ci2-android-6-1/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1/syz-executor561187957 <...> Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. execve("ci2-android-6-1/syz-executor561187957", ["ci2-android-6-1/syz-executor561187957"], 0x7ffeb7cd4730 /* 10 vars */) = 0 brk(NULL) = 0x55557b42f000 brk(0x55557b42fd40) = 0x55557b42fd40 arch_prctl(ARCH_SET_FS, 0x55557b42f3c0) = 0 set_tid_address(0x55557b42f690) = 304 set_robust_list(0x55557b42f6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1/syz-executor561187957", 4096) = 43 getrandom("\x72\x0b\x69\x16\xbb\xa2\x6a\x98", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557b42fd40 brk(0x55557b450d40) = 0x55557b450d40 brk(0x55557b451000) = 0x55557b451000 mprotect(0x7f646ea9f000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 305 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 306 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 307 ci2-android-6-1/strace-static-x86_64: Process 307 attached ci2-android-6-1/strace-static-x86_64: Process 305 attached [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 305] set_robust_list(0x55557b42f6a0, 24 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 304] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] set_robust_list(0x55557b42f6a0, 24 [pid 305] getrandom( [pid 304] <... clone resumed>, child_tidptr=0x55557b42f690) = 308 [pid 305] <... getrandom resumed>"\x00\xf4\x33\xf5\x11\xe5\x80\xd7", 8, GRND_NONBLOCK) = 8 [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 305] mkdir("./syzkaller.g7iwya", 0700 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 309 [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... mkdir resumed>) = 0 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 305] chmod("./syzkaller.g7iwya", 0777ci2-android-6-1/strace-static-x86_64: Process 308 attached [pid 307] <... set_robust_list resumed>) = 0 [pid 305] <... chmod resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 309 attached [pid 305] chdir("./syzkaller.g7iwya" [pid 309] set_robust_list(0x55557b42f6a0, 24 [pid 305] <... chdir resumed>) = 0 [pid 309] <... set_robust_list resumed>) = 0 [pid 305] mkdir("./0", 0777 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] getrandom("\x98\xd7\x34\x6c\x40\x7c\x3e\x03", 8, GRND_NONBLOCK) = 8 [pid 309] mkdir("./syzkaller.8oogzX", 0700) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 309] chmod("./syzkaller.8oogzX", 0777) = 0 [pid 309] chdir("./syzkaller.8oogzX") = 0 [pid 309] mkdir("./0", 0777 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 305] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 310 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] chdir("./0") = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 31.828974][ T28] audit: type=1400 audit(1793067406.839:64): avc: denied { execmem } for pid=304 comm="syz-executor561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 [pid 310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] memfd_create("syzkaller", 0) = 3 executing program [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 305] ioctl(3, LOOP_CLR_FD [pid 308] set_robust_list(0x55557b42f6a0, 24 [pid 307] getrandom( [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] <... write resumed>) = 262144 [pid 310] munmap(0x7f64665ee000, 138412032) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... set_robust_list resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] getrandom("\xd1\x82\x80\x28\x41\x85\x47\xdd", 8, GRND_NONBLOCK) = 8 [pid 308] mkdir("./syzkaller.TEyK0B", 0700) = 0 [pid 308] chmod("./syzkaller.TEyK0B", 0777) = 0 [pid 308] chdir("./syzkaller.TEyK0B") = 0 [pid 308] mkdir("./0", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... openat resumed>) = 4 [ 31.858710][ T28] audit: type=1400 audit(1793067406.869:65): avc: denied { read } for pid=305 comm="syz-executor561" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.892271][ T28] audit: type=1400 audit(1793067406.869:66): avc: denied { open } for pid=309 comm="syz-executor561" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 310] ioctl(4, LOOP_SET_FD, 3 [pid 307] <... getrandom resumed>"\x00\x41\xe1\x22\x7c\x64\xad\x37", 8, GRND_NONBLOCK) = 8 [pid 306] getrandom( [pid 305] close(3 [pid 308] <... clone resumed>, child_tidptr=0x55557b42f690) = 311 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] chdir("./0") = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 311] write(1, "executing program\n", 18) = 18 executing program [pid 311] memfd_create("syzkaller", 0) = 3 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 307] mkdir("./syzkaller.ioF7Vq", 0700 [pid 306] <... getrandom resumed>"\x1c\x63\x53\x45\x2b\xdc\x29\xa8", 8, GRND_NONBLOCK) = 8 [pid 305] <... close resumed>) = 0 [pid 306] mkdir("./syzkaller.U7thfG", 0700 [pid 307] <... mkdir resumed>) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] chmod("./syzkaller.ioF7Vq", 0777 [pid 306] <... mkdir resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 310] close(3) = 0 [pid 310] close(4) = 0 [ 31.919386][ T310] loop4: detected capacity change from 0 to 512 [ 31.928803][ T28] audit: type=1400 audit(1793067406.869:67): avc: denied { ioctl } for pid=309 comm="syz-executor561" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 311] <... write resumed>) = 262144 [pid 310] mkdir("./file0", 0777) = 0 [pid 311] munmap(0x7f64665ee000, 138412032) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 310] mount("/dev/loop4", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 311] <... openat resumed>) = 4 [pid 307] <... chmod resumed>) = 0 [pid 306] chmod("./syzkaller.U7thfG", 0777 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 31.966314][ T28] audit: type=1400 audit(1793067406.929:68): avc: denied { write } for pid=310 comm="syz-executor561" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.995017][ T310] EXT4-fs: Ignoring removed oldalloc option [pid 311] ioctl(4, LOOP_SET_FD, 3ci2-android-6-1/strace-static-x86_64: Process 313 attached [pid 307] chdir("./syzkaller.ioF7Vq" [pid 306] <... chmod resumed>) = 0 [pid 313] set_robust_list(0x55557b42f6a0, 24 [pid 307] <... chdir resumed>) = 0 [pid 313] <... set_robust_list resumed>) = 0 [pid 306] chdir("./syzkaller.U7thfG" [pid 305] <... clone resumed>, child_tidptr=0x55557b42f690) = 313 [pid 307] mkdir("./0", 0777 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... chdir resumed>) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... mkdir resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] mkdir("./0", 0777 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 313] chdir("./0" [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 313] <... chdir resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 313] <... prctl resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 313] setpgid(0, 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 313] <... setpgid resumed>) = 0 [pid 306] close(3 [pid 307] <... close resumed>) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] <... close resumed>) = 0 [pid 313] <... openat resumed>) = 3 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 313] write(3, "1000", 4 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 313] <... write resumed>) = 4 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] close(3 [pid 307] <... clone resumed>, child_tidptr=0x55557b42f690) = 314 [pid 313] <... close resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 313] symlink("/dev/binderfs", "./binderfs" [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55557b42f690) = 315 [pid 313] <... symlink resumed>) = 0 [pid 313] write(1, "executing program\n", 18 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... write resumed>) = 18 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] memfd_create("syzkaller", 0) = 3 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 executing program [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144ci2-android-6-1/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] chdir("./0") = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 313] <... write resumed>) = 262144 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] munmap(0x7f64665ee000, 138412032) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 314] <... openat resumed>) = 3 ci2-android-6-1/strace-static-x86_64: Process 315 attached [pid 313] <... openat resumed>) = 4 [pid 314] write(3, "1000", 4) = 4 [pid 315] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 314] close(3 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... close resumed>) = 0 [pid 313] ioctl(4, LOOP_SET_FD, 3 [pid 314] symlink("/dev/binderfs", "./binderfs" [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] chdir("./0" [pid 314] <... symlink resumed>) = 0 [pid 315] <... chdir resumed>) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] memfd_create("syzkaller", 0 [pid 315] <... openat resumed>) = 3 [pid 314] <... memfd_create resumed>) = 3 [pid 315] write(3, "1000", 4) = 4 executing program [pid 315] close(3) = 0 [pid 314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 315] write(1, "executing program\n", 18) = 18 [pid 314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 executing program [pid 315] memfd_create("syzkaller", 0 [pid 313] <... ioctl resumed>) = 0 [pid 315] <... memfd_create resumed>) = 3 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 314] <... write resumed>) = 262144 [pid 313] close(3 [pid 315] <... write resumed>) = 262144 [ 32.001292][ T28] audit: type=1400 audit(1793067406.999:69): avc: denied { mounton } for pid=310 comm="syz-executor561" path="/root/syzkaller.8oogzX/0/file0" dev="sda1" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.010485][ T311] loop3: detected capacity change from 0 to 512 [ 32.065380][ T313] loop0: detected capacity change from 0 to 512 [pid 313] <... close resumed>) = 0 [pid 313] close(4 [pid 314] munmap(0x7f64665ee000, 138412032) = 0 [pid 315] munmap(0x7f64665ee000, 138412032) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 315] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 314] ioctl(4, LOOP_SET_FD, 3 [pid 313] <... close resumed>) = 0 [pid 313] mkdir("./file0", 0777 [pid 315] ioctl(4, LOOP_SET_FD, 3 [pid 313] <... mkdir resumed>) = 0 [pid 313] mount("/dev/loop0", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 315] <... ioctl resumed>) = 0 [pid 315] close(3) = 0 [pid 315] close(4) = 0 [pid 315] mkdir("./file0", 0777) = 0 [ 32.081129][ T310] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.089392][ T314] loop2: detected capacity change from 0 to 512 [ 32.101775][ T315] loop1: detected capacity change from 0 to 512 [ 32.111184][ T313] EXT4-fs: Ignoring removed oldalloc option [ 32.120794][ T313] EXT4-fs (loop0): Test dummy encryption mode enabled [pid 315] mount("/dev/loop1", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 314] <... ioctl resumed>) = 0 [pid 314] close(3) = 0 [pid 314] close(4) = 0 [pid 314] mkdir("./file0", 0777) = 0 [ 32.131821][ T315] EXT4-fs: Ignoring removed oldalloc option [ 32.141700][ T314] EXT4-fs: Ignoring removed oldalloc option [ 32.184222][ T310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.195193][ T313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.214318][ T315] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.225545][ T314] EXT4-fs (loop2): Test dummy encryption mode enabled [pid 314] mount("/dev/loop2", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 313] <... mount resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 310] <... mount resumed>) = 0 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 311] close(3 [pid 310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 313] <... openat resumed>) = 3 [pid 311] <... close resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 313] chdir("./file0" [pid 311] close(4 [pid 310] chdir("./file0" [pid 311] <... close resumed>) = 0 [pid 313] <... chdir resumed>) = 0 [pid 311] mkdir("./file0", 0777 [pid 310] <... chdir resumed>) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 311] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 313] <... openat resumed>) = 4 [pid 311] mount("/dev/loop3", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 310] ioctl(4, LOOP_CLR_FD [pid 313] ioctl(4, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 310] close(4 [pid 313] close(4 [pid 310] <... close resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 310] memfd_create("syzkaller", 0 [pid 313] memfd_create("syzkaller", 0) = 4 [pid 310] <... memfd_create resumed>) = 4 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 313] <... mmap resumed>) = 0x7f64665ee000 [pid 310] <... mmap resumed>) = 0x7f64665ee000 [pid 313] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 310] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 313] <... write resumed>) = 262144 [pid 310] munmap(0x7f64665ee000, 138412032) = 0 [pid 313] munmap(0x7f64665ee000, 138412032) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 310] <... openat resumed>) = 5 [pid 313] ioctl(5, LOOP_SET_FD, 4 [pid 310] ioctl(5, LOOP_SET_FD, 4 [pid 313] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 310] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 313] ioctl(5, LOOP_CLR_FD [pid 310] ioctl(5, LOOP_CLR_FD [pid 313] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 313] ioctl(5, LOOP_SET_FD, 4 [pid 310] ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [ 32.238752][ T28] audit: type=1400 audit(1793067407.249:70): avc: denied { mount } for pid=310 comm="syz-executor561" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.274388][ T311] EXT4-fs: Ignoring removed oldalloc option [pid 310] close(5 [pid 313] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 313] close(5) = 0 [pid 313] close(4) = 0 [pid 313] exit_group(0 [pid 310] <... close resumed>) = 0 [pid 313] <... exit_group resumed>) = ? [pid 313] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 305] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 305] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 305] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] close(4) = 0 [ 32.289621][ T311] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.304190][ T305] EXT4-fs (loop0): unmounting filesystem. [pid 310] exit_group(0) = ? [pid 310] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 309] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 309] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... mount resumed>) = 0 [pid 315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 305] <... umount2 resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 315] chdir("./file0" [pid 305] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... chdir resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 305] newfstatat(AT_FDCWD, "./0/file0" [pid 315] <... openat resumed>) = 4 [pid 315] ioctl(4, LOOP_CLR_FD [pid 305] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... ioctl resumed>) = 0 [pid 315] close(4) = 0 [pid 314] <... mount resumed>) = 0 [pid 305] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] memfd_create("syzkaller", 0 [pid 314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... memfd_create resumed>) = 4 [pid 305] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 314] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 4 [pid 315] <... mmap resumed>) = 0x7f64665ee000 [pid 314] chdir("./file0" [pid 305] fstat(4 [pid 315] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 314] <... chdir resumed>) = 0 [pid 305] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 315] <... write resumed>) = 262144 [pid 314] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 305] getdents64(4 [pid 315] munmap(0x7f64665ee000, 138412032 [pid 305] <... getdents64 resumed>, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 315] <... munmap resumed>) = 0 [pid 305] close(4 [pid 315] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 314] <... openat resumed>) = 4 [pid 305] <... close resumed>) = 0 [pid 315] <... openat resumed>) = 5 [pid 314] ioctl(4, LOOP_CLR_FD [pid 305] rmdir("./0/file0" [pid 315] ioctl(5, LOOP_SET_FD, 4 [pid 314] <... ioctl resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 315] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 314] close(4 [pid 315] ioctl(5, LOOP_CLR_FD [pid 305] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... ioctl resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./0/binderfs" [pid 314] memfd_create("syzkaller", 0 [pid 305] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... memfd_create resumed>) = 4 [pid 305] unlink("./0/binderfs" [pid 314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 309] <... umount2 resumed>) = 0 [ 32.319998][ T28] audit: type=1400 audit(1793067407.309:71): avc: denied { unmount } for pid=305 comm="syz-executor561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.324030][ T315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.359181][ T314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.374380][ T309] EXT4-fs (loop4): unmounting filesystem. [pid 314] <... mmap resumed>) = 0x7f64665ee000 [pid 309] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... unlink resumed>) = 0 [pid 315] ioctl(5, LOOP_SET_FD, 4 [pid 314] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 305] getdents64(3 [pid 315] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 315] close(5 [pid 309] newfstatat(AT_FDCWD, "./0/file0" [pid 305] close(3 [pid 315] <... close resumed>) = 0 [pid 311] <... mount resumed>) = 0 [pid 309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... close resumed>) = 0 [pid 315] close(4 [pid 311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 309] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] rmdir("./0" [pid 315] <... close resumed>) = 0 [pid 314] <... write resumed>) = 262144 [pid 311] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... rmdir resumed>) = 0 [pid 315] exit_group(0 [pid 309] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] mkdir("./1", 0777 [pid 315] <... exit_group resumed>) = ? [pid 311] chdir("./file0" [pid 309] <... openat resumed>) = 4 [pid 305] <... mkdir resumed>) = 0 [pid 315] +++ exited with 0 +++ [pid 314] munmap(0x7f64665ee000, 138412032 [pid 309] fstat(4 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 314] <... munmap resumed>) = 0 [pid 311] <... chdir resumed>) = 0 [pid 309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... openat resumed>) = 3 [pid 314] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 309] getdents64(4 [pid 305] ioctl(3, LOOP_CLR_FD [pid 314] <... openat resumed>) = 5 [pid 311] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 309] <... getdents64 resumed>, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 314] ioctl(5, LOOP_SET_FD, 4 [pid 309] getdents64(4 [pid 305] close(3 [pid 314] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 309] <... getdents64 resumed>, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 305] <... close resumed>) = 0 [pid 314] ioctl(5, LOOP_CLR_FD [pid 309] close(4 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[] [pid 314] <... ioctl resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] rmdir("./0/file0" [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] <... openat resumed>) = 4 [pid 309] <... rmdir resumed>) = 0 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... clone resumed>, child_tidptr=0x55557b42f690) = 331 [pid 311] ioctl(4, LOOP_CLR_FD [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 309] newfstatat(AT_FDCWD, "./0/binderfs" [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] ioctl(5, LOOP_SET_FD, 4 [pid 309] unlink("./0/binderfs" [pid 314] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 311] <... ioctl resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 314] close(5 [pid 309] getdents64(3ci2-android-6-1/strace-static-x86_64: Process 331 attached [pid 314] <... close resumed>) = 0 [pid 311] close(4 [pid 309] <... getdents64 resumed>, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 331] set_robust_list(0x55557b42f6a0, 24 [pid 314] close(4 [pid 311] <... close resumed>) = 0 [pid 309] close(3 [pid 306] <... restart_syscall resumed>) = 0 [pid 331] <... set_robust_list resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 311] memfd_create("syzkaller", 0 [pid 309] <... close resumed>) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [] [pid 314] exit_group(0 [pid 309] rmdir("./0" [pid 331] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... exit_group resumed>) = ? [pid 311] <... memfd_create resumed>) = 4 [pid 309] <... rmdir resumed>) = 0 [pid 331] chdir("./1" [pid 314] +++ exited with 0 +++ [pid 309] mkdir("./1", 0777 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 331] <... chdir resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 306] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... mmap resumed>) = 0x7f64665ee000 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 332 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 311] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-android-6-1/strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] chdir("./1") = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 311] <... write resumed>) = 262144 [pid 306] <... openat resumed>) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 311] munmap(0x7f64665ee000, 138412032 [pid 306] getdents64(3 [pid 332] <... openat resumed>) = 3 [pid 306] <... getdents64 resumed>, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 332] write(3, "1000", 4 [pid 306] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] <... write resumed>) = 4 [pid 332] close(3) = 0 [pid 332] symlink("/dev/binderfs", "./binderfs" [pid 311] <... munmap resumed>) = 0 [pid 332] <... symlink resumed>) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 307] <... restart_syscall resumed>) = 0 [pid 311] <... openat resumed>) = 5 [pid 311] ioctl(5, LOOP_SET_FD, 4 [pid 307] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 311] ioctl(5, LOOP_CLR_FD [pid 307] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 332] write(1, "executing program\n", 18 [pid 311] <... ioctl resumed>) = 0 [pid 307] getdents64(3, 0x55557b430750 /* 4 entries */, 32768) = 112 executing program [pid 332] <... write resumed>) = 18 [pid 307] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 332] memfd_create("syzkaller", 0 [pid 331] <... prctl resumed>) = 0 [pid 331] setpgid(0, 0) = 0 [ 32.398311][ T311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.437455][ T306] EXT4-fs (loop1): unmounting filesystem. [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 331] write(1, "executing program\n", 18) = 18 [pid 331] memfd_create("syzkaller", 0) = 3 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 311] ioctl(5, LOOP_SET_FD, 4 [pid 332] <... memfd_create resumed>) = 3 executing program [pid 311] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 311] close(5) = 0 [pid 331] <... write resumed>) = 262144 [pid 331] munmap(0x7f64665ee000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3 [pid 311] close(4 [pid 331] <... ioctl resumed>) = 0 [pid 331] close(3) = 0 [pid 331] close(4) = 0 [pid 331] mkdir("./file0", 0777) = 0 [pid 331] mount("/dev/loop0", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 311] <... close resumed>) = 0 [pid 332] <... mmap resumed>) = 0x7f64665ee000 [pid 311] exit_group(0 [pid 332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 311] <... exit_group resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 308] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] <... write resumed>) = 262144 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3 [pid 332] munmap(0x7f64665ee000, 138412032 [pid 308] <... getdents64 resumed>, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 308] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] <... munmap resumed>) = 0 [ 32.451103][ T307] EXT4-fs (loop2): unmounting filesystem. [ 32.461100][ T331] loop0: detected capacity change from 0 to 512 [ 32.469800][ T331] EXT4-fs: Ignoring removed oldalloc option [ 32.481660][ T308] EXT4-fs (loop3): unmounting filesystem. [ 32.482759][ T331] EXT4-fs (loop0): Test dummy encryption mode enabled [pid 332] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 332] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 308] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./0/file0") = 0 [pid 308] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 308] unlink("./0/binderfs") = 0 [pid 308] getdents64(3, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./0") = 0 [pid 308] mkdir("./1", 0777) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = 0 [pid 308] close(3) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... umount2 resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55557b42f690) = 333 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./0/file0") = 0 [pid 307] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./0/binderfs") = 0 [pid 307] getdents64(3, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./0") = 0 [pid 307] mkdir("./1", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 334 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x55557b42f6a0, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] chdir("./1") = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 334] write(1, "executing program\n", 18) = 18 [pid 334] memfd_create("syzkaller", 0) = 3 [pid 334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 334] munmap(0x7f64665ee000, 138412032) = 0 [pid 334] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 executing program [pid 334] ioctl(4, LOOP_SET_FD, 3 [pid 306] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 334] <... ioctl resumed>) = 0 [pid 334] close(3) = 0 [pid 334] close(4) = 0 [pid 334] mkdir("./file0", 0777) = 0 [pid 334] mount("/dev/loop2", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 32.500658][ T332] loop4: detected capacity change from 0 to 512 [ 32.531203][ T334] loop2: detected capacity change from 0 to 512 [ 32.540032][ T334] EXT4-fs: Ignoring removed oldalloc option ci2-android-6-1/strace-static-x86_64: Process 333 attached [pid 306] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 333] set_robust_list(0x55557b42f6a0, 24 [pid 306] close(4) = 0 [pid 333] <... set_robust_list resumed>) = 0 [pid 306] rmdir("./0/file0") = 0 [pid 306] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./0/binderfs" [pid 333] chdir("./1" [pid 306] <... unlink resumed>) = 0 [pid 333] <... chdir resumed>) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] getdents64(3 [pid 333] <... prctl resumed>) = 0 [pid 306] <... getdents64 resumed>, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 333] setpgid(0, 0 [pid 306] close(3 [pid 333] <... setpgid resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./0" [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... rmdir resumed>) = 0 [pid 333] <... openat resumed>) = 3 [pid 306] mkdir("./1", 0777) = 0 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 333] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 333] symlink("/dev/binderfs", "./binderfs" [pid 306] ioctl(3, LOOP_CLR_FD [pid 333] <... symlink resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 333] write(1, "executing program\n", 18) = 18 [pid 306] <... close resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 333] memfd_create("syzkaller", 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 333] <... memfd_create resumed>) = 3 [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0ci2-android-6-1/strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55557b42f6a0, 24) = 0 [ 32.551789][ T334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.555454][ T331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] <... mmap resumed>) = 0x7f64665ee000 [pid 306] <... clone resumed>, child_tidptr=0x55557b42f690) = 339 [pid 339] chdir("./1") = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 339] write(1, "executing program\n", 18) = 18 [pid 339] memfd_create("syzkaller", 0) = 3 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 339] munmap(0x7f64665ee000, 138412032) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 executing program [pid 339] ioctl(4, LOOP_SET_FD, 3 [pid 333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 332] <... ioctl resumed>) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 339] <... ioctl resumed>) = 0 [pid 339] close(3) = 0 [pid 339] close(4 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] <... close resumed>) = 0 [pid 339] mkdir("./file0", 0777) = 0 [pid 339] mount("/dev/loop1", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 332] close(3) = 0 [pid 332] close(4) = 0 [pid 332] mkdir("./file0", 0777) = 0 [pid 332] mount("/dev/loop4", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 333] <... write resumed>) = 262144 [pid 333] munmap(0x7f64665ee000, 138412032) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 32.605506][ T339] loop1: detected capacity change from 0 to 512 [ 32.615508][ T339] EXT4-fs: Ignoring removed oldalloc option [ 32.624077][ T339] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.635615][ T332] EXT4-fs: Ignoring removed oldalloc option [pid 333] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 331] <... mount resumed>) = 0 [pid 333] close(3 [pid 331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 333] <... close resumed>) = 0 [pid 333] close(4 [pid 331] <... openat resumed>) = 3 [pid 333] <... close resumed>) = 0 [pid 331] chdir("./file0" [pid 333] mkdir("./file0", 0777 [pid 331] <... chdir resumed>) = 0 [pid 333] <... mkdir resumed>) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 333] mount("/dev/loop3", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 331] <... openat resumed>) = 4 [pid 331] ioctl(4, LOOP_CLR_FD) = 0 [pid 331] close(4) = 0 [pid 331] memfd_create("syzkaller", 0) = 4 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 331] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 331] munmap(0x7f64665ee000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 331] ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 331] ioctl(5, LOOP_CLR_FD) = 0 [ 32.648674][ T333] loop3: detected capacity change from 0 to 512 [ 32.657796][ T334] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.657860][ T332] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.685238][ T333] EXT4-fs: Ignoring removed oldalloc option [pid 331] ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 331] close(5) = 0 [pid 331] close(4) = 0 [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 305] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 305] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 305] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 334] <... mount resumed>) = 0 [pid 334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 334] chdir("./file0") = 0 [pid 334] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 334] ioctl(4, LOOP_CLR_FD) = 0 [pid 334] close(4 [pid 332] <... mount resumed>) = 0 [pid 332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 332] chdir("./file0") = 0 [pid 332] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 332] ioctl(4, LOOP_CLR_FD) = 0 [pid 334] <... close resumed>) = 0 [ 32.700951][ T333] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.710362][ T305] EXT4-fs (loop0): unmounting filesystem. [ 32.721104][ T332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.739066][ T339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [pid 334] memfd_create("syzkaller", 0) = 4 [pid 334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64665ee000 [pid 334] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 332] close(4 [pid 334] <... write resumed>) = 262144 [pid 334] munmap(0x7f64665ee000, 138412032) = 0 [pid 334] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 332] <... close resumed>) = 0 [pid 334] <... openat resumed>) = 5 [pid 334] ioctl(5, LOOP_SET_FD, 4 [pid 305] <... umount2 resumed>) = 0 [pid 334] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 333] <... mount resumed>) = 0 [pid 333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 333] chdir("./file0" [pid 334] ioctl(5, LOOP_CLR_FD) = 0 [pid 333] <... chdir resumed>) = 0 [pid 332] memfd_create("syzkaller", 0 [pid 305] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] <... memfd_create resumed>) = 4 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] newfstatat(AT_FDCWD, "./1/file0" [pid 332] <... mmap resumed>) = 0x7f64665ee000 [pid 305] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 332] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 339] <... mount resumed>) = 0 [pid 334] ioctl(5, LOOP_SET_FD, 4 [pid 305] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 334] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 334] close(5 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 334] <... close resumed>) = 0 [pid 333] ioctl(4, LOOP_CLR_FD) = 0 [pid 333] close(4) = 0 [pid 334] close(4) = 0 [pid 305] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 334] exit_group(0) = ? [pid 334] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 333] memfd_create("syzkaller", 0 [pid 332] <... write resumed>) = 262144 [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 332] munmap(0x7f64665ee000, 138412032 [pid 305] getdents64(4, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./1/file0") = 0 [pid 305] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./1/binderfs" [pid 307] <... restart_syscall resumed>) = 0 [pid 305] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./1/binderfs") = 0 [pid 307] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] getdents64(3 [pid 339] <... openat resumed>) = 3 [pid 333] <... memfd_create resumed>) = 4 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 339] chdir("./file0" [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] close(3 [pid 339] <... chdir resumed>) = 0 [pid 333] <... mmap resumed>) = 0x7f64665ee000 [pid 307] <... openat resumed>) = 3 [pid 305] <... close resumed>) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 333] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 332] <... munmap resumed>) = 0 [pid 307] fstat(3 [pid 305] rmdir("./1" [pid 339] <... openat resumed>) = 4 [pid 332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 307] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 339] ioctl(4, LOOP_CLR_FD [pid 307] getdents64(3 [pid 305] mkdir("./2", 0777 [pid 339] <... ioctl resumed>) = 0 [pid 333] <... write resumed>) = 262144 [pid 332] <... openat resumed>) = 5 [pid 307] <... getdents64 resumed>, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 305] <... mkdir resumed>) = 0 [pid 339] close(4 [pid 307] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 339] <... close resumed>) = 0 [pid 332] ioctl(5, LOOP_SET_FD, 4 [pid 305] <... openat resumed>) = 3 [pid 339] memfd_create("syzkaller", 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 339] <... memfd_create resumed>) = 4 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] close(3 [pid 339] <... mmap resumed>) = 0x7f64665ee000 [pid 305] <... close resumed>) = 0 [pid 339] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 333] munmap(0x7f64665ee000, 138412032 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 333] <... munmap resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55557b42f690) = 346 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 5 [pid 333] ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 333] ioctl(5, LOOP_CLR_FD) = 0 [pid 339] <... write resumed>) = 262144 [pid 332] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 332] ioctl(5, LOOP_CLR_FD [pid 333] ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 333] close(5ci2-android-6-1/strace-static-x86_64: Process 346 attached ) = 0 [pid 332] <... ioctl resumed>) = 0 [pid 333] close(4 [pid 346] set_robust_list(0x55557b42f6a0, 24 [pid 333] <... close resumed>) = 0 [pid 346] <... set_robust_list resumed>) = 0 [pid 333] exit_group(0) = ? [pid 346] rt_sigprocmask(SIG_SETMASK, [] [pid 333] +++ exited with 0 +++ [pid 332] ioctl(5, LOOP_SET_FD, 4 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 332] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 332] close(5 [pid 346] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] munmap(0x7f64665ee000, 138412032 [pid 332] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 332] close(4 [pid 308] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 346] chdir("./2" [pid 332] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 346] <... chdir resumed>) = 0 [pid 332] exit_group(0 [pid 308] <... openat resumed>) = 3 [pid 308] fstat(3 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 339] <... munmap resumed>) = 0 [pid 332] <... exit_group resumed>) = ? [pid 308] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 308] getdents64(3 [pid 332] +++ exited with 0 +++ [pid 308] <... getdents64 resumed>, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 346] <... prctl resumed>) = 0 [pid 308] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 346] setpgid(0, 0 [pid 339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 346] <... setpgid resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./1/file0" [pid 339] <... openat resumed>) = 5 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 346] write(3, "1000", 4) = 4 [pid 339] ioctl(5, LOOP_SET_FD, 4 [pid 307] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 346] close(3) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 32.750206][ T333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.792832][ T307] EXT4-fs (loop2): unmounting filesystem. [pid 346] symlink("/dev/binderfs", "./binderfs" [pid 339] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 309] <... restart_syscall resumed>) = 0 [pid 307] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 346] <... symlink resumed>) = 0 [pid 339] ioctl(5, LOOP_CLR_FD [pid 307] <... openat resumed>) = 4 [pid 346] write(1, "executing program\n", 18 [pid 339] <... ioctl resumed>) = 0 [pid 307] fstat(4 [pid 346] <... write resumed>) = 18 [pid 307] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 346] memfd_create("syzkaller", 0 [pid 307] getdents64(4 [pid 309] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... getdents64 resumed>, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 346] <... memfd_create resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 309] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] getdents64(4 [pid 309] <... openat resumed>) = 3 [pid 346] <... mmap resumed>) = 0x7f64665ee000 [pid 309] fstat(3 [pid 307] <... getdents64 resumed>, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 339] ioctl(5, LOOP_SET_FD, 4 [pid 307] close(4 [pid 339] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 307] <... close resumed>) = 0 [pid 339] close(5 [pid 309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] rmdir("./1/file0" [pid 346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 339] <... close resumed>) = 0 [pid 309] getdents64(3 [pid 307] <... rmdir resumed>) = 0 [pid 307] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./1/binderfs" [pid 346] <... write resumed>) = 262144 [pid 339] close(4 [pid 309] <... getdents64 resumed>, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 307] <... unlink resumed>) = 0 [pid 346] munmap(0x7f64665ee000, 138412032 [pid 307] getdents64(3, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 307] close(3 [pid 339] <... close resumed>) = 0 [pid 309] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./1" [pid 339] exit_group(0 [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./2", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 347 [pid 346] <... munmap resumed>) = 0 [pid 339] <... exit_group resumed>) = ? [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 346] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 347 attached [pid 339] +++ exited with 0 +++ [pid 346] <... openat resumed>) = 4 [pid 346] ioctl(4, LOOP_SET_FD, 3 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 347] set_robust_list(0x55557b42f6a0, 24 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 347] <... set_robust_list resumed>) = 0 [pid 346] <... ioctl resumed>) = 0 [pid 347] rt_sigprocmask(SIG_SETMASK, [] [pid 346] close(3 [pid 347] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 347] chdir("./2" [pid 346] <... close resumed>) = 0 [pid 347] <... chdir resumed>) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] close(4 [pid 347] write(3, "1000", 4 [pid 346] <... close resumed>) = 0 [pid 347] <... write resumed>) = 4 [pid 347] close(3 [pid 346] mkdir("./file0", 0777 [pid 347] <... close resumed>) = 0 [pid 347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 347] write(1, "executing program\n", 18) = 18 executing program [pid 347] memfd_create("syzkaller", 0 [pid 346] <... mkdir resumed>) = 0 [pid 347] <... memfd_create resumed>) = 3 [pid 347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 346] mount("/dev/loop0", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 347] <... mmap resumed>) = 0x7f64665ee000 [pid 347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55557b430750 /* 4 entries */, 32768) = 112 [pid 306] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 347] <... write resumed>) = 262144 [pid 347] munmap(0x7f64665ee000, 138412032) = 0 [pid 347] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 32.831546][ T308] EXT4-fs (loop3): unmounting filesystem. [ 32.851776][ T309] EXT4-fs (loop4): unmounting filesystem. [ 32.870278][ T346] EXT4-fs: Ignoring removed oldalloc option [pid 347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 347] close(3) = 0 [pid 347] close(4) = 0 [pid 347] mkdir("./file0", 0777 [pid 308] <... umount2 resumed>) = 0 [pid 347] <... mkdir resumed>) = 0 [pid 347] mount("/dev/loop2", "./file0", "ext4", 0, "test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue" [pid 308] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 308] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./1/file0") = 0 [pid 308] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 308] unlink("./1/binderfs") = 0 [pid 308] getdents64(3, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./1") = 0 [pid 308] mkdir("./2", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557b42f690) = 348 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] <... umount2 resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 348 attached [pid 306] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 32.880916][ T306] EXT4-fs (loop1): unmounting filesystem. [ 32.890796][ T347] EXT4-fs: Ignoring removed oldalloc option [ 32.919135][ T347] EXT4-fs (loop2): Test dummy encryption mode enabled [pid 348] set_robust_list(0x55557b42f6a0, 24 [pid 309] <... umount2 resumed>) = 0 [pid 306] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 309] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 348] <... set_robust_list resumed>) = 0 [pid 309] newfstatat(AT_FDCWD, "./1/file0" [pid 306] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... openat resumed>) = 4 [pid 348] rt_sigprocmask(SIG_SETMASK, [] [pid 309] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] fstat(4 [pid 348] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 348] chdir("./2" [pid 306] getdents64(4 [pid 309] fstat(4 [pid 348] <... chdir resumed>) = 0 [pid 309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... getdents64 resumed>, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] getdents64(4 [pid 306] getdents64(4 [pid 309] <... getdents64 resumed>, 0x55557b438790 /* 2 entries */, 32768) = 48 [pid 348] <... prctl resumed>) = 0 [pid 306] <... getdents64 resumed>, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 309] getdents64(4 [pid 306] close(4 [pid 348] setpgid(0, 0 [pid 309] <... getdents64 resumed>, 0x55557b438790 /* 0 entries */, 32768) = 0 [pid 348] <... setpgid resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 309] close(4 [pid 306] rmdir("./1/file0") = 0 [pid 306] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 309] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] rmdir("./1/file0" [pid 306] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./1/binderfs") = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... rmdir resumed>) = 0 [pid 306] getdents64(3 [pid 309] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>, 0x55557b430750 /* 0 entries */, 32768) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] close(3 [pid 348] <... openat resumed>) = 3 [pid 309] newfstatat(AT_FDCWD, "./1/binderfs" [pid 306] <... close resumed>) = 0 [pid 348] write(3, "1000", 4 [pid 309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] rmdir("./1"