout [ 77.084069][ T5834] Bluetooth: hci3: command tx timeout [ 77.089483][ T5834] Bluetooth: hci2: command tx timeout [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6126 attached [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [ 77.182557][ T6119] BTRFS info (device loop4): using free-space-tree [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5824] close(4) = 0 [pid 5824] rmdir("./2/file1") = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./2") = 0 [pid 5824] mkdir("./3", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 6 [pid 6126] set_robust_list(0x555556f266a0, 24) = 0 [pid 6126] chdir("./3") = 0 [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6126] setpgid(0, 0) = 0 [pid 6126] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6126] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6126] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6126] write(3, "1000", 4) = 4 [pid 6126] close(3) = 0 [pid 6126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6126] write(1, "executing program\n", 18executing program ) = 18 [pid 6126] memfd_create("syzkaller", 0) = 3 [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 ./strace-static-x86_64: Process 6128 attached [pid 6128] set_robust_list(0x555556f266a0, 24) = 0 [pid 6128] chdir("./3") = 0 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6128] setpgid(0, 0) = 0 [pid 6128] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6128] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6128] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6128] write(3, "1000", 4) = 4 [pid 6128] close(3) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6128] write(1, "executing program\n", 18) = 18 [pid 6128] memfd_create("syzkaller", 0) = 3 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 6 [pid 6122] <... write resumed>) = 16777216 [pid 6122] munmap(0x7f980f800000, 138412032) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6122] close(3) = 0 [pid 6122] close(4) = 0 [pid 6122] mkdir("./file1", 0777 [pid 6126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6122] <... mkdir resumed>) = 0 [ 77.603181][ T6122] loop3: detected capacity change from 0 to 32768 [pid 6122] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [ 77.663119][ T6122] BTRFS: device /dev/loop3 (7:3) using temp-fsid 2f6a2be2-e5c2-4b0f-9b0f-f411162d45ce [ 77.682957][ T6122] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (6122) [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6119] <... mount resumed>) = 0 [pid 6118] <... mount resumed>) = 0 [pid 6119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file1") = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6118] chdir("./file1") = 0 [pid 6119] truncate("./file1", 24066 [pid 6118] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6119] <... truncate resumed>) = 0 [pid 6118] <... openat resumed>) = 4 [pid 6118] ioctl(4, LOOP_CLR_FD) = 0 [pid 6118] close(4) = 0 [pid 6118] truncate("./file1", 24066) = 0 [pid 6119] close(3) = 0 [pid 6119] close(4) = -1 EBADF (Bad file descriptor) [pid 6119] close(5) = -1 EBADF (Bad file descriptor) [pid 6119] close(6) = -1 EBADF (Bad file descriptor) [pid 6119] close(7) = -1 EBADF (Bad file descriptor) [pid 6119] close(8) = -1 EBADF (Bad file descriptor) [pid 6119] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(3) = 0 [pid 6118] close(4) = -1 EBADF (Bad file descriptor) [pid 6119] close(10 [pid 6118] close(5 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(11 [pid 6118] close(6 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(12 [pid 6118] close(7 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(13 [pid 6118] close(8 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(14 [pid 6118] close(9 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(15 [pid 6118] close(10 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(16 [pid 6118] close(11 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(17 [pid 6118] close(12 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(18 [pid 6118] close(13 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(19 [pid 6118] close(14 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(20 [pid 6118] close(15 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(21 [pid 6118] close(16 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(22 [pid 6118] close(17 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(23 [pid 6118] close(18 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(24 [pid 6118] close(19 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(25 [pid 6118] close(20 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(26 [pid 6118] close(21 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(27 [pid 6118] close(22 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(28 [pid 6118] close(23 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] close(29 [pid 6118] close(24 [pid 6119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] exit_group(0 [pid 6118] close(25 [pid 6119] <... exit_group resumed>) = ? [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6119] +++ exited with 0 +++ [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 6118] close(29 [pid 5828] restart_syscall(<... resuming interrupted clone ...> [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... restart_syscall resumed>) = 0 [pid 6118] exit_group(0) = ? [pid 6118] +++ exited with 0 +++ [pid 5828] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5828] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] unlink("./3/cgroup" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] <... unlink resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5828] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... openat resumed>) = 3 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(3, "", [pid 5828] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] getdents64(3, [pid 5828] unlink("./3/cgroup.cpu") = 0 [pid 5826] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] unlink("./3/cgroup.net" [pid 5826] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5828] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./3/cgroup" [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... unlink resumed>) = 0 [pid 5828] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5826] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] unlink("./3/binderfs" [pid 5826] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5828] <... unlink resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] unlink("./3/cgroup.cpu") = 0 [pid 5826] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./3/cgroup.net") = 0 [pid 5826] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./3/binderfs") = 0 [ 77.871147][ T6122] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.882806][ T6122] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 77.891628][ T6122] BTRFS info (device loop3): using free-space-tree [ 77.937998][ T5828] BTRFS info (device loop4): last unmount of filesystem 71117014-990f-4eda-969a-a4021127cc33 [ 77.974402][ T5826] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 5826] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] <... write resumed>) = 16777216 [pid 6128] munmap(0x7f980f800000, 138412032) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6128] close(3) = 0 [pid 6128] close(4) = 0 [pid 6128] mkdir("./file1", 0777) = 0 [ 78.062752][ T6128] loop1: detected capacity change from 0 to 32768 [ 78.103351][ T6128] BTRFS: device /dev/loop1 (7:1) using temp-fsid d68825d4-d3d5-49ba-976b-3eafc17081fb [pid 6128] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6126] <... write resumed>) = 16777216 [pid 6126] munmap(0x7f980f800000, 138412032) = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 78.173069][ T6128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (6128) [pid 6126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6126] close(3) = 0 [pid 6126] close(4) = 0 [pid 6126] mkdir("./file1", 0777) = 0 [ 78.214340][ T6126] loop0: detected capacity change from 0 to 32768 [ 78.242642][ T6126] BTRFS: device /dev/loop0 (7:0) using temp-fsid aff34af3-6efd-40e3-abd6-5546962266e2 [ 78.256612][ T6128] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.258498][ T6126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6126) [ 78.267079][ T6128] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 78.289010][ T6128] BTRFS info (device loop1): using free-space-tree [pid 6126] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6122] <... mount resumed>) = 0 [pid 6122] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file1") = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 78.307781][ T6126] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.320862][ T6126] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 78.331694][ T6126] BTRFS info (device loop0): using free-space-tree [pid 6122] ioctl(4, LOOP_CLR_FD) = 0 [pid 6122] close(4) = 0 [pid 6122] truncate("./file1", 24066) = 0 [pid 6122] close(3) = 0 [pid 6122] close(4) = -1 EBADF (Bad file descriptor) [pid 6122] close(5) = -1 EBADF (Bad file descriptor) [pid 6122] close(6) = -1 EBADF (Bad file descriptor) [pid 6122] close(7) = -1 EBADF (Bad file descriptor) [pid 6122] close(8) = -1 EBADF (Bad file descriptor) [pid 6122] close(9) = -1 EBADF (Bad file descriptor) [pid 6122] close(10) = -1 EBADF (Bad file descriptor) [pid 6122] close(11) = -1 EBADF (Bad file descriptor) [pid 6122] close(12) = -1 EBADF (Bad file descriptor) [pid 6122] close(13) = -1 EBADF (Bad file descriptor) [pid 6122] close(14) = -1 EBADF (Bad file descriptor) [pid 6122] close(15) = -1 EBADF (Bad file descriptor) [pid 6122] close(16) = -1 EBADF (Bad file descriptor) [pid 6122] close(17) = -1 EBADF (Bad file descriptor) [pid 6122] close(18) = -1 EBADF (Bad file descriptor) [pid 6122] close(19) = -1 EBADF (Bad file descriptor) [pid 6122] close(20) = -1 EBADF (Bad file descriptor) [pid 6122] close(21) = -1 EBADF (Bad file descriptor) [pid 6122] close(22) = -1 EBADF (Bad file descriptor) [pid 6122] close(23) = -1 EBADF (Bad file descriptor) [pid 6122] close(24) = -1 EBADF (Bad file descriptor) [pid 6122] close(25) = -1 EBADF (Bad file descriptor) [pid 6122] close(26) = -1 EBADF (Bad file descriptor) [pid 6122] close(27) = -1 EBADF (Bad file descriptor) [pid 6122] close(28) = -1 EBADF (Bad file descriptor) [pid 6122] close(29) = -1 EBADF (Bad file descriptor) [pid 6122] exit_group(0) = ? [pid 6122] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5827] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5827] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./3/cgroup") = 0 [pid 5827] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./3/cgroup.cpu") = 0 [pid 5827] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./3/cgroup.net") = 0 [pid 5827] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./3/binderfs") = 0 [ 78.559298][ T5827] BTRFS info (device loop3): last unmount of filesystem 2f6a2be2-e5c2-4b0f-9b0f-f411162d45ce [pid 5827] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] <... mount resumed>) = 0 [pid 6128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6128] chdir("./file1") = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_CLR_FD) = 0 [pid 6128] close(4) = 0 [pid 6128] truncate("./file1", 24066) = 0 [pid 6128] close(3) = 0 [pid 6128] close(4) = -1 EBADF (Bad file descriptor) [pid 6128] close(5) = -1 EBADF (Bad file descriptor) [pid 6128] close(6) = -1 EBADF (Bad file descriptor) [pid 6128] close(7) = -1 EBADF (Bad file descriptor) [pid 6128] close(8) = -1 EBADF (Bad file descriptor) [pid 6128] close(9) = -1 EBADF (Bad file descriptor) [pid 6128] close(10) = -1 EBADF (Bad file descriptor) [pid 6128] close(11) = -1 EBADF (Bad file descriptor) [pid 6128] close(12) = -1 EBADF (Bad file descriptor) [pid 6128] close(13) = -1 EBADF (Bad file descriptor) [pid 6128] close(14) = -1 EBADF (Bad file descriptor) [pid 6128] close(15) = -1 EBADF (Bad file descriptor) [pid 6128] close(16) = -1 EBADF (Bad file descriptor) [pid 6128] close(17) = -1 EBADF (Bad file descriptor) [pid 6128] close(18) = -1 EBADF (Bad file descriptor) [pid 6128] close(19) = -1 EBADF (Bad file descriptor) [pid 6128] close(20) = -1 EBADF (Bad file descriptor) [pid 6128] close(21) = -1 EBADF (Bad file descriptor) [pid 6128] close(22) = -1 EBADF (Bad file descriptor) [pid 6128] close(23) = -1 EBADF (Bad file descriptor) [pid 6128] close(24) = -1 EBADF (Bad file descriptor) [pid 6128] close(25) = -1 EBADF (Bad file descriptor) [pid 6128] close(26) = -1 EBADF (Bad file descriptor) [pid 6128] close(27) = -1 EBADF (Bad file descriptor) [pid 6128] close(28) = -1 EBADF (Bad file descriptor) [pid 6128] close(29) = -1 EBADF (Bad file descriptor) [pid 6128] exit_group(0) = ? [pid 6128] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=34 /* 0.34 s */} --- [pid 5824] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/cgroup") = 0 [pid 5824] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/cgroup.cpu") = 0 [pid 5824] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./3/cgroup.net") = 0 [pid 5824] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6126] <... mount resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./3/binderfs", [pid 6126] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6126] <... openat resumed>) = 3 [pid 5824] unlink("./3/binderfs" [pid 6126] chdir("./file1" [pid 5824] <... unlink resumed>) = 0 [pid 6126] <... chdir resumed>) = 0 [pid 5824] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6126] ioctl(4, LOOP_CLR_FD) = 0 [pid 6126] close(4) = 0 [pid 6126] truncate("./file1", 24066) = 0 [pid 6126] close(3) = 0 [pid 6126] close(4) = -1 EBADF (Bad file descriptor) [pid 6126] close(5) = -1 EBADF (Bad file descriptor) [pid 6126] close(6) = -1 EBADF (Bad file descriptor) [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] close(7) = -1 EBADF (Bad file descriptor) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] close(8 [pid 5827] newfstatat(AT_FDCWD, "./3/file1", [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6126] close(9 [pid 5827] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] close(10 [pid 5827] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... openat resumed>) = 4 [pid 6126] close(11 [pid 5827] newfstatat(4, "", [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6126] close(12 [pid 5827] getdents64(4, [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 6126] close(13 [pid 5827] getdents64(4, [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 6126] close(14 [pid 5827] close(4 [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 6126] close(15 [pid 5827] rmdir("./3/file1" [pid 5826] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] close(16 [pid 5827] getdents64(3, [pid 5826] newfstatat(AT_FDCWD, "./3/file1", [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6126] close(17 [pid 5827] close(3 [pid 5826] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... close resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] close(18 [pid 5827] rmdir("./3" [pid 5826] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... rmdir resumed>) = 0 [pid 5826] <... openat resumed>) = 4 [pid 6126] close(19 [pid 5827] mkdir("./4", 0777 [pid 5826] newfstatat(4, "", [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... mkdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6126] close(20 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] getdents64(4, [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... openat resumed>) = 3 [pid 5826] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 6126] close(21 [pid 5827] ioctl(3, LOOP_CLR_FD [pid 5826] getdents64(4, [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... ioctl resumed>) = 0 [pid 5826] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 6126] close(22 [pid 5827] close(3 [pid 5826] close(4 [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6126] close(23 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5826] rmdir("./3/file1" [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... rmdir resumed>) = 0 [pid 6126] close(24 [pid 5827] <... clone resumed>, child_tidptr=0x555556f26690) = 7 [pid 5826] getdents64(3, [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 6126] close(25 [pid 5826] close(3 [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... close resumed>) = 0 [pid 6126] close(26 [pid 5826] rmdir("./3" [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... rmdir resumed>) = 0 [pid 6126] close(27 [pid 5826] mkdir("./4", 0777 [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... mkdir resumed>) = 0 [pid 6126] close(28 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 3 [pid 6126] close(29 [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6126] exit_group(0 [pid 5826] close(3 [pid 6126] <... exit_group resumed>) = ? [pid 5826] <... close resumed>) = 0 ./strace-static-x86_64: Process 6209 attached [pid 6126] +++ exited with 0 +++ [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6210 attached [pid 6209] set_robust_list(0x555556f266a0, 24 [pid 6210] set_robust_list(0x555556f266a0, 24 [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 7 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 6210] <... set_robust_list resumed>) = 0 [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 6210] chdir("./4") = 0 [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6210] setpgid(0, 0) = 0 [pid 6210] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 6210] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6210] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6210] write(3, "1000", 4 [pid 5825] <... restart_syscall resumed>) = 0 [pid 6210] <... write resumed>) = 4 [pid 6210] close(3 [pid 6209] <... set_robust_list resumed>) = 0 [pid 6210] <... close resumed>) = 0 [pid 5825] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] <... symlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] write(1, "executing program\n", 18 [pid 5825] <... openat resumed>) = 3 [pid 6210] <... write resumed>) = 18 [pid 5825] newfstatat(3, "", [pid 6210] memfd_create("syzkaller", 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6210] <... memfd_create resumed>) = 3 [pid 5825] getdents64(3, [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 6210] <... mmap resumed>) = 0x7f980f800000 [ 78.760857][ T5824] BTRFS info (device loop1): last unmount of filesystem d68825d4-d3d5-49ba-976b-3eafc17081fb [pid 5825] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6209] chdir("./4" [pid 5828] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6209] <... chdir resumed>) = 0 [pid 5828] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./3/cgroup", [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6209] setpgid(0, 0) = 0 [pid 6209] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 6209] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 6209] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6209] write(3, "1000", 4) = 4 [pid 6209] close(3) = 0 [pid 6209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6209] write(1, "executing program\n", 18 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... write resumed>) = 18 [pid 5828] newfstatat(AT_FDCWD, "./3/file1", [pid 6209] memfd_create("syzkaller", 0 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] <... memfd_create resumed>) = 3 [pid 5828] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... mmap resumed>) = 0x7f980f800000 [pid 5828] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5828] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5828] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5828] close(4) = 0 [pid 5828] rmdir("./3/file1") = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5828] close(3) = 0 [pid 5828] rmdir("./3") = 0 [pid 5828] mkdir("./4", 0777) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5828] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5828] close(3) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 7 ./strace-static-x86_64: Process 6211 attached [pid 5825] unlink("./3/cgroup" [pid 6211] set_robust_list(0x555556f266a0, 24 [pid 5825] <... unlink resumed>) = 0 [pid 6211] <... set_robust_list resumed>) = 0 [ 79.041417][ T5825] BTRFS info (device loop0): last unmount of filesystem aff34af3-6efd-40e3-abd6-5546962266e2 [pid 5825] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] chdir("./4" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./3/cgroup.cpu") = 0 [pid 5825] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./3/cgroup.net") = 0 [pid 5825] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./3/binderfs") = 0 [pid 5825] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] <... chdir resumed>) = 0 [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6211] setpgid(0, 0 [pid 6210] <... write resumed>) = 16777216 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6211] <... setpgid resumed>) = 0 [pid 6211] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6210] munmap(0x7f980f800000, 138412032 [pid 6211] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6211] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6211] write(3, "1000", 4) = 4 [pid 6211] close(3) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6211] write(1, "executing program\n", 18 [pid 6210] <... munmap resumed>) = 0 executing program [pid 6211] <... write resumed>) = 18 [pid 6211] memfd_create("syzkaller", 0) = 3 [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6210] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6210] <... openat resumed>) = 4 [ 79.319409][ T6210] loop2: detected capacity change from 0 to 32768 [pid 6210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6210] close(3) = 0 [pid 6210] close(4) = 0 [pid 6210] mkdir("./file1", 0777) = 0 [pid 6210] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5824] <... umount2 resumed>) = 0 [ 79.366789][ T6210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6210) [pid 5825] <... umount2 resumed>) = 0 [pid 5824] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./3/file1", [pid 5825] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./3/file1") = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./3") = 0 [pid 5824] mkdir("./4", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... openat resumed>) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6213 attached [pid 6213] set_robust_list(0x555556f266a0, 24 [pid 5824] <... clone resumed>, child_tidptr=0x555556f26690) = 7 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6213] chdir("./4") = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6213] setpgid(0, 0) = 0 [pid 6213] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6213] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6213] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] newfstatat(AT_FDCWD, "./3/file1", [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 executing program [pid 6213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] write(1, "executing program\n", 18) = 18 [pid 6213] memfd_create("syzkaller", 0) = 3 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 79.512592][ T6210] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.523010][ T6210] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.533350][ T6210] BTRFS info (device loop2): using free-space-tree [pid 5825] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6211] <... write resumed>) = 16777216 [pid 5825] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6211] munmap(0x7f980f800000, 138412032 [pid 5825] <... openat resumed>) = 4 [pid 6211] <... munmap resumed>) = 0 [pid 5825] newfstatat(4, "", [pid 6211] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6211] ioctl(4, LOOP_SET_FD, 3 [pid 5825] getdents64(4, [pid 6211] <... ioctl resumed>) = 0 [pid 5825] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, [pid 6211] close(3 [pid 5825] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 6211] <... close resumed>) = 0 [pid 5825] close(4 [pid 6211] close(4 [pid 5825] <... close resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 5825] rmdir("./3/file1" [pid 6211] mkdir("./file1", 0777 [pid 5825] <... rmdir resumed>) = 0 [pid 5825] getdents64(3, [pid 6211] <... mkdir resumed>) = 0 [pid 5825] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./3") = 0 [pid 5825] mkdir("./4", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 7 ./strace-static-x86_64: Process 6223 attached [pid 6223] set_robust_list(0x555556f266a0, 24) = 0 [pid 6223] chdir("./4") = 0 [ 79.663912][ T6211] loop4: detected capacity change from 0 to 32768 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6211] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6209] <... write resumed>) = 16777216 [ 79.732940][ T6211] BTRFS: device /dev/loop4 (7:4) using temp-fsid 7c24c70f-52a0-4c39-9a57-ebca525cff81 [ 79.752346][ T6211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (6211) [pid 6209] munmap(0x7f980f800000, 138412032) = 0 [pid 6223] <... prctl resumed>) = 0 [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6223] setpgid(0, 0executing program ) = 0 [pid 6223] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6223] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6223] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6223] write(3, "1000", 4) = 4 [pid 6223] close(3) = 0 [pid 6223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6223] write(1, "executing program\n", 18) = 18 [pid 6223] memfd_create("syzkaller", 0) = 3 [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 79.865500][ T6211] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.893766][ T6211] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 79.917752][ T6209] loop3: detected capacity change from 0 to 32768 [ 79.930926][ T6211] BTRFS info (device loop4): using free-space-tree [pid 6209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 6209] mkdir("./file1", 0777) = 0 [pid 6209] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [ 80.013104][ T6209] BTRFS: device /dev/loop3 (7:3) using temp-fsid 444bb1c5-8d0d-4131-9273-6b28c8495d37 [ 80.023964][ T6209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (6209) [pid 6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6213] <... write resumed>) = 16777216 [pid 6213] munmap(0x7f980f800000, 138412032) = 0 [pid 6210] <... mount resumed>) = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6210] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6213] <... openat resumed>) = 4 [pid 6210] <... openat resumed>) = 3 [pid 6213] ioctl(4, LOOP_SET_FD, 3 [pid 6210] chdir("./file1" [pid 6213] <... ioctl resumed>) = 0 [pid 6210] <... chdir resumed>) = 0 [pid 6213] close(3 [pid 6210] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6213] <... close resumed>) = 0 [pid 6210] <... openat resumed>) = 4 [pid 6213] close(4 [pid 6210] ioctl(4, LOOP_CLR_FD [pid 6213] <... close resumed>) = 0 [pid 6210] <... ioctl resumed>) = 0 [pid 6210] close(4) = 0 [pid 6210] truncate("./file1", 24066) = 0 [pid 6210] close(3) = 0 [pid 6210] close(4 [pid 6213] mkdir("./file1", 0777 [pid 6210] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6213] <... mkdir resumed>) = 0 [pid 6210] close(5 [pid 6213] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6210] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6210] close(6) = -1 EBADF (Bad file descriptor) [pid 6210] close(7) = -1 EBADF (Bad file descriptor) [pid 6210] close(8) = -1 EBADF (Bad file descriptor) [pid 6210] close(9) = -1 EBADF (Bad file descriptor) [pid 6210] close(10) = -1 EBADF (Bad file descriptor) [pid 6210] close(11) = -1 EBADF (Bad file descriptor) [pid 6210] close(12) = -1 EBADF (Bad file descriptor) [pid 6210] close(13) = -1 EBADF (Bad file descriptor) [pid 6210] close(14) = -1 EBADF (Bad file descriptor) [pid 6210] close(15) = -1 EBADF (Bad file descriptor) [pid 6210] close(16) = -1 EBADF (Bad file descriptor) [pid 6210] close(17) = -1 EBADF (Bad file descriptor) [pid 6210] close(18) = -1 EBADF (Bad file descriptor) [pid 6210] close(19) = -1 EBADF (Bad file descriptor) [pid 6210] close(20) = -1 EBADF (Bad file descriptor) [pid 6210] close(21) = -1 EBADF (Bad file descriptor) [pid 6210] close(22) = -1 EBADF (Bad file descriptor) [pid 6210] close(23) = -1 EBADF (Bad file descriptor) [pid 6210] close(24) = -1 EBADF (Bad file descriptor) [pid 6210] close(25) = -1 EBADF (Bad file descriptor) [pid 6210] close(26) = -1 EBADF (Bad file descriptor) [pid 6210] close(27) = -1 EBADF (Bad file descriptor) [pid 6210] close(28) = -1 EBADF (Bad file descriptor) [pid 6210] close(29) = -1 EBADF (Bad file descriptor) [pid 6210] exit_group(0) = ? [pid 6210] +++ exited with 0 +++ [pid 6223] <... write resumed>) = 16777216 [ 80.105853][ T6213] loop1: detected capacity change from 0 to 32768 [pid 6223] munmap(0x7f980f800000, 138412032) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 6223] <... openat resumed>) = 4 [pid 5826] <... restart_syscall resumed>) = 0 [pid 6223] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5826] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/cgroup") = 0 [pid 5826] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/cgroup.cpu") = 0 [pid 5826] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/cgroup.net") = 0 [pid 5826] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./4/binderfs") = 0 [ 80.169851][ T6213] BTRFS: device /dev/loop1 (7:1) using temp-fsid 988af63a-846d-49d6-be66-b9015d42ea44 [ 80.179908][ T6213] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (6213) [ 80.195086][ T6223] loop0: detected capacity change from 0 to 32768 [pid 5826] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6223] close(3) = 0 [pid 6223] close(4) = 0 [pid 6223] mkdir("./file1", 0777) = 0 [ 80.223860][ T6209] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.234847][ T6209] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.244000][ T6209] BTRFS info (device loop3): using free-space-tree [ 80.316327][ T6213] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.316551][ T6223] BTRFS: device /dev/loop0 (7:0) using temp-fsid f2e01c43-0fc5-4983-aa81-12ad59e5e4df [ 80.326597][ T6213] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 80.326629][ T6213] BTRFS info (device loop1): using free-space-tree [ 80.343021][ T5826] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.351819][ T6223] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6223) [ 80.409131][ T6223] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.422445][ T6223] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 80.441951][ T6223] BTRFS info (device loop0): using free-space-tree [pid 6223] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6209] <... mount resumed>) = 0 [pid 6209] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6209] chdir("./file1") = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6209] ioctl(4, LOOP_CLR_FD) = 0 [pid 6209] close(4) = 0 [pid 5826] <... umount2 resumed>) = 0 [pid 6209] truncate("./file1", 24066 [pid 5826] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6209] <... truncate resumed>) = 0 [pid 6209] close(3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... close resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./4/file1", [pid 6209] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6209] close(5 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6209] close(6) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 4 [pid 6211] <... mount resumed>) = 0 [pid 6209] close(7 [pid 5826] newfstatat(4, "", [pid 6211] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6211] <... openat resumed>) = 3 [pid 6209] close(8 [pid 5826] getdents64(4, [pid 6211] chdir("./file1" [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] <... chdir resumed>) = 0 [pid 6209] close(9 [pid 5826] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 6211] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] getdents64(4, [pid 6211] <... openat resumed>) = 4 [pid 6209] close(10 [pid 5826] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 6211] ioctl(4, LOOP_CLR_FD [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] close(4 [pid 6211] <... ioctl resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 6211] close(4 [pid 6209] close(11 [pid 5826] rmdir("./4/file1" [pid 6211] <... close resumed>) = 0 [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] truncate("./file1", 24066 [pid 6209] close(12 [pid 5826] <... rmdir resumed>) = 0 [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] <... truncate resumed>) = 0 [pid 6209] close(13 [pid 5826] getdents64(3, [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] close(14) = -1 EBADF (Bad file descriptor) [pid 5826] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 6209] close(15 [pid 5826] close(3) = 0 [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] rmdir("./4") = 0 [pid 5826] mkdir("./5", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6292 attached [pid 6292] set_robust_list(0x555556f266a0, 24 [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 8 [pid 6209] close(16 [pid 6292] <... set_robust_list resumed>) = 0 [pid 6292] chdir("./5" [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] close(17) = -1 EBADF (Bad file descriptor) [pid 6292] <... chdir resumed>) = 0 [pid 6211] close(3 [pid 6209] close(18 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6211] <... close resumed>) = 0 [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6292] setpgid(0, 0 [pid 6209] close(19 [pid 6292] <... setpgid resumed>) = 0 [pid 6211] close(4 [pid 6292] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6213] <... mount resumed>) = 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6209] close(20 [pid 6211] close(5 [pid 6213] <... openat resumed>) = 3 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(6 [pid 6209] close(21 [pid 6213] chdir("./file1" [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(7 [pid 6209] close(22 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(8 [pid 6209] close(23 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(9 [pid 6209] close(24 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(10 [pid 6209] close(25 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(11 [pid 6209] close(26 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] close(12 [pid 6209] close(27 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6213] <... chdir resumed>) = 0 [pid 6209] close(28 [pid 6211] close(13 [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6292] <... symlink resumed>) = 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] close(29 [pid 6213] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6209] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6213] <... openat resumed>) = 4 [pid 6213] ioctl(4, LOOP_CLR_FD [pid 6209] exit_group(0 [pid 6292] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6209] <... exit_group resumed>) = ? [pid 6213] <... ioctl resumed>) = 0 [pid 6209] +++ exited with 0 +++ [pid 6213] close(4 [pid 6211] close(14) = -1 EBADF (Bad file descriptor) [pid 6213] <... close resumed>) = 0 [pid 6213] truncate("./file1", 24066) = 0 [pid 6213] close(3) = 0 [pid 6213] close(4) = -1 EBADF (Bad file descriptor) [pid 6213] close(5) = -1 EBADF (Bad file descriptor) [pid 6213] close(6) = -1 EBADF (Bad file descriptor) [pid 6213] close(7) = -1 EBADF (Bad file descriptor) [pid 6213] close(8) = -1 EBADF (Bad file descriptor) [pid 6213] close(9) = -1 EBADF (Bad file descriptor) [pid 6213] close(10) = -1 EBADF (Bad file descriptor) [pid 6213] close(11) = -1 EBADF (Bad file descriptor) [pid 6213] close(12) = -1 EBADF (Bad file descriptor) [pid 6213] close(13) = -1 EBADF (Bad file descriptor) [pid 6213] close(14) = -1 EBADF (Bad file descriptor) [pid 6213] close(15) = -1 EBADF (Bad file descriptor) [pid 6213] close(16) = -1 EBADF (Bad file descriptor) [pid 6213] close(17) = -1 EBADF (Bad file descriptor) [pid 6213] close(18) = -1 EBADF (Bad file descriptor) [pid 6213] close(19) = -1 EBADF (Bad file descriptor) [pid 6213] close(20) = -1 EBADF (Bad file descriptor) [pid 6213] close(21) = -1 EBADF (Bad file descriptor) [pid 6213] close(22) = -1 EBADF (Bad file descriptor) [pid 6213] close(23) = -1 EBADF (Bad file descriptor) [pid 6213] close(24) = -1 EBADF (Bad file descriptor) [pid 6213] close(25) = -1 EBADF (Bad file descriptor) [pid 6213] close(26) = -1 EBADF (Bad file descriptor) [pid 6213] close(27) = -1 EBADF (Bad file descriptor) [pid 6213] close(28) = -1 EBADF (Bad file descriptor) [pid 6213] close(29) = -1 EBADF (Bad file descriptor) [pid 6213] exit_group(0) = ? [pid 6292] <... symlink resumed>) = 0 [pid 6213] +++ exited with 0 +++ [pid 6211] close(15 [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6292] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6211] close(16 [pid 5824] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6292] <... symlink resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5824] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", [pid 6211] close(17 [pid 6292] write(3, "1000", 4 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6292] <... write resumed>) = 4 [pid 6292] close(3 [pid 5824] getdents64(3, [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6292] <... close resumed>) = 0 [pid 6211] close(18 [pid 5827] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6223] <... mount resumed>) = 0 [pid 6223] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6223] chdir("./file1") = 0 [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6223] ioctl(4, LOOP_CLR_FD) = 0 [pid 6223] close(4 [pid 6211] close(19 [pid 5827] <... openat resumed>) = 3 [pid 5824] newfstatat(AT_FDCWD, "./4/cgroup", [pid 6292] symlink("/dev/binderfs", "./binderfs" [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6223] <... close resumed>) = 0 [pid 6292] <... symlink resumed>) = 0 [pid 6223] truncate("./file1", 24066 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6292] write(1, "executing program\n", 18 [pid 5827] newfstatat(3, "", executing program [pid 6292] <... write resumed>) = 18 [pid 6223] <... truncate resumed>) = 0 [pid 6211] close(20 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] unlink("./4/cgroup" [pid 6292] memfd_create("syzkaller", 0 [pid 6223] close(3 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] getdents64(3, [pid 5824] <... unlink resumed>) = 0 [pid 6292] <... memfd_create resumed>) = 3 [pid 6211] close(21 [pid 5827] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] close(22 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] <... mmap resumed>) = 0x7f980f800000 [pid 6223] <... close resumed>) = 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6211] close(23 [pid 5824] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] unlink("./4/cgroup" [pid 5824] unlink("./4/cgroup.cpu" [pid 6223] close(4 [pid 6211] close(24 [pid 5827] <... unlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 6223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6223] close(5) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 6211] close(25 [pid 5827] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 6223] close(6) = -1 EBADF (Bad file descriptor) [pid 6223] close(7) = -1 EBADF (Bad file descriptor) [pid 6223] close(8) = -1 EBADF (Bad file descriptor) [pid 6223] close(9) = -1 EBADF (Bad file descriptor) [pid 6223] close(10) = -1 EBADF (Bad file descriptor) [pid 6223] close(11) = -1 EBADF (Bad file descriptor) [pid 6223] close(12) = -1 EBADF (Bad file descriptor) [pid 6223] close(13) = -1 EBADF (Bad file descriptor) [pid 6223] close(14) = -1 EBADF (Bad file descriptor) [pid 6223] close(15) = -1 EBADF (Bad file descriptor) [pid 6223] close(16) = -1 EBADF (Bad file descriptor) [pid 6223] close(17) = -1 EBADF (Bad file descriptor) [pid 6223] close(18) = -1 EBADF (Bad file descriptor) [pid 6223] close(19) = -1 EBADF (Bad file descriptor) [pid 6223] close(20) = -1 EBADF (Bad file descriptor) [pid 6223] close(21) = -1 EBADF (Bad file descriptor) [pid 6223] close(22) = -1 EBADF (Bad file descriptor) [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6223] close(23 [pid 6211] close(26 [pid 6223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6223] close(24 [pid 6211] close(27 [pid 6223] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6223] close(25) = -1 EBADF (Bad file descriptor) [pid 6223] close(26) = -1 EBADF (Bad file descriptor) [pid 6223] close(27) = -1 EBADF (Bad file descriptor) [pid 6223] close(28) = -1 EBADF (Bad file descriptor) [pid 6223] close(29) = -1 EBADF (Bad file descriptor) [pid 6223] exit_group(0) = ? [pid 6223] +++ exited with 0 +++ [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] unlink("./4/cgroup.cpu" [pid 6211] close(28 [pid 5827] <... unlink resumed>) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./4/cgroup.net" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6211] close(29 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5825] <... restart_syscall resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6211] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5824] unlink("./4/binderfs" [pid 6211] exit_group(0) = ? [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 5824] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] +++ exited with 0 +++ [pid 5825] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] unlink("./4/cgroup.net" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... unlink resumed>) = 0 [pid 5825] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... openat resumed>) = 3 [pid 5827] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5825] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] unlink("./4/binderfs") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5827] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5828] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5825] unlink("./4/cgroup" [pid 5828] newfstatat(3, "", [pid 5825] <... unlink resumed>) = 0 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] getdents64(3, [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5828] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./4/cgroup.cpu") = 0 [pid 5828] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] unlink("./4/cgroup") = 0 [pid 5825] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] unlink("./4/cgroup.net" [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5825] <... unlink resumed>) = 0 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] unlink("./4/cgroup.cpu" [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5828] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] unlink("./4/binderfs" [pid 5828] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5825] <... unlink resumed>) = 0 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] unlink("./4/cgroup.net") = 0 [pid 5828] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 80.956520][ T5824] BTRFS info (device loop1): last unmount of filesystem 988af63a-846d-49d6-be66-b9015d42ea44 [ 80.984670][ T5827] BTRFS info (device loop3): last unmount of filesystem 444bb1c5-8d0d-4131-9273-6b28c8495d37 [pid 5828] unlink("./4/binderfs") = 0 [ 81.102727][ T5825] BTRFS info (device loop0): last unmount of filesystem f2e01c43-0fc5-4983-aa81-12ad59e5e4df [ 81.149952][ T5828] BTRFS info (device loop4): last unmount of filesystem 7c24c70f-52a0-4c39-9a57-ebca525cff81 [pid 5828] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5827] <... umount2 resumed>) = 0 [pid 5827] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./4/file1") = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./4") = 0 [pid 5827] mkdir("./5", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = 0 [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 8 ./strace-static-x86_64: Process 6300 attached [pid 5824] <... umount2 resumed>) = 0 [pid 6300] set_robust_list(0x555556f266a0, 24 [pid 5824] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] <... set_robust_list resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] chdir("./5" [pid 5824] newfstatat(AT_FDCWD, "./4/file1", [pid 6300] <... chdir resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5824] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] <... prctl resumed>) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] setpgid(0, 0 [pid 5824] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6300] <... setpgid resumed>) = 0 [pid 5824] <... openat resumed>) = 4 [pid 6300] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 6300] <... symlink resumed>) = 0 [pid 5824] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 6300] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5824] getdents64(4, [pid 6300] <... symlink resumed>) = 0 [pid 5824] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 6300] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5824] close(4 [pid 6300] <... symlink resumed>) = 0 [pid 5824] <... close resumed>) = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] rmdir("./4/file1" [pid 6300] <... openat resumed>) = 3 [pid 5824] <... rmdir resumed>) = 0 [pid 5824] getdents64(3, [pid 6300] write(3, "1000", 4 [pid 5824] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 6300] <... write resumed>) = 4 [pid 5824] close(3 [pid 6300] close(3 [pid 5824] <... close resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 5824] rmdir("./4" [pid 6300] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... rmdir resumed>) = 0 [pid 5824] mkdir("./5", 0777 [pid 6300] <... symlink resumed>) = 0 [pid 5824] <... mkdir resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program [pid 6300] write(1, "executing program\n", 18 [pid 5824] <... openat resumed>) = 3 [pid 6300] <... write resumed>) = 18 [pid 5824] ioctl(3, LOOP_CLR_FD) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 5824] close(3) = 0 [pid 6300] <... memfd_create resumed>) = 3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... clone resumed>, child_tidptr=0x555556f26690) = 8 [pid 5825] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6301 attached [pid 5828] <... umount2 resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] set_robust_list(0x555556f266a0, 24 [pid 5828] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./4/file1", [pid 6301] <... set_robust_list resumed>) = 0 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] newfstatat(AT_FDCWD, "./4/file1", [pid 6301] chdir("./5" [pid 5825] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... chdir resumed>) = 0 [pid 5828] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5828] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6301] <... prctl resumed>) = 0 [pid 6301] setpgid(0, 0 [pid 5828] <... openat resumed>) = 4 [pid 5825] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6301] <... setpgid resumed>) = 0 [pid 5828] newfstatat(4, "", [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4 [pid 6301] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... close resumed>) = 0 [pid 5825] rmdir("./4/file1") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./4") = 0 [pid 5825] mkdir("./5", 0777 [pid 5828] getdents64(4, [pid 6301] <... symlink resumed>) = 0 [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] <... mkdir resumed>) = 0 [pid 5828] getdents64(4, [pid 6301] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6301] <... symlink resumed>) = 0 [pid 5828] close(4./strace-static-x86_64: Process 6302 attached [pid 6301] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5828] <... close resumed>) = 0 [pid 6302] set_robust_list(0x555556f266a0, 24 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 8 [pid 6302] <... set_robust_list resumed>) = 0 [pid 6302] chdir("./5") = 0 [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6302] setpgid(0, 0 [pid 6301] <... symlink resumed>) = 0 [pid 5828] rmdir("./4/file1" [pid 6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6302] <... setpgid resumed>) = 0 [pid 6302] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 6301] <... openat resumed>) = 3 [pid 5828] <... rmdir resumed>) = 0 [pid 6301] write(3, "1000", 4 [pid 5828] getdents64(3, [pid 6301] <... write resumed>) = 4 [pid 6301] close(3 [pid 5828] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 6301] <... close resumed>) = 0 [pid 6301] symlink("/dev/binderfs", "./binderfs" [pid 5828] close(3 [pid 6302] <... symlink resumed>) = 0 [pid 6301] <... symlink resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 6301] write(1, "executing program\n", 18 [pid 5828] rmdir("./4"executing program ) = 0 [pid 6301] <... write resumed>) = 18 [pid 5828] mkdir("./5", 0777) = 0 [pid 6302] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 6301] memfd_create("syzkaller", 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6302] <... symlink resumed>) = 0 [pid 5828] <... openat resumed>) = 3 [pid 5828] ioctl(3, LOOP_CLR_FDexecuting program [pid 6302] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 6301] <... memfd_create resumed>) = 3 [pid 5828] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5828] close(3 [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6302] <... symlink resumed>) = 0 [pid 6301] <... mmap resumed>) = 0x7f980f800000 [pid 5828] <... close resumed>) = 0 [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6302] write(3, "1000", 4) = 4 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6302] close(3) = 0 [pid 6302] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6302] write(1, "executing program\n", 18) = 18 [pid 6302] memfd_create("syzkaller", 0) = 3 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 ./strace-static-x86_64: Process 6303 attached [pid 6303] set_robust_list(0x555556f266a0, 24 [pid 5828] <... clone resumed>, child_tidptr=0x555556f26690) = 8 [pid 6303] <... set_robust_list resumed>) = 0 [pid 6303] chdir("./5") = 0 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6303] setpgid(0, 0) = 0 [pid 6303] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6303] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6303] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6303] write(3, "1000", 4) = 4 [pid 6303] close(3) = 0 [pid 6303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6303] write(1, "executing program\n", 18executing program ) = 18 [pid 6303] memfd_create("syzkaller", 0) = 3 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6292] <... write resumed>) = 16777216 [pid 6292] munmap(0x7f980f800000, 138412032 [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6292] <... munmap resumed>) = 0 [pid 6292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 6302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6292] <... ioctl resumed>) = 0 [pid 6292] close(3) = 0 [pid 6292] close(4) = 0 [pid 6292] mkdir("./file1", 0777) = 0 [ 81.882410][ T6292] loop2: detected capacity change from 0 to 32768 [pid 6292] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [ 81.942756][ T6292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6292) [ 82.007386][ T6292] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.026721][ T6292] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [pid 6301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 82.053921][ T3179] cfg80211: failed to load regulatory.db [ 82.062449][ T6292] BTRFS info (device loop2): using free-space-tree [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6302] <... write resumed>) = 16777216 [pid 6302] munmap(0x7f980f800000, 138412032) = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6302] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6302] close(3) = 0 [pid 6302] close(4) = 0 [pid 6302] mkdir("./file1", 0777) = 0 [pid 6302] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6300] <... write resumed>) = 16777216 [ 82.263859][ T6302] loop0: detected capacity change from 0 to 32768 [ 82.285818][ T6302] BTRFS: device /dev/loop0 (7:0) using temp-fsid 07d3086d-5c07-40e1-8cb4-b5138af5c157 [ 82.295559][ T6302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6302) [pid 6300] munmap(0x7f980f800000, 138412032) = 0 [pid 6301] <... write resumed>) = 16777216 [pid 6301] munmap(0x7f980f800000, 138412032 [pid 6300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6300] ioctl(4, LOOP_SET_FD, 3 [pid 6301] <... munmap resumed>) = 0 [ 82.405437][ T6300] loop3: detected capacity change from 0 to 32768 [ 82.434065][ T6302] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 6300] <... ioctl resumed>) = 0 [pid 6301] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6300] close(3) = 0 [pid 6300] close(4 [pid 6301] <... openat resumed>) = 4 [pid 6300] <... close resumed>) = 0 [pid 6300] mkdir("./file1", 0777) = 0 [pid 6300] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6301] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6301] close(3) = 0 [ 82.453186][ T6302] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.483216][ T6300] BTRFS: device /dev/loop3 (7:3) using temp-fsid 034fede8-2f1e-41e0-a861-f7767539f40c [ 82.495625][ T6301] loop1: detected capacity change from 0 to 32768 [pid 6301] close(4) = 0 [pid 6301] mkdir("./file1", 0777) = 0 [pid 6301] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6292] <... mount resumed>) = 0 [pid 6292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6292] chdir("./file1") = 0 [ 82.506367][ T6300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (6300) [pid 6292] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6292] ioctl(4, LOOP_CLR_FD) = 0 [pid 6292] close(4) = 0 [pid 6292] truncate("./file1", 24066) = 0 [pid 6292] close(3) = 0 [pid 6292] close(4) = -1 EBADF (Bad file descriptor) [pid 6292] close(5) = -1 EBADF (Bad file descriptor) [pid 6292] close(6) = -1 EBADF (Bad file descriptor) [pid 6292] close(7) = -1 EBADF (Bad file descriptor) [pid 6292] close(8) = -1 EBADF (Bad file descriptor) [pid 6292] close(9) = -1 EBADF (Bad file descriptor) [pid 6292] close(10) = -1 EBADF (Bad file descriptor) [pid 6292] close(11) = -1 EBADF (Bad file descriptor) [pid 6292] close(12) = -1 EBADF (Bad file descriptor) [pid 6292] close(13) = -1 EBADF (Bad file descriptor) [pid 6292] close(14) = -1 EBADF (Bad file descriptor) [pid 6292] close(15) = -1 EBADF (Bad file descriptor) [pid 6292] close(16) = -1 EBADF (Bad file descriptor) [pid 6292] close(17) = -1 EBADF (Bad file descriptor) [pid 6292] close(18) = -1 EBADF (Bad file descriptor) [pid 6292] close(19) = -1 EBADF (Bad file descriptor) [pid 6292] close(20) = -1 EBADF (Bad file descriptor) [pid 6292] close(21) = -1 EBADF (Bad file descriptor) [ 82.552741][ T6302] BTRFS info (device loop0): using free-space-tree [pid 6292] close(22) = -1 EBADF (Bad file descriptor) [pid 6292] close(23) = -1 EBADF (Bad file descriptor) [pid 6292] close(24) = -1 EBADF (Bad file descriptor) [pid 6292] close(25 [pid 6303] <... write resumed>) = 16777216 [pid 6292] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6292] close(26 [pid 6303] munmap(0x7f980f800000, 138412032 [pid 6292] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6292] close(27) = -1 EBADF (Bad file descriptor) [pid 6292] close(28) = -1 EBADF (Bad file descriptor) [pid 6292] close(29) = -1 EBADF (Bad file descriptor) [pid 6292] exit_group(0) = ? [pid 6292] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5826] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5826] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6303] <... munmap resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6303] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5826] <... openat resumed>) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./5/cgroup") = 0 [pid 5826] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./5/cgroup.cpu") = 0 [pid 5826] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6303] <... openat resumed>) = 4 [pid 5826] unlink("./5/cgroup.net" [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 5826] <... unlink resumed>) = 0 [pid 5826] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./5/binderfs") = 0 [pid 5826] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6303] <... ioctl resumed>) = 0 [ 82.635221][ T6303] loop4: detected capacity change from 0 to 32768 [ 82.654526][ T6301] BTRFS: device /dev/loop1 (7:1) using temp-fsid a508f4bb-df8d-47b8-a386-bff30dd5c732 [ 82.665238][ T6300] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 6303] close(3) = 0 [pid 6303] close(4) = 0 [pid 6303] mkdir("./file1", 0777) = 0 [ 82.665793][ T6301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (6301) [ 82.693944][ T6300] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 82.711855][ T6300] BTRFS info (device loop3): using free-space-tree [ 82.721007][ T5826] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.791264][ T6303] BTRFS: device /dev/loop4 (7:4) using temp-fsid 9cd60614-f42a-4641-830a-0d7bdc622720 [ 82.805589][ T6303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (6303) [pid 6303] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6302] <... mount resumed>) = 0 [ 82.866285][ T6301] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.882478][ T6301] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 82.891585][ T6301] BTRFS info (device loop1): using free-space-tree [pid 6302] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6302] chdir("./file1") = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6302] ioctl(4, LOOP_CLR_FD) = 0 [pid 6302] close(4) = 0 [ 82.914275][ T6303] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.939811][ T6303] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [pid 6302] truncate("./file1", 24066) = 0 [pid 6302] close(3) = 0 [pid 6302] close(4) = -1 EBADF (Bad file descriptor) [pid 6302] close(5) = -1 EBADF (Bad file descriptor) [pid 6302] close(6) = -1 EBADF (Bad file descriptor) [pid 6302] close(7) = -1 EBADF (Bad file descriptor) [pid 6302] close(8) = -1 EBADF (Bad file descriptor) [pid 6302] close(9) = -1 EBADF (Bad file descriptor) [pid 6302] close(10) = -1 EBADF (Bad file descriptor) [pid 6302] close(11) = -1 EBADF (Bad file descriptor) [pid 6302] close(12) = -1 EBADF (Bad file descriptor) [pid 6302] close(13) = -1 EBADF (Bad file descriptor) [pid 6302] close(14) = -1 EBADF (Bad file descriptor) [pid 6302] close(15) = -1 EBADF (Bad file descriptor) [pid 6302] close(16) = -1 EBADF (Bad file descriptor) [pid 6302] close(17) = -1 EBADF (Bad file descriptor) [pid 6302] close(18) = -1 EBADF (Bad file descriptor) [ 82.983515][ T6303] BTRFS info (device loop4): using free-space-tree [pid 6302] close(19) = -1 EBADF (Bad file descriptor) [pid 6302] close(20) = -1 EBADF (Bad file descriptor) [pid 6302] close(21) = -1 EBADF (Bad file descriptor) [pid 6302] close(22) = -1 EBADF (Bad file descriptor) [pid 6302] close(23) = -1 EBADF (Bad file descriptor) [pid 6302] close(24) = -1 EBADF (Bad file descriptor) [pid 6302] close(25) = -1 EBADF (Bad file descriptor) [pid 6302] close(26) = -1 EBADF (Bad file descriptor) [pid 6302] close(27) = -1 EBADF (Bad file descriptor) [pid 6302] close(28) = -1 EBADF (Bad file descriptor) [pid 6300] <... mount resumed>) = 0 [pid 6302] close(29) = -1 EBADF (Bad file descriptor) [pid 6302] exit_group(0) = ? [pid 6302] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=21 /* 0.21 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...> [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5825] <... restart_syscall resumed>) = 0 [pid 5825] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6300] <... openat resumed>) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, [pid 6300] chdir("./file1" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 6300] <... chdir resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./5/file1", [pid 5825] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5825] unlink("./5/cgroup" [pid 6300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5826] <... openat resumed>) = 4 [pid 5825] <... unlink resumed>) = 0 [pid 6300] <... openat resumed>) = 4 [pid 5825] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] ioctl(4, LOOP_CLR_FD [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] <... ioctl resumed>) = 0 [pid 6300] close(4 [pid 5826] newfstatat(4, "", [pid 5825] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 6300] <... close resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6300] truncate("./file1", 24066 [pid 5826] getdents64(4, [pid 5825] unlink("./5/cgroup.cpu" [pid 5826] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] <... unlink resumed>) = 0 [pid 5826] getdents64(4, [pid 5825] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] <... truncate resumed>) = 0 [pid 5826] <... getdents64 resumed>0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] close(3 [pid 5826] close(4 [pid 6300] <... close resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 6300] close(4 [pid 5826] rmdir("./5/file1" [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] close(5 [pid 5826] <... rmdir resumed>) = 0 [pid 5825] unlink("./5/cgroup.net" [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] getdents64(3, [pid 5825] <... unlink resumed>) = 0 [pid 6300] close(6 [pid 5826] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] close(3 [pid 6300] close(7) = -1 EBADF (Bad file descriptor) [pid 6300] close(8 [pid 5826] <... close resumed>) = 0 [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] rmdir("./5" [pid 5825] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5826] <... rmdir resumed>) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6300] close(9 [pid 5826] mkdir("./6", 0777 [pid 5825] unlink("./5/binderfs") = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5825] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] <... mount resumed>) = 0 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... openat resumed>) = 3 [pid 6301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5826] ioctl(3, LOOP_CLR_FD [pid 6300] close(10 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] close(3 [pid 6301] <... openat resumed>) = 3 [pid 6301] chdir("./file1") = 0 [pid 6301] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6301] ioctl(4, LOOP_CLR_FD) = 0 [pid 5826] <... close resumed>) = 0 [pid 6301] close(4) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6300] close(11 [pid 6301] truncate("./file1", 24066) = 0 ./strace-static-x86_64: Process 6384 attached [pid 6384] set_robust_list(0x555556f266a0, 24 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 9 [pid 6384] <... set_robust_list resumed>) = 0 [pid 6384] chdir("./6" [pid 6300] close(12 [pid 6384] <... chdir resumed>) = 0 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6301] close(3 [pid 6300] close(13 [pid 6384] <... prctl resumed>) = 0 [pid 6384] setpgid(0, 0) = 0 [pid 6384] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] close(14) = -1 EBADF (Bad file descriptor) [pid 6384] <... symlink resumed>) = 0 [pid 6300] close(15) = -1 EBADF (Bad file descriptor) [pid 6300] close(16) = -1 EBADF (Bad file descriptor) [pid 6300] close(17) = -1 EBADF (Bad file descriptor) [pid 6300] close(18 [pid 6384] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 6384] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6300] close(19 [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... openat resumed>) = 3 [pid 6300] close(20 [pid 6384] write(3, "1000", 4 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... write resumed>) = 4 [pid 6300] close(21 [pid 6384] close(3 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... close resumed>) = 0 [pid 6300] close(22 [pid 6384] symlink("/dev/binderfs", "./binderfs" [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... symlink resumed>) = 0 [pid 6300] close(23 [pid 6384] write(1, "executing program\n", 18 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... write resumed>) = 18 [pid 6300] close(24 [pid 6384] memfd_create("syzkaller", 0 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... memfd_create resumed>) = 3 [pid 6300] close(25 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] <... mmap resumed>) = 0x7f980f800000 [pid 6300] close(26) = -1 EBADF (Bad file descriptor) [pid 6300] close(27) = -1 EBADF (Bad file descriptor) [pid 6300] close(28) = -1 EBADF (Bad file descriptor) [pid 6300] close(29) = -1 EBADF (Bad file descriptor) [pid 6300] exit_group(0) = ? [pid 6300] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 6301] <... close resumed>) = 0 [pid 6301] close(4) = -1 EBADF (Bad file descriptor) [pid 6301] close(5) = -1 EBADF (Bad file descriptor) [pid 6301] close(6) = -1 EBADF (Bad file descriptor) [pid 6301] close(7) = -1 EBADF (Bad file descriptor) [pid 6301] close(8) = -1 EBADF (Bad file descriptor) [pid 6301] close(9) = -1 EBADF (Bad file descriptor) [pid 6301] close(10 [pid 6303] <... mount resumed>) = 0 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6301] close(11 [pid 6303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6303] chdir("./file1") = 0 [pid 6303] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6303] ioctl(4, LOOP_CLR_FD) = 0 [pid 6303] close(4) = 0 [pid 6303] truncate("./file1", 24066) = 0 [pid 6303] close(3) = 0 [pid 6303] close(4) = -1 EBADF (Bad file descriptor) [pid 6303] close(5) = -1 EBADF (Bad file descriptor) [pid 6303] close(6) = -1 EBADF (Bad file descriptor) [pid 6303] close(7) = -1 EBADF (Bad file descriptor) [pid 6303] close(8) = -1 EBADF (Bad file descriptor) [pid 6303] close(9) = -1 EBADF (Bad file descriptor) [pid 6303] close(10) = -1 EBADF (Bad file descriptor) [pid 6303] close(11) = -1 EBADF (Bad file descriptor) [pid 6303] close(12) = -1 EBADF (Bad file descriptor) [pid 6303] close(13) = -1 EBADF (Bad file descriptor) [pid 6303] close(14) = -1 EBADF (Bad file descriptor) [pid 6303] close(15 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6303] close(16) = -1 EBADF (Bad file descriptor) [pid 6303] close(17) = -1 EBADF (Bad file descriptor) [pid 6303] close(18) = -1 EBADF (Bad file descriptor) [pid 6303] close(19) = -1 EBADF (Bad file descriptor) [pid 6303] close(20) = -1 EBADF (Bad file descriptor) [pid 6303] close(21) = -1 EBADF (Bad file descriptor) [pid 6303] close(22) = -1 EBADF (Bad file descriptor) [pid 6303] close(23) = -1 EBADF (Bad file descriptor) [pid 6303] close(24) = -1 EBADF (Bad file descriptor) [pid 6303] close(25) = -1 EBADF (Bad file descriptor) [ 83.244234][ T5825] BTRFS info (device loop0): last unmount of filesystem 07d3086d-5c07-40e1-8cb4-b5138af5c157 [pid 6303] close(26) = -1 EBADF (Bad file descriptor) [pid 6303] close(27) = -1 EBADF (Bad file descriptor) [pid 6303] close(28) = -1 EBADF (Bad file descriptor) [pid 6303] close(29) = -1 EBADF (Bad file descriptor) [pid 6303] exit_group(0 [pid 6301] close(12 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6301] close(13 [pid 5827] <... openat resumed>) = 3 [pid 6303] <... exit_group resumed>) = ? [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(3, "", [pid 6303] +++ exited with 0 +++ [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5828] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5828] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5828] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./5/cgroup") = 0 [pid 5828] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./5/cgroup.cpu") = 0 [pid 5828] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./5/cgroup.net") = 0 [pid 5828] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5828] unlink("./5/binderfs") = 0 [pid 5828] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] close(14 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] getdents64(3, [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6301] close(15 [pid 5827] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] close(16) = -1 EBADF (Bad file descriptor) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] close(17) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./5/cgroup", [pid 6301] close(18) = -1 EBADF (Bad file descriptor) [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] close(19 [pid 5827] unlink("./5/cgroup" [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... unlink resumed>) = 0 [pid 6301] close(20 [pid 5827] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] close(21 [pid 5827] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6301] close(22 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] unlink("./5/cgroup.cpu" [pid 6301] close(23) = -1 EBADF (Bad file descriptor) [pid 5827] <... unlink resumed>) = 0 [pid 6301] close(24) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] close(25 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 83.511288][ T5828] BTRFS info (device loop4): last unmount of filesystem 9cd60614-f42a-4641-830a-0d7bdc622720 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 6301] close(26 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] unlink("./5/cgroup.net" [pid 6301] close(27 [pid 5827] <... unlink resumed>) = 0 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] close(28 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] newfstatat(AT_FDCWD, "./5/binderfs", [pid 6301] close(29 [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] unlink("./5/binderfs" [pid 6301] exit_group(0 [pid 5827] <... unlink resumed>) = 0 [pid 6301] <... exit_group resumed>) = ? [pid 5827] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6301] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./5/cgroup") = 0 [pid 5824] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./5/cgroup.cpu") = 0 [pid 5824] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./5/cgroup.net") = 0 [pid 5824] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5825] <... umount2 resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./5/file1") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./5") = 0 [pid 5825] mkdir("./6", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5824] unlink("./5/binderfs" [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] <... unlink resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 9 [pid 5824] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6388 attached [pid 6388] set_robust_list(0x555556f266a0, 24) = 0 [ 83.643244][ T5827] BTRFS info (device loop3): last unmount of filesystem 034fede8-2f1e-41e0-a861-f7767539f40c executing program [pid 6388] chdir("./6") = 0 [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6388] setpgid(0, 0) = 0 [pid 6388] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6388] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6388] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6388] write(3, "1000", 4) = 4 [pid 6388] close(3) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6388] write(1, "executing program\n", 18) = 18 [pid 6388] memfd_create("syzkaller", 0) = 3 [pid 6388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 83.733644][ T5824] BTRFS info (device loop1): last unmount of filesystem a508f4bb-df8d-47b8-a386-bff30dd5c732 [pid 6384] <... write resumed>) = 16777216 [pid 6384] munmap(0x7f980f800000, 138412032) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6384] close(3) = 0 [pid 6384] close(4) = 0 [pid 6384] mkdir("./file1", 0777) = 0 [ 83.829344][ T6384] loop2: detected capacity change from 0 to 32768 [ 83.852022][ T6384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6384) [ 83.943716][ T6384] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.962319][ T6384] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 83.982152][ T6384] BTRFS info (device loop2): using free-space-tree [pid 6384] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 5828] <... umount2 resumed>) = 0 [pid 5828] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5828] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5828] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5828] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5828] close(4) = 0 [pid 5828] rmdir("./5/file1") = 0 [pid 5828] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5828] close(3) = 0 [pid 5828] rmdir("./5") = 0 [pid 5828] mkdir("./6", 0777) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5828] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5828] close(3) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 9 ./strace-static-x86_64: Process 6403 attached [pid 6403] set_robust_list(0x555556f266a0, 24) = 0 [pid 6403] chdir("./6") = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6403] setpgid(0, 0) = 0 [pid 6403] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6403] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5827] <... umount2 resumed>) = 0 [pid 6403] <... symlink resumed>) = 0 [pid 5827] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6403] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6384] <... mount resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./5/file1", [pid 6403] write(3, "1000", 4 [pid 6384] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6384] chdir("./file1" [pid 6403] <... write resumed>) = 4 [pid 6384] <... chdir resumed>) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_CLR_FD) = 0 [pid 6384] close(4) = 0 [pid 6384] truncate("./file1", 24066 [pid 6403] close(3 [pid 6384] <... truncate resumed>) = 0 [pid 6384] close(3) = 0 [pid 6384] close(4) = -1 EBADF (Bad file descriptor) [pid 6384] close(5) = -1 EBADF (Bad file descriptor) [pid 6384] close(6) = -1 EBADF (Bad file descriptor) [pid 6384] close(7) = -1 EBADF (Bad file descriptor) [pid 6384] close(8) = -1 EBADF (Bad file descriptor) [pid 6384] close(9) = -1 EBADF (Bad file descriptor) [pid 6384] close(10) = -1 EBADF (Bad file descriptor) [pid 6384] close(11) = -1 EBADF (Bad file descriptor) [pid 6384] close(12) = -1 EBADF (Bad file descriptor) [pid 6384] close(13) = -1 EBADF (Bad file descriptor) [pid 6384] close(14) = -1 EBADF (Bad file descriptor) [pid 6384] close(15) = -1 EBADF (Bad file descriptor) [pid 6384] close(16) = -1 EBADF (Bad file descriptor) [pid 6384] close(17) = -1 EBADF (Bad file descriptor) [pid 6384] close(18) = -1 EBADF (Bad file descriptor) [pid 6384] close(19) = -1 EBADF (Bad file descriptor) [pid 6384] close(20) = -1 EBADF (Bad file descriptor) [pid 6384] close(21) = -1 EBADF (Bad file descriptor) [pid 6384] close(22) = -1 EBADF (Bad file descriptor) [pid 6384] close(23) = -1 EBADF (Bad file descriptor) [pid 6384] close(24) = -1 EBADF (Bad file descriptor) [pid 6384] close(25) = -1 EBADF (Bad file descriptor) [pid 6384] close(26) = -1 EBADF (Bad file descriptor) [pid 6384] close(27) = -1 EBADF (Bad file descriptor) [pid 6384] close(28) = -1 EBADF (Bad file descriptor) [pid 6384] close(29 [pid 6403] <... close resumed>) = 0 [pid 6384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6384] exit_group(0) = ? [pid 6403] symlink("/dev/binderfs", "./binderfs" [pid 6384] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=34 /* 0.34 s */} --- [pid 5824] <... umount2 resumed>) = 0 [pid 5826] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./6/cgroup") = 0 [pid 5826] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./6/cgroup.cpu" [pid 6403] <... symlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5826] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./6/cgroup.net") = 0 [pid 5826] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6403] write(1, "executing program\n", 18 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./6/binderfs" [pid 5824] newfstatat(AT_FDCWD, "./5/file1", [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program ) = -1 EINVAL (Invalid argument) [pid 6403] <... write resumed>) = 18 [pid 5827] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6403] memfd_create("syzkaller", 0 [pid 5824] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./5/file1") = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./5") = 0 [pid 6403] <... memfd_create resumed>) = 3 [pid 5827] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] mkdir("./6", 0777) = 0 [pid 6403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] close(3 [pid 6403] <... mmap resumed>) = 0x7f980f800000 [pid 5827] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] <... close resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6406 attached [pid 6406] set_robust_list(0x555556f266a0, 24 [pid 5824] <... clone resumed>, child_tidptr=0x555556f26690) = 9 [pid 6406] <... set_robust_list resumed>) = 0 [pid 6406] chdir("./6") = 0 [pid 6406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 84.220936][ T5826] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 6406] setpgid(0, 0executing program ) = 0 [pid 5827] <... openat resumed>) = 4 [pid 6406] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6406] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6406] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6406] write(3, "1000", 4) = 4 [pid 6406] close(3) = 0 [pid 6406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6406] write(1, "executing program\n", 18) = 18 [pid 6406] memfd_create("syzkaller", 0) = 3 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./5/file1") = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./5") = 0 [pid 5827] mkdir("./6", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f26690) = 9 ./strace-static-x86_64: Process 6407 attached [pid 6388] <... write resumed>) = 16777216 [pid 6407] set_robust_list(0x555556f266a0, 24 [pid 6388] munmap(0x7f980f800000, 138412032 [pid 6407] <... set_robust_list resumed>) = 0 [pid 6388] <... munmap resumed>) = 0 [pid 6407] chdir("./6" [pid 6388] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6407] <... chdir resumed>) = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6388] <... openat resumed>) = 4 [pid 6407] <... prctl resumed>) = 0 [pid 6388] ioctl(4, LOOP_SET_FD, 3 [pid 6407] setpgid(0, 0) = 0 [pid 6407] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 6388] <... ioctl resumed>) = 0 [pid 6407] <... symlink resumed>) = 0 [pid 6388] close(3 [pid 6407] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 6388] <... close resumed>) = 0 [pid 6407] <... symlink resumed>) = 0 [pid 6388] close(4 [pid 6407] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 6388] <... close resumed>) = 0 [pid 6388] mkdir("./file1", 0777) = 0 [ 84.408196][ T6388] loop0: detected capacity change from 0 to 32768 [pid 6388] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6407] <... symlink resumed>) = 0 [pid 6403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6407] write(3, "1000", 4) = 4 [pid 6407] close(3) = 0 [pid 6407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6407] write(1, "executing program\n", 18executing program ) = 18 [pid 6407] memfd_create("syzkaller", 0) = 3 [pid 6407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [ 84.453435][ T6388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6388) [ 84.515522][ T6388] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.562339][ T6388] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 84.571190][ T6388] BTRFS info (device loop0): using free-space-tree [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./6/file1") = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./6") = 0 [pid 5826] mkdir("./7", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6424 attached , child_tidptr=0x555556f26690) = 10 [pid 6388] <... mount resumed>) = 0 [pid 6388] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6424] set_robust_list(0x555556f266a0, 24 [pid 6388] <... openat resumed>) = 3 [pid 6424] <... set_robust_list resumed>) = 0 [pid 6388] chdir("./file1" [pid 6424] chdir("./7" [pid 6388] <... chdir resumed>) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6424] <... chdir resumed>) = 0 [pid 6388] ioctl(4, LOOP_CLR_FD [pid 6424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6388] <... ioctl resumed>) = 0 [pid 6424] <... prctl resumed>) = 0 [pid 6388] close(4 [pid 6424] setpgid(0, 0 [pid 6388] <... close resumed>) = 0 [pid 6424] <... setpgid resumed>) = 0 [pid 6388] truncate("./file1", 24066 [pid 6424] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 6388] <... truncate resumed>) = 0 [pid 6424] <... symlink resumed>) = 0 [pid 6388] close(3) = 0 [pid 6388] close(4 [pid 6424] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6388] close(5) = -1 EBADF (Bad file descriptor) [pid 6388] close(6) = -1 EBADF (Bad file descriptor) [pid 6388] close(7) = -1 EBADF (Bad file descriptor) [pid 6388] close(8) = -1 EBADF (Bad file descriptor) [pid 6388] close(9) = -1 EBADF (Bad file descriptor) [pid 6388] close(10) = -1 EBADF (Bad file descriptor) [pid 6388] close(11) = -1 EBADF (Bad file descriptor) [pid 6388] close(12) = -1 EBADF (Bad file descriptor) [pid 6388] close(13) = -1 EBADF (Bad file descriptor) [pid 6388] close(14) = -1 EBADF (Bad file descriptor) [pid 6424] <... symlink resumed>) = 0 [pid 6388] close(15 [pid 6424] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] <... symlink resumed>) = 0 [pid 6388] close(16 [pid 6424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 6424] <... openat resumed>) = 3 [pid 6388] close(17) = -1 EBADF (Bad file descriptor) [pid 6388] close(18) = -1 EBADF (Bad file descriptor) [pid 6388] close(19) = -1 EBADF (Bad file descriptor) [pid 6424] write(3, "1000", 4 [pid 6388] close(20 [pid 6424] <... write resumed>) = 4 [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(3 [pid 6388] close(21 [pid 6424] <... close resumed>) = 0 [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] symlink("/dev/binderfs", "./binderfs" [pid 6388] close(22 [pid 6424] <... symlink resumed>) = 0 [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] write(1, "executing program\n", 18 [pid 6388] close(23 [pid 6424] <... write resumed>) = 18 [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6388] close(24) = -1 EBADF (Bad file descriptor) [pid 6388] close(25) = -1 EBADF (Bad file descriptor) [pid 6388] close(26 [pid 6424] memfd_create("syzkaller", 0 [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] <... memfd_create resumed>) = 3 [pid 6388] close(27 [pid 6424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] <... mmap resumed>) = 0x7f980f800000 [pid 6388] close(28) = -1 EBADF (Bad file descriptor) [pid 6388] close(29) = -1 EBADF (Bad file descriptor) [pid 6388] exit_group(0) = ? [pid 6388] +++ exited with 0 +++ [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5825] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5825] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/cgroup") = 0 [pid 5825] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/cgroup.cpu") = 0 [pid 5825] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/cgroup.net") = 0 [pid 5825] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./6/binderfs") = 0 [pid 5825] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6403] <... write resumed>) = 16777216 [ 84.873443][ T5825] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 6403] munmap(0x7f980f800000, 138412032) = 0 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./6/file1") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./6") = 0 [pid 5825] mkdir("./7", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6403] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6403] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6425 attached [pid 6403] close(3 [pid 6425] set_robust_list(0x555556f266a0, 24 [pid 6403] <... close resumed>) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 10 [pid 6425] <... set_robust_list resumed>) = 0 [pid 6403] close(4 [pid 6425] chdir("./7" [pid 6403] <... close resumed>) = 0 [pid 6425] <... chdir resumed>) = 0 [pid 6403] mkdir("./file1", 0777 [pid 6425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6403] <... mkdir resumed>) = 0 [pid 6425] <... prctl resumed>) = 0 [pid 6403] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6425] setpgid(0, 0) = 0 [pid 6425] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 executing program [pid 6425] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6425] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6425] write(3, "1000", 4) = 4 [pid 6425] close(3) = 0 [pid 6425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6425] write(1, "executing program\n", 18) = 18 [pid 6425] memfd_create("syzkaller", 0) = 3 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6406] <... write resumed>) = 16777216 [ 84.970282][ T6403] loop4: detected capacity change from 0 to 32768 [ 85.005790][ T6403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (6403) [pid 6406] munmap(0x7f980f800000, 138412032) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6406] close(3) = 0 [pid 6406] close(4) = 0 [pid 6406] mkdir("./file1", 0777) = 0 [ 85.077195][ T6403] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.095826][ T6406] loop1: detected capacity change from 0 to 32768 [pid 6406] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [ 85.122625][ T6406] BTRFS: device /dev/loop1 (7:1) using temp-fsid 6fe9f704-ac94-4bea-9064-f6896b7edd10 [ 85.138590][ T6403] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 85.180889][ T6406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (6406) [ 85.195475][ T6403] BTRFS info (device loop4): using free-space-tree [ 85.231683][ T6406] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.262405][ T6406] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 85.275925][ T6406] BTRFS info (device loop1): using free-space-tree [pid 6424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6407] <... write resumed>) = 16777216 [pid 6407] munmap(0x7f980f800000, 138412032) = 0 [pid 6407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6407] close(3) = 0 [pid 6407] close(4) = 0 [pid 6407] mkdir("./file1", 0777) = 0 [ 85.452279][ T6407] loop3: detected capacity change from 0 to 32768 [ 85.512441][ T6407] BTRFS: device /dev/loop3 (7:3) using temp-fsid 3c220605-da75-4225-9b2d-8e08062a2616 [ 85.522077][ T6407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (6407) [pid 6407] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6424] <... write resumed>) = 16777216 [pid 6424] munmap(0x7f980f800000, 138412032) = 0 [pid 6424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6424] close(3) = 0 [pid 6424] close(4) = 0 [ 85.613162][ T6424] loop2: detected capacity change from 0 to 32768 [pid 6425] <... write resumed>) = 16777216 [pid 6424] mkdir("./file1", 0777) = 0 [ 85.664717][ T6407] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.675258][ T6407] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 85.684261][ T6407] BTRFS info (device loop3): using free-space-tree [ 85.697825][ T6424] BTRFS: device /dev/loop2 (7:2) using temp-fsid 3aff3d14-7dd0-40db-a656-2d3b4275e85d [pid 6424] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6425] munmap(0x7f980f800000, 138412032) = 0 [pid 6425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 85.708558][ T6424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6424) [pid 6425] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6425] close(3) = 0 [pid 6425] close(4) = 0 [ 85.800743][ T6424] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.801193][ T6425] loop0: detected capacity change from 0 to 32768 [ 85.818239][ T6424] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 85.829046][ T6424] BTRFS info (device loop2): using free-space-tree [pid 6425] mkdir("./file1", 0777) = 0 [pid 6425] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6403] <... mount resumed>) = 0 [pid 6403] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6403] chdir("./file1") = 0 [pid 6403] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6403] ioctl(4, LOOP_CLR_FD) = 0 [pid 6403] close(4) = 0 [pid 6403] truncate("./file1", 24066) = 0 [pid 6403] close(3) = 0 [ 85.953910][ T6425] BTRFS: device /dev/loop0 (7:0) using temp-fsid 8261a63c-99fa-4c97-8d21-8818bd7e520c [ 85.971480][ T6425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6425) [pid 6403] close(4) = -1 EBADF (Bad file descriptor) [pid 6403] close(5) = -1 EBADF (Bad file descriptor) [pid 6403] close(6) = -1 EBADF (Bad file descriptor) [pid 6403] close(7) = -1 EBADF (Bad file descriptor) [pid 6403] close(8) = -1 EBADF (Bad file descriptor) [pid 6403] close(9) = -1 EBADF (Bad file descriptor) [pid 6403] close(10) = -1 EBADF (Bad file descriptor) [pid 6403] close(11) = -1 EBADF (Bad file descriptor) [pid 6403] close(12) = -1 EBADF (Bad file descriptor) [pid 6403] close(13) = -1 EBADF (Bad file descriptor) [pid 6403] close(14) = -1 EBADF (Bad file descriptor) [pid 6403] close(15) = -1 EBADF (Bad file descriptor) [pid 6403] close(16) = -1 EBADF (Bad file descriptor) [pid 6403] close(17) = -1 EBADF (Bad file descriptor) [pid 6403] close(18) = -1 EBADF (Bad file descriptor) [pid 6403] close(19) = -1 EBADF (Bad file descriptor) [pid 6403] close(20) = -1 EBADF (Bad file descriptor) [pid 6403] close(21) = -1 EBADF (Bad file descriptor) [pid 6403] close(22) = -1 EBADF (Bad file descriptor) [pid 6403] close(23) = -1 EBADF (Bad file descriptor) [pid 6403] close(24) = -1 EBADF (Bad file descriptor) [pid 6403] close(25) = -1 EBADF (Bad file descriptor) [pid 6403] close(26) = -1 EBADF (Bad file descriptor) [pid 6403] close(27) = -1 EBADF (Bad file descriptor) [pid 6403] close(28) = -1 EBADF (Bad file descriptor) [pid 6403] close(29) = -1 EBADF (Bad file descriptor) [pid 6403] exit_group(0) = ? [pid 6403] +++ exited with 0 +++ [pid 5828] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5828] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5828] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6406] <... mount resumed>) = 0 [pid 6406] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6406] chdir("./file1") = 0 [pid 5828] newfstatat(3, "", [pid 6406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 6406] ioctl(4, LOOP_CLR_FD) = 0 [pid 6406] close(4) = 0 [pid 5828] getdents64(3, [pid 6406] truncate("./file1", 24066 [pid 5828] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [ 86.028798][ T6425] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.039383][ T6425] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 86.048775][ T6425] BTRFS info (device loop0): using free-space-tree [pid 5828] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... truncate resumed>) = 0 [pid 6406] close(3 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6406] <... close resumed>) = 0 [pid 5828] unlink("./6/cgroup" [pid 6406] close(4 [pid 5828] <... unlink resumed>) = 0 [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] close(5 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 6406] close(6) = -1 EBADF (Bad file descriptor) [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6406] close(7) = -1 EBADF (Bad file descriptor) [pid 5828] unlink("./6/cgroup.cpu" [pid 6406] close(8) = -1 EBADF (Bad file descriptor) [pid 5828] <... unlink resumed>) = 0 [pid 6406] close(9 [pid 5828] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6406] close(10 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 6406] close(11 [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6406] close(12 [pid 5828] unlink("./6/cgroup.net" [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... unlink resumed>) = 0 [pid 6406] close(13 [pid 5828] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6406] close(14 [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6406] close(15) = -1 EBADF (Bad file descriptor) [pid 6406] close(16) = -1 EBADF (Bad file descriptor) [pid 6406] close(17) = -1 EBADF (Bad file descriptor) [pid 6406] close(18) = -1 EBADF (Bad file descriptor) [pid 6406] close(19) = -1 EBADF (Bad file descriptor) [pid 6406] close(20) = -1 EBADF (Bad file descriptor) [pid 6406] close(21) = -1 EBADF (Bad file descriptor) [pid 6406] close(22 [pid 5828] newfstatat(AT_FDCWD, "./6/binderfs", [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6406] close(23 [pid 5828] unlink("./6/binderfs" [pid 6406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... unlink resumed>) = 0 [pid 5828] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] close(24) = -1 EBADF (Bad file descriptor) [pid 6406] close(25) = -1 EBADF (Bad file descriptor) [pid 6406] close(26) = -1 EBADF (Bad file descriptor) [pid 6406] close(27) = -1 EBADF (Bad file descriptor) [pid 6406] close(28) = -1 EBADF (Bad file descriptor) [pid 6406] close(29) = -1 EBADF (Bad file descriptor) [pid 6406] exit_group(0) = ? [pid 6406] +++ exited with 0 +++ [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5824] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./6/cgroup") = 0 [pid 5824] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./6/cgroup.cpu") = 0 [pid 5824] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./6/cgroup.net") = 0 [pid 5824] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/binderfs", [pid 6407] <... mount resumed>) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6407] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5824] unlink("./6/binderfs" [pid 6407] <... openat resumed>) = 3 [pid 5824] <... unlink resumed>) = 0 [pid 6407] chdir("./file1" [pid 5824] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6407] <... chdir resumed>) = 0 [pid 6407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6407] ioctl(4, LOOP_CLR_FD) = 0 [pid 6407] close(4) = 0 [pid 6407] truncate("./file1", 24066) = 0 [pid 6407] close(3) = 0 [pid 6407] close(4) = -1 EBADF (Bad file descriptor) [pid 6407] close(5) = -1 EBADF (Bad file descriptor) [pid 6407] close(6) = -1 EBADF (Bad file descriptor) [pid 6407] close(7) = -1 EBADF (Bad file descriptor) [pid 6407] close(8) = -1 EBADF (Bad file descriptor) [pid 6407] close(9) = -1 EBADF (Bad file descriptor) [pid 6407] close(10) = -1 EBADF (Bad file descriptor) [pid 6407] close(11) = -1 EBADF (Bad file descriptor) [pid 6407] close(12) = -1 EBADF (Bad file descriptor) [pid 6407] close(13) = -1 EBADF (Bad file descriptor) [ 86.187876][ T5828] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [pid 6407] close(14 [pid 6424] <... mount resumed>) = 0 [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... mount resumed>) = 0 [pid 6407] close(15 [pid 6425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... openat resumed>) = 3 [pid 6424] <... openat resumed>) = 3 [pid 6407] close(16 [pid 6425] chdir("./file1" [pid 6424] chdir("./file1" [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... chdir resumed>) = 0 [pid 6424] <... chdir resumed>) = 0 [pid 6407] close(17 [pid 6425] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6424] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] <... openat resumed>) = 4 [pid 6425] <... openat resumed>) = 4 [pid 6424] ioctl(4, LOOP_CLR_FD [pid 6407] close(18 [pid 6425] ioctl(4, LOOP_CLR_FD [pid 6424] <... ioctl resumed>) = 0 [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... ioctl resumed>) = 0 [pid 6425] close(4 [pid 6407] close(19 [pid 6424] close(4 [pid 6425] <... close resumed>) = 0 [pid 6424] <... close resumed>) = 0 [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] truncate("./file1", 24066 [pid 6407] close(20 [pid 6425] truncate("./file1", 24066 [pid 6424] <... truncate resumed>) = 0 [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... truncate resumed>) = 0 [pid 6407] close(21) = -1 EBADF (Bad file descriptor) [pid 6424] close(3 [pid 6407] close(22 [pid 6424] <... close resumed>) = 0 [pid 6425] close(3 [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(4 [pid 6407] close(23 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = 0 [pid 6424] close(5 [pid 6407] close(24 [pid 6425] close(4 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(6 [pid 6407] close(25 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] close(5 [pid 6424] close(7 [pid 6407] close(26 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(8 [pid 6407] close(27 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(9 [pid 6407] close(28 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(10 [pid 6407] close(29 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(11 [pid 6407] exit_group(0 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] <... exit_group resumed>) = ? [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(12 [pid 6425] close(6 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(13 [pid 6425] close(7 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(14 [pid 6425] close(8 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(15 [pid 6425] close(9 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(16 [pid 6425] close(10 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(17 [pid 6425] close(11 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(18 [pid 6425] close(12 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(19 [pid 6425] close(13 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(20 [pid 6425] close(14 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(21 [pid 6425] close(15 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(22 [pid 6425] close(16 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(23 [pid 6425] close(17 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(24 [pid 6425] close(18 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(25 [pid 6425] close(19 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(26 [pid 6425] close(20 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(27 [pid 6425] close(21 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(28 [pid 6425] close(22 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] close(29 [pid 6425] close(23 [pid 6424] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] exit_group(0 [pid 6425] close(24 [pid 6424] <... exit_group resumed>) = ? [pid 6425] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6424] +++ exited with 0 +++ [pid 6425] close(25) = -1 EBADF (Bad file descriptor) [pid 6425] close(26) = -1 EBADF (Bad file descriptor) [pid 6425] close(27) = -1 EBADF (Bad file descriptor) [pid 6425] close(28) = -1 EBADF (Bad file descriptor) [pid 6425] close(29) = -1 EBADF (Bad file descriptor) [pid 6425] exit_group(0) = ? [pid 6407] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5827] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=34 /* 0.34 s */} --- [ 86.284910][ T5824] BTRFS info (device loop1): last unmount of filesystem 6fe9f704-ac94-4bea-9064-f6896b7edd10 [pid 5827] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6425] +++ exited with 0 +++ [pid 5827] <... openat resumed>) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, [pid 5826] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... openat resumed>) = 3 [pid 5827] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5826] newfstatat(3, "", [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] unlink("./6/cgroup" [pid 5826] getdents64(3, [pid 5827] <... unlink resumed>) = 0 [pid 5826] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5825] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5826] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5825] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] newfstatat(3, "", [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] unlink("./6/cgroup.cpu" [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] getdents64(3, [pid 5826] unlink("./7/cgroup" [pid 5825] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] <... unlink resumed>) = 0 [pid 5825] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5827] <... unlink resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./7/cgroup" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./7/cgroup.cpu" [pid 5825] <... unlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5826] <... unlink resumed>) = 0 [pid 5825] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] unlink("./6/cgroup.net" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5827] <... unlink resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./7/cgroup.cpu" [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] unlink("./7/cgroup.net" [pid 5825] <... unlink resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5826] <... unlink resumed>) = 0 [pid 5825] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5827] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] unlink("./6/binderfs" [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... unlink resumed>) = 0 [pid 5825] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5827] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5825] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./7/cgroup.net" [pid 5826] unlink("./7/binderfs" [pid 5825] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5826] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] unlink("./7/binderfs") = 0 [ 86.529817][ T5825] BTRFS info (device loop0): last unmount of filesystem 8261a63c-99fa-4c97-8d21-8818bd7e520c [ 86.540763][ T5827] BTRFS info (device loop3): last unmount of filesystem 3c220605-da75-4225-9b2d-8e08062a2616 [ 86.547756][ T5826] BTRFS info (device loop2): last unmount of filesystem 3aff3d14-7dd0-40db-a656-2d3b4275e85d [pid 5825] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] <... umount2 resumed>) = 0 [pid 5826] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5826] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5826] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5826] close(4) = 0 [pid 5826] rmdir("./7/file1") = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5826] close(3) = 0 [pid 5826] rmdir("./7") = 0 [pid 5826] mkdir("./8", 0777) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5826] ioctl(3, LOOP_CLR_FD) = 0 [pid 5826] close(3) = 0 [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6511 attached [pid 6511] set_robust_list(0x555556f266a0, 24 [pid 5826] <... clone resumed>, child_tidptr=0x555556f26690) = 11 [pid 6511] <... set_robust_list resumed>) = 0 [pid 6511] chdir("./8") = 0 [pid 6511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6511] setpgid(0, 0 [pid 5824] <... umount2 resumed>) = 0 [pid 5824] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5824] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5824] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5824] close(4) = 0 [pid 5824] rmdir("./6/file1") = 0 [pid 5824] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5824] close(3) = 0 [pid 5824] rmdir("./6") = 0 [pid 5824] mkdir("./7", 0777) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5824] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5824] close(3) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6512 attached [pid 6512] set_robust_list(0x555556f266a0, 24 [pid 5824] <... clone resumed>, child_tidptr=0x555556f26690) = 10 [pid 6512] <... set_robust_list resumed>) = 0 [pid 6512] chdir("./7") = 0 [pid 6512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6512] setpgid(0, 0) = 0 [pid 6512] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 6512] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 6512] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 6512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6512] write(3, "1000", 4) = 4 [pid 6512] close(3) = 0 [pid 6512] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6512] write(1, "executing program\n", 18) = 18 [pid 6512] memfd_create("syzkaller", 0) = 3 [pid 6512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6511] <... setpgid resumed>) = 0 [pid 5827] <... umount2 resumed>) = 0 [pid 6511] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5827] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6511] <... symlink resumed>) = 0 [pid 5827] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6511] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5828] <... umount2 resumed>) = 0 [pid 5827] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5827] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5827] close(4) = 0 [pid 5827] rmdir("./6/file1") = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5827] close(3) = 0 [pid 5827] rmdir("./6") = 0 [pid 5827] mkdir("./7", 0777) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5827] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5827] close(3) = 0 [pid 5827] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6513 attached [pid 6511] <... symlink resumed>) = 0 [pid 6511] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 6511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6511] write(3, "1000", 4) = 4 [pid 6511] close(3) = 0 [pid 6511] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6511] write(1, "executing program\n", 18) = 18 [pid 6511] memfd_create("syzkaller", 0) = 3 [pid 6511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6513] set_robust_list(0x555556f266a0, 24 [pid 5827] <... clone resumed>, child_tidptr=0x555556f26690) = 10 [pid 6513] <... set_robust_list resumed>) = 0 [pid 6513] chdir("./7") = 0 [pid 6513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6513] setpgid(0, 0) = 0 [pid 6513] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 5828] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] <... symlink resumed>) = 0 [pid 5828] newfstatat(AT_FDCWD, "./6/file1", [pid 6513] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6513] <... symlink resumed>) = 0 [pid 5828] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5828] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] <... openat resumed>) = 3 [pid 5828] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6513] write(3, "1000", 4 [pid 5828] <... openat resumed>) = 4 [pid 6513] <... write resumed>) = 4 [pid 5828] newfstatat(4, "", [pid 6513] close(3 [pid 5828] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(4, [pid 6513] <... close resumed>) = 0 [pid 5828] <... getdents64 resumed>0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 6513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5828] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5828] close(4) = 0 [pid 6513] write(1, "executing program\n", 18executing program ) = 18 [pid 6513] memfd_create("syzkaller", 0 [pid 5828] rmdir("./6/file1" [pid 6513] <... memfd_create resumed>) = 3 [pid 5828] <... rmdir resumed>) = 0 [pid 6513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] getdents64(3, [pid 6513] <... mmap resumed>) = 0x7f980f800000 [pid 5828] <... getdents64 resumed>0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5828] close(3) = 0 [pid 5828] rmdir("./6") = 0 [pid 5828] mkdir("./7", 0777) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5828] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5828] close(3) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6514 attached , child_tidptr=0x555556f26690) = 10 [pid 6514] set_robust_list(0x555556f266a0, 24) = 0 [pid 6514] chdir("./7") = 0 [pid 6514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6514] setpgid(0, 0) = 0 [pid 6514] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 6514] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 6514] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 6514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6514] write(3, "1000", 4) = 4 [pid 6514] close(3) = 0 [pid 6514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6514] write(1, "executing program\n", 18executing program ) = 18 [pid 6514] memfd_create("syzkaller", 0) = 3 [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f980f800000 [pid 6512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5825] <... umount2 resumed>) = 0 [pid 5825] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5825] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5825] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5825] getdents64(4, 0x555556f2f890 /* 2 entries */, 32768) = 48 [pid 5825] getdents64(4, 0x555556f2f890 /* 0 entries */, 32768) = 0 [pid 5825] close(4) = 0 [pid 5825] rmdir("./7/file1") = 0 [pid 5825] getdents64(3, 0x555556f27850 /* 0 entries */, 32768) = 0 [pid 5825] close(3) = 0 [pid 5825] rmdir("./7") = 0 [pid 5825] mkdir("./8", 0777) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5825] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5825] close(3) = 0 [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6515 attached [pid 6515] set_robust_list(0x555556f266a0, 24 [pid 5825] <... clone resumed>, child_tidptr=0x555556f26690) = 11 [pid 6515] <... set_robust_list resumed>) = 0 [pid 6515] chdir("./8") = 0 [pid 6515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6515] setpgid(0, 0) = 0 [pid 6515] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6515] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6515] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6515] write(3, "1000", 4) = 4 [pid 6515] close(3) = 0 [pid 6515] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6515] write(1, "executing program\n", 18) = 18 [pid 6515] memfd_create("syzkaller", 0) = 3 [pid 6515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6515] <... mmap resumed>) = 0x7f980f800000 [pid 6514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6512] <... write resumed>) = 16777216 [pid 6512] munmap(0x7f980f800000, 138412032 [pid 6511] <... write resumed>) = 16777216 [pid 6511] munmap(0x7f980f800000, 138412032 [pid 6512] <... munmap resumed>) = 0 [pid 6512] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6511] <... munmap resumed>) = 0 [pid 6512] <... openat resumed>) = 4 [pid 6511] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6512] ioctl(4, LOOP_SET_FD, 3 [pid 6513] <... write resumed>) = 16777216 [pid 6512] <... ioctl resumed>) = 0 [pid 6511] ioctl(4, LOOP_SET_FD, 3 [pid 6513] munmap(0x7f980f800000, 138412032 [pid 6512] close(3 [pid 6513] <... munmap resumed>) = 0 [pid 6514] <... write resumed>) = 16777216 [pid 6515] <... write resumed>) = 16777216 [pid 6513] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 87.963003][ T6512] loop1: detected capacity change from 0 to 32768 [ 87.980172][ T6511] loop2: detected capacity change from 0 to 32768 [pid 6513] ioctl(4, LOOP_SET_FD, 3 [pid 6515] munmap(0x7f980f800000, 138412032 [pid 6512] <... close resumed>) = 0 [pid 6511] <... ioctl resumed>) = 0 [pid 6514] munmap(0x7f980f800000, 138412032 [pid 6511] close(3) = 0 [pid 6512] close(4) = 0 [pid 6511] close(4 [pid 6513] <... ioctl resumed>) = 0 [pid 6512] mkdir("./file1", 0777 [pid 6515] <... munmap resumed>) = 0 [pid 6512] <... mkdir resumed>) = 0 [pid 6511] <... close resumed>) = 0 [pid 6512] mount("/dev/loop1", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6515] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6511] mkdir("./file1", 0777 [pid 6515] <... openat resumed>) = 4 [pid 6515] ioctl(4, LOOP_SET_FD, 3 [pid 6511] <... mkdir resumed>) = 0 [pid 6514] <... munmap resumed>) = 0 [pid 6513] close(3) = 0 [pid 6513] close(4) = 0 [pid 6513] mkdir("./file1", 0777) = 0 [pid 6513] mount("/dev/loop3", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6514] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 88.004369][ T6513] loop3: detected capacity change from 0 to 32768 [ 88.027818][ T6512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor276 (6512) [ 88.042667][ T6515] loop0: detected capacity change from 0 to 32768 [pid 6514] ioctl(4, LOOP_SET_FD, 3 [pid 6515] <... ioctl resumed>) = 0 [pid 6511] mount("/dev/loop2", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6514] <... ioctl resumed>) = 0 [pid 6514] close(3) = 0 [pid 6514] close(4) = 0 [pid 6514] mkdir("./file1", 0777) = 0 [pid 6514] mount("/dev/loop4", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6515] close(3) = 0 [pid 6515] close(4) = 0 [pid 6515] mkdir("./file1", 0777) = 0 [ 88.048139][ T6514] loop4: detected capacity change from 0 to 32768 [ 88.093676][ T6513] BTRFS: device /dev/loop3 (7:3) using temp-fsid ab9e4de9-3e82-4d85-852f-cd0c8bf19735 [ 88.097822][ T6512] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.103788][ T6513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor276 (6513) [ 88.130567][ T6512] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 88.157278][ T6512] BTRFS info (device loop1): using free-space-tree [ 88.173465][ T6511] BTRFS: device /dev/loop2 (7:2) using temp-fsid 2bb3a29a-c36b-4457-8f2a-24ae2e07ca8c [ 88.184754][ T6511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor276 (6511) [ 88.198369][ T6513] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.209375][ T6513] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 88.218187][ T6513] BTRFS info (device loop3): using free-space-tree [ 88.227858][ T6514] BTRFS: device /dev/loop4 (7:4) using temp-fsid 94f530e9-836a-49fd-956c-34d361fb7de1 [ 88.237882][ T6514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor276 (6514) [ 88.239435][ T6511] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.261440][ T6511] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 88.266894][ T6515] BTRFS: device /dev/loop0 (7:0) using temp-fsid 5ef15b29-0310-4342-9cf0-ad55d73db1fe [ 88.270258][ T6511] BTRFS info (device loop2): using free-space-tree [ 88.280504][ T6515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor276 (6515) [ 88.300279][ T6514] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.311801][ T6514] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 88.321401][ T6514] BTRFS info (device loop4): using free-space-tree [ 88.327815][ T6515] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.348905][ T6515] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.357763][ T6515] BTRFS info (device loop0): using free-space-tree [pid 6515] mount("/dev/loop0", "./file1", "btrfs", MS_SYNCHRONOUS|MS_NODIRATIME, "metadata_ratio=0x0000000000000002,space_cache=v2,metadata_ratio=0x00000000000000e3,acl,compress=lzo,"... [pid 6512] <... mount resumed>) = 0 [pid 6512] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6512] chdir("./file1") = 0 [pid 6512] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6512] ioctl(4, LOOP_CLR_FD) = 0 [pid 6512] close(4) = 0 [pid 6512] truncate("./file1", 24066) = 0 [pid 6512] close(3) = 0 [pid 6512] close(4) = -1 EBADF (Bad file descriptor) [pid 6511] <... mount resumed>) = 0 [pid 6512] close(5) = -1 EBADF (Bad file descriptor) [pid 6511] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6512] close(6 [pid 6511] <... openat resumed>) = 3 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] chdir("./file1" [pid 6512] close(7 [pid 6511] <... chdir resumed>) = 0 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6512] close(8) = -1 EBADF (Bad file descriptor) [pid 6511] <... openat resumed>) = 4 [pid 6512] close(9 [pid 6511] ioctl(4, LOOP_CLR_FD [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(10 [pid 6511] <... ioctl resumed>) = 0 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] close(4 [pid 6512] close(11) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = 0 [pid 6512] close(12) = -1 EBADF (Bad file descriptor) [pid 6512] close(13) = -1 EBADF (Bad file descriptor) [pid 6512] close(14) = -1 EBADF (Bad file descriptor) [pid 6512] close(15 [pid 6511] truncate("./file1", 24066 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] <... truncate resumed>) = 0 [pid 6512] close(16) = -1 EBADF (Bad file descriptor) [pid 6511] close(3 [pid 6512] close(17) = -1 EBADF (Bad file descriptor) [pid 6512] close(18) = -1 EBADF (Bad file descriptor) [pid 6512] close(19) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = 0 [pid 6512] close(20) = -1 EBADF (Bad file descriptor) [pid 6512] close(21 [pid 6511] close(4 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(22) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(23) = -1 EBADF (Bad file descriptor) [pid 6511] close(5 [pid 6512] close(24) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(25 [pid 6511] close(6 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(26 [pid 6511] close(7 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(27 [pid 6511] close(8 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(28 [pid 6511] close(9 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] close(29 [pid 6511] close(10 [pid 6512] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] exit_group(0 [pid 6511] close(11 [pid 6512] <... exit_group resumed>) = ? [pid 6511] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6512] +++ exited with 0 +++ [pid 6511] close(12) = -1 EBADF (Bad file descriptor) [pid 6511] close(13) = -1 EBADF (Bad file descriptor) [pid 6511] close(14) = -1 EBADF (Bad file descriptor) [pid 6511] close(15) = -1 EBADF (Bad file descriptor) [pid 6511] close(16) = -1 EBADF (Bad file descriptor) [pid 6511] close(17) = -1 EBADF (Bad file descriptor) [pid 6511] close(18) = -1 EBADF (Bad file descriptor) [pid 6511] close(19) = -1 EBADF (Bad file descriptor) [pid 6511] close(20) = -1 EBADF (Bad file descriptor) [pid 6511] close(21) = -1 EBADF (Bad file descriptor) [pid 6511] close(22) = -1 EBADF (Bad file descriptor) [pid 6511] close(23) = -1 EBADF (Bad file descriptor) [pid 6511] close(24) = -1 EBADF (Bad file descriptor) [pid 6511] close(25) = -1 EBADF (Bad file descriptor) [pid 6511] close(26) = -1 EBADF (Bad file descriptor) [pid 6511] close(27) = -1 EBADF (Bad file descriptor) [pid 6511] close(28) = -1 EBADF (Bad file descriptor) [pid 6511] close(29) = -1 EBADF (Bad file descriptor) [pid 6511] exit_group(0) = ? [pid 6511] +++ exited with 0 +++ [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 5826] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5826] newfstatat(3, "", [pid 5824] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5824] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5826] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... openat resumed>) = 3 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(3, "", [pid 5826] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5824] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] getdents64(3, [pid 5826] unlink("./8/cgroup" [pid 5824] <... getdents64 resumed>0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5826] <... unlink resumed>) = 0 [pid 5824] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5826] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./7/cgroup" [pid 5826] unlink("./8/cgroup.cpu" [pid 5824] <... unlink resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5824] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5826] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5826] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5826] unlink("./8/cgroup.net" [pid 5824] unlink("./7/cgroup.cpu" [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 6513] <... mount resumed>) = 0 [pid 5826] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6513] chdir("./file1") = 0 [pid 6513] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5824] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] <... openat resumed>) = 4 [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] ioctl(4, LOOP_CLR_FD [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 6513] <... ioctl resumed>) = 0 [pid 5826] newfstatat(AT_FDCWD, "./8/binderfs", [pid 6513] close(4 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6513] <... close resumed>) = 0 [pid 5826] unlink("./8/binderfs" [pid 5824] unlink("./7/cgroup.net" [pid 6513] truncate("./file1", 24066 [pid 5826] <... unlink resumed>) = 0 [pid 5824] <... unlink resumed>) = 0 [pid 6513] <... truncate resumed>) = 0 [pid 5826] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] close(3) = 0 [pid 6513] close(4) = -1 EBADF (Bad file descriptor) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6513] close(5 [pid 5824] newfstatat(AT_FDCWD, "./7/binderfs", [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(6) = -1 EBADF (Bad file descriptor) [pid 6513] close(7) = -1 EBADF (Bad file descriptor) [pid 6513] close(8) = -1 EBADF (Bad file descriptor) [pid 6513] close(9) = -1 EBADF (Bad file descriptor) [pid 6513] close(10) = -1 EBADF (Bad file descriptor) [pid 6513] close(11) = -1 EBADF (Bad file descriptor) [pid 6513] close(12) = -1 EBADF (Bad file descriptor) [pid 6513] close(13) = -1 EBADF (Bad file descriptor) [pid 6513] close(14) = -1 EBADF (Bad file descriptor) [pid 6513] close(15) = -1 EBADF (Bad file descriptor) [pid 5824] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6513] close(16 [pid 5824] unlink("./7/binderfs" [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(17 [pid 5824] <... unlink resumed>) = 0 [pid 6513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6513] close(18) = -1 EBADF (Bad file descriptor) [pid 6513] close(19) = -1 EBADF (Bad file descriptor) [pid 5824] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6513] close(20) = -1 EBADF (Bad file descriptor) [pid 6513] close(21) = -1 EBADF (Bad file descriptor) [pid 6513] close(22) = -1 EBADF (Bad file descriptor) [pid 6513] close(23) = -1 EBADF (Bad file descriptor) [pid 6513] close(24) = -1 EBADF (Bad file descriptor) [pid 6513] close(25) = -1 EBADF (Bad file descriptor) [pid 6513] close(26) = -1 EBADF (Bad file descriptor) [pid 6513] close(27) = -1 EBADF (Bad file descriptor) [pid 6513] close(28) = -1 EBADF (Bad file descriptor) [pid 6513] close(29) = -1 EBADF (Bad file descriptor) [pid 6513] exit_group(0) = ? [pid 6513] +++ exited with 0 +++ [pid 5827] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5827] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5827] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5827] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 5827] getdents64(3, 0x555556f27850 /* 7 entries */, 32768) = 208 [pid 5827] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./7/cgroup") = 0 [pid 5827] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./7/cgroup.cpu") = 0 [pid 5827] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./7/cgroup.net") = 0 [pid 5827] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] unlink("./7/binderfs") = 0 [ 88.985330][ T5826] BTRFS info (device loop2): last unmount of filesystem 2bb3a29a-c36b-4457-8f2a-24ae2e07ca8c [ 89.042390][ T52] ================================================================== [ 89.050502][ T52] BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 [ 89.058182][ T52] Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52 [ 89.065991][ T52] [ 89.068330][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 89.078997][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.089045][ T52] Workqueue: btrfs-delalloc btrfs_work_helper [ 89.095133][ T52] Call Trace: [ 89.098400][ T52] [ 89.101325][ T52] dump_stack_lvl+0x241/0x360 [ 89.105998][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.111187][ T52] ? __pfx__printk+0x10/0x10 [ 89.115765][ T52] ? _printk+0xd5/0x120 [ 89.119938][ T52] ? __virt_addr_valid+0x183/0x530 [ 89.125067][ T52] ? __virt_addr_valid+0x183/0x530 [ 89.130169][ T52] print_report+0x169/0x550 [ 89.134662][ T52] ? __virt_addr_valid+0x183/0x530 [ 89.139764][ T52] ? __virt_addr_valid+0x183/0x530 [ 89.144865][ T52] ? __virt_addr_valid+0x45f/0x530 [ 89.149965][ T52] ? __phys_addr+0xba/0x170 [ 89.154458][ T52] ? __lock_acquire+0x78/0x2100 [ 89.159297][ T52] kasan_report+0x143/0x180 [ 89.163792][ T52] ? __lock_acquire+0x78/0x2100 [ 89.168632][ T52] __lock_acquire+0x78/0x2100 [ 89.173306][ T52] lock_acquire+0x1ed/0x550 [ 89.177819][ T52] ? try_to_wake_up+0xc2/0x1470 [ 89.182661][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 89.187681][ T52] _raw_spin_lock_irqsave+0xd5/0x120 [ 89.192964][ T52] ? try_to_wake_up+0xc2/0x1470 [ 89.197806][ T52] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 89.203686][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.209654][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.215970][ T52] try_to_wake_up+0xc2/0x1470 [ 89.220637][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 89.226519][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 89.231728][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.237626][ T52] ? __pfx_try_to_wake_up+0x10/0x10 [ 89.242825][ T52] ? __lock_acquire+0x1397/0x2100 [ 89.247847][ T52] ? btrfs_add_delayed_iput+0x26b/0x310 [ 89.253414][ T52] submit_compressed_extents+0xdf/0x16e0 [ 89.259052][ T52] ? mark_lock+0x9a/0x360 [ 89.263380][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.269358][ T52] ? __pfx_submit_compressed_extents+0x10/0x10 [ 89.275506][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 89.281401][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 89.286594][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.292479][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 89.298803][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 89.303862][ T52] btrfs_work_helper+0x96f/0xc40 [ 89.308788][ T52] ? btrfs_work_helper+0x601/0xc40 [ 89.313886][ T52] ? process_scheduled_works+0x976/0x1840 [ 89.319599][ T52] process_scheduled_works+0xa66/0x1840 [ 89.325152][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.331125][ T52] ? assign_work+0x364/0x3d0 [ 89.335710][ T52] worker_thread+0x870/0xd30 [ 89.340292][ T52] ? __kthread_parkme+0x169/0x1d0 [ 89.345306][ T52] ? __pfx_worker_thread+0x10/0x10 [ 89.350406][ T52] kthread+0x2f0/0x390 [ 89.354464][ T52] ? __pfx_worker_thread+0x10/0x10 [ 89.359561][ T52] ? __pfx_kthread+0x10/0x10 [ 89.364144][ T52] ret_from_fork+0x4b/0x80 [ 89.368548][ T52] ? __pfx_kthread+0x10/0x10 [ 89.373142][ T52] ret_from_fork_asm+0x1a/0x30 [ 89.377900][ T52] [ 89.380904][ T52] [ 89.383213][ T52] Allocated by task 2: [ 89.387258][ T52] kasan_save_track+0x3f/0x80 [ 89.391929][ T52] __kasan_slab_alloc+0x66/0x80 [ 89.396767][ T52] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 89.402646][ T52] dup_task_struct+0x57/0x8c0 [ 89.407310][ T52] copy_process+0x5d1/0x3d50 [ 89.411891][ T52] kernel_clone+0x223/0x870 [ 89.416377][ T52] kernel_thread+0x1bc/0x240 [ 89.420962][ T52] kthreadd+0x60d/0x810 [ 89.425119][ T52] ret_from_fork+0x4b/0x80 [ 89.429530][ T52] ret_from_fork_asm+0x1a/0x30 [ 89.434290][ T52] [ 89.436604][ T52] Freed by task 24: [ 89.440397][ T52] kasan_save_track+0x3f/0x80 [ 89.445105][ T52] kasan_save_free_info+0x40/0x50 [ 89.450119][ T52] __kasan_slab_free+0x59/0x70 [ 89.454873][ T52] kmem_cache_free+0x195/0x410 [ 89.459623][ T52] delayed_put_task_struct+0x125/0x300 [ 89.465078][ T52] rcu_core+0xaaa/0x17a0 [ 89.469310][ T52] handle_softirqs+0x2d4/0x9b0 [ 89.474060][ T52] run_ksoftirqd+0xca/0x130 [ 89.478547][ T52] smpboot_thread_fn+0x544/0xa30 [ 89.483474][ T52] kthread+0x2f0/0x390 [ 89.487543][ T52] ret_from_fork+0x4b/0x80 [ 89.491954][ T52] ret_from_fork_asm+0x1a/0x30 [ 89.496713][ T52] [ 89.499026][ T52] Last potentially related work creation: [ 89.504737][ T52] kasan_save_stack+0x3f/0x60 [ 89.509412][ T52] __kasan_record_aux_stack+0xac/0xc0 [ 89.514777][ T52] call_rcu+0x167/0xa70 [ 89.518922][ T52] __schedule+0x1803/0x4be0 [ 89.523424][ T52] schedule+0x14b/0x320 [ 89.527568][ T52] schedule_timeout+0xb0/0x290 [ 89.532317][ T52] wait_for_completion+0x355/0x620 [ 89.537417][ T52] kthread_stop+0x19e/0x640 [ 89.541904][ T52] close_ctree+0x524/0xd60 [ 89.546312][ T52] generic_shutdown_super+0x139/0x2d0 [ 89.551675][ T52] kill_anon_super+0x3b/0x70 [ 89.556254][ T52] btrfs_kill_super+0x41/0x50 [ 89.560918][ T52] deactivate_locked_super+0xc4/0x130 [ 89.566279][ T52] cleanup_mnt+0x41f/0x4b0 [ 89.570683][ T52] task_work_run+0x24f/0x310 [ 89.575263][ T52] ptrace_notify+0x2d2/0x380 [ 89.579843][ T52] syscall_exit_work+0xc7/0x1d0 [ 89.584684][ T52] syscall_exit_to_user_mode+0x24a/0x340 [ 89.590306][ T52] do_syscall_64+0x100/0x230 [ 89.594890][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.600772][ T52] [ 89.603087][ T52] The buggy address belongs to the object at ffff8880259d1e00 [ 89.603087][ T52] which belongs to the cache task_struct of size 7424 [ 89.617216][ T52] The buggy address is located 2584 bytes inside of [ 89.617216][ T52] freed 7424-byte region [ffff8880259d1e00, ffff8880259d3b00) [ 89.631171][ T52] [ 89.633482][ T52] The buggy address belongs to the physical page: [ 89.639889][ T52] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x259d0 [ 89.648633][ T52] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.657112][ T52] memcg:ffff88802f4b56c1 [ 89.661336][ T52] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 89.668869][ T52] page_type: f5(slab) [ 89.672838][ T52] raw: 00fff00000000040 ffff88801bafe500 dead000000000100 dead000000000122 [ 89.681407][ T52] raw: 0000000000000000 0000000000040004 00000001f5000000 ffff88802f4b56c1 [ 89.689976][ T52] head: 00fff00000000040 ffff88801bafe500 dead000000000100 dead000000000122 [ 89.698633][ T52] head: 0000000000000000 0000000000040004 00000001f5000000 ffff88802f4b56c1 [ 89.707293][ T52] head: 00fff00000000003 ffffea0000967401 ffffffffffffffff 0000000000000000 [ 89.715949][ T52] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 89.724599][ T52] page dumped because: kasan: bad access detected [ 89.731001][ T52] page_owner tracks the page as allocated [ 89.736704][ T52] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:1), ts 7328037942, free_ts 0 [ 89.756746][ T52] post_alloc_hook+0x1f3/0x230 [ 89.761502][ T52] get_page_from_freelist+0x3651/0x37a0 [ 89.767046][ T52] __alloc_pages_noprof+0x292/0x710 [ 89.772237][ T52] alloc_pages_mpol_noprof+0x3e8/0x680 [ 89.777685][ T52] alloc_slab_page+0x6a/0x140 [ 89.782350][ T52] allocate_slab+0x5a/0x2f0 [ 89.786841][ T52] ___slab_alloc+0xcd1/0x14b0 [ 89.791502][ T52] __slab_alloc+0x58/0xa0 [ 89.795817][ T52] kmem_cache_alloc_node_noprof+0x269/0x380 [ 89.801707][ T52] dup_task_struct+0x57/0x8c0 [ 89.806375][ T52] copy_process+0x5d1/0x3d50 [ 89.810954][ T52] kernel_clone+0x223/0x870 [ 89.815440][ T52] user_mode_thread+0x132/0x1a0 [ 89.820278][ T52] call_usermodehelper_exec_work+0x5c/0x230 [ 89.826163][ T52] process_scheduled_works+0xa66/0x1840 [ 89.831700][ T52] worker_thread+0x870/0xd30 [ 89.836274][ T52] page_owner free stack trace missing [ 89.841626][ T52] [ 89.843934][ T52] Memory state around the buggy address: [ 89.849549][ T52] ffff8880259d2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.857593][ T52] ffff8880259d2780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.865645][ T52] >ffff8880259d2800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.873687][ T52] ^ [ 89.878518][ T52] ffff8880259d2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.886665][ T52] ffff8880259d2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.894718][ T52] ================================================================== [ 89.902783][ T52] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.909967][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 89.920626][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.930673][ T52] Workqueue: btrfs-delalloc btrfs_work_helper [ 89.936741][ T52] Call Trace: [ 89.940039][ T52] [ 89.942961][ T52] dump_stack_lvl+0x241/0x360 [ 89.947635][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.952824][ T52] ? __pfx__printk+0x10/0x10 [ 89.957404][ T52] ? rcu_is_watching+0x15/0xb0 [ 89.962160][ T52] ? lock_release+0xbf/0xa30 [ 89.966738][ T52] ? vscnprintf+0x5d/0x90 [ 89.971055][ T52] panic+0x349/0x880 [ 89.974942][ T52] ? check_panic_on_warn+0x21/0xb0 [ 89.980053][ T52] ? __pfx_panic+0x10/0x10 [ 89.984457][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 89.989652][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.995536][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.001852][ T52] ? print_report+0x502/0x550 [ 90.006519][ T52] check_panic_on_warn+0x86/0xb0 [ 90.011466][ T52] ? __lock_acquire+0x78/0x2100 [ 90.016327][ T52] end_report+0x77/0x160 [ 90.020569][ T52] kasan_report+0x154/0x180 [ 90.025073][ T52] ? __lock_acquire+0x78/0x2100 [ 90.029923][ T52] __lock_acquire+0x78/0x2100 [ 90.034596][ T52] lock_acquire+0x1ed/0x550 [ 90.039090][ T52] ? try_to_wake_up+0xc2/0x1470 [ 90.043934][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 90.048952][ T52] _raw_spin_lock_irqsave+0xd5/0x120 [ 90.054230][ T52] ? try_to_wake_up+0xc2/0x1470 [ 90.059076][ T52] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 90.064960][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.070931][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.077249][ T52] try_to_wake_up+0xc2/0x1470 [ 90.081917][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 90.087799][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 90.092990][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.098871][ T52] ? __pfx_try_to_wake_up+0x10/0x10 [ 90.104061][ T52] ? __lock_acquire+0x1397/0x2100 [ 90.109075][ T52] ? btrfs_add_delayed_iput+0x26b/0x310 [ 90.114617][ T52] submit_compressed_extents+0xdf/0x16e0 [ 90.120258][ T52] ? mark_lock+0x9a/0x360 [ 90.124578][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.130548][ T52] ? __pfx_submit_compressed_extents+0x10/0x10 [ 90.136697][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 90.142582][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 90.147777][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.153659][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.159973][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 90.164988][ T52] btrfs_work_helper+0x96f/0xc40 [ 90.169918][ T52] ? btrfs_work_helper+0x601/0xc40 [ 90.175020][ T52] ? process_scheduled_works+0x976/0x1840 [ 90.180730][ T52] process_scheduled_works+0xa66/0x1840 [ 90.186280][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.192279][ T52] ? assign_work+0x364/0x3d0 [ 90.196890][ T52] worker_thread+0x870/0xd30 [ 90.201493][ T52] ? __kthread_parkme+0x169/0x1d0 [ 90.206514][ T52] ? __pfx_worker_thread+0x10/0x10 [ 90.211618][ T52] kthread+0x2f0/0x390 [ 90.215681][ T52] ? __pfx_worker_thread+0x10/0x10 [ 90.220809][ T52] ? __pfx_kthread+0x10/0x10 [ 90.225394][ T52] ret_from_fork+0x4b/0x80 [ 90.229816][ T52] ? __pfx_kthread+0x10/0x10 [ 90.234409][ T52] ret_from_fork_asm+0x1a/0x30 [ 90.239183][ T52] [ 90.242368][ T52] Kernel Offset: disabled [ 90.246684][ T52] Rebooting in 86400 seconds..