./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2620662146 <...> syzkaller syzkaller login: [ 13.940814][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 13.940825][ T24] audit: type=1400 audit(1750329335.040:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.952268][ T24] audit: type=1400 audit(1750329335.040:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.959739][ T24] audit: type=1400 audit(1750329335.050:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[14295]" dev="pipefs" ino=14295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.981452][ T24] audit: type=1400 audit(1750329335.050:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.001205][ T24] audit: type=1400 audit(1750329335.050:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. execve("./syz-executor2620662146", ["./syz-executor2620662146"], 0x7ffd3b5751f0 /* 10 vars */) = 0 brk(NULL) = 0x555576139000 brk(0x555576139d40) = 0x555576139d40 arch_prctl(ARCH_SET_FS, 0x5555761393c0) = 0 set_tid_address(0x555576139690) = 282 set_robust_list(0x5555761396a0, 24) = 0 rseq(0x555576139ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2620662146", 4096) = 28 getrandom("\x09\x2f\x41\xff\x50\x39\xf8\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555576139d40 brk(0x55557615ad40) = 0x55557615ad40 brk(0x55557615b000) = 0x55557615b000 mprotect(0x7fa99b275000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 mkdir("./syzkaller.xxh1g1", 0700) = 0 chmod("./syzkaller.xxh1g1", 0777) = 0 chdir("./syzkaller.xxh1g1") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 283 ./strace-static-x86_64: Process 283 attached [pid 283] set_robust_list(0x5555761396a0, 24) = 0 [pid 283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 283] getppid() = 0 [pid 283] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 283] unshare(CLONE_NEWNS) = 0 [pid 283] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 283] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 283] unshare(CLONE_NEWCGROUP) = 0 [pid 283] unshare(CLONE_NEWUTS) = 0 [pid 283] unshare(CLONE_SYSVSEM) = 0 [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] getpid() = 1 [pid 283] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[3]}, 88) = 3 [pid 289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 290 attached [pid 290] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 290] memfd_create("syzkaller", 0) = 3 [pid 290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 290] munmap(0x7fa992d8a000, 138412032) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 290] close(3) = 0 [pid 290] close(4) = 0 [pid 290] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 24.138760][ T283] request_module fs-gadgetfs succeeded, but still no fs? [pid 290] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 24.262729][ T290] EXT4-fs (loop0): Test dummy encryption mode enabled [ 24.269591][ T290] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 290] ioctl(3, LOOP_CLR_FD) = 0 [pid 290] close(3) = 0 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan", ifr_ifindex=43}) = 0 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0", ifr_ifindex=44}) = 0 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 290] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 0 [pid 290] gettid() = 3 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2c\x00\x00\x00\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x03\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 1 [pid 290] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2b\x00\x00\x00\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x03\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 290] <... sendmsg resumed>) = 40 [pid 290] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 290] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] close(3) = 0 [pid 289] close(4) = 0 [pid 289] close(5) = -1 EBADF (Bad file descriptor) [pid 289] close(6) = -1 EBADF (Bad file descriptor) [pid 289] close(7) = -1 EBADF (Bad file descriptor) [pid 289] close(8) = -1 EBADF (Bad file descriptor) [pid 289] close(9) = -1 EBADF (Bad file descriptor) [pid 289] close(10) = -1 EBADF (Bad file descriptor) [pid 289] close(11) = -1 EBADF (Bad file descriptor) [pid 289] close(12) = -1 EBADF (Bad file descriptor) [pid 289] close(13) = -1 EBADF (Bad file descriptor) [pid 289] close(14) = -1 EBADF (Bad file descriptor) [pid 289] close(15) = -1 EBADF (Bad file descriptor) [pid 289] close(16) = -1 EBADF (Bad file descriptor) [pid 289] close(17) = -1 EBADF (Bad file descriptor) [pid 289] close(18) = -1 EBADF (Bad file descriptor) [pid 289] close(19) = -1 EBADF (Bad file descriptor) [pid 289] close(20) = -1 EBADF (Bad file descriptor) [pid 289] close(21) = -1 EBADF (Bad file descriptor) [pid 289] close(22) = -1 EBADF (Bad file descriptor) [pid 289] close(23) = -1 EBADF (Bad file descriptor) [pid 289] close(24) = -1 EBADF (Bad file descriptor) [pid 289] close(25) = -1 EBADF (Bad file descriptor) [pid 289] close(26) = -1 EBADF (Bad file descriptor) [pid 289] close(27) = -1 EBADF (Bad file descriptor) [pid 289] close(28) = -1 EBADF (Bad file descriptor) [pid 289] close(29) = -1 EBADF (Bad file descriptor) [pid 289] exit_group(0) = ? [pid 290] <... futex resumed>) = ? [pid 290] +++ exited with 0 +++ [pid 289] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./0/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./0") = 0 [pid 283] mkdir("./1", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 4 ./strace-static-x86_64: Process 292 attached [pid 292] set_robust_list(0x5555761396a0, 24) = 0 [pid 292] chdir("./1") = 0 [pid 292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 292] setpgid(0, 0) = 0 [pid 292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] write(3, "1000", 4) = 4 [pid 292] close(3) = 0 [pid 292] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 292] write(1, "executing program\n", 18) = 18 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 292] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 293 attached => {parent_tid=[5]}, 88) = 5 [pid 293] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 293] memfd_create("syzkaller", 0) = 3 [pid 293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 293] munmap(0x7fa992d8a000, 138412032) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 293] close(3) = 0 [pid 293] close(4) = 0 [pid 293] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 24.463042][ T290] device veth0_vlan left promiscuous mode [ 24.469067][ T290] device veth0_vlan entered promiscuous mode [pid 293] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 24.528948][ T293] EXT4-fs (loop0): Test dummy encryption mode enabled [ 24.535983][ T293] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 293] ioctl(3, LOOP_CLR_FD) = 0 [pid 293] close(3) = 0 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 292] <... futex resumed>) = 0 [pid 293] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 0 [pid 293] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 0 [pid 293] gettid() = 5 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x05\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 292] <... futex resumed>) = 0 [pid 293] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 292] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 0 [pid 293] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x05\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 293] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] close(3) = 0 [pid 292] close(4) = 0 [pid 292] close(5) = -1 EBADF (Bad file descriptor) [pid 292] close(6) = -1 EBADF (Bad file descriptor) [pid 292] close(7) = -1 EBADF (Bad file descriptor) [pid 292] close(8) = -1 EBADF (Bad file descriptor) [pid 292] close(9) = -1 EBADF (Bad file descriptor) [pid 292] close(10) = -1 EBADF (Bad file descriptor) [pid 292] close(11) = -1 EBADF (Bad file descriptor) [pid 292] close(12) = -1 EBADF (Bad file descriptor) [pid 292] close(13) = -1 EBADF (Bad file descriptor) [pid 292] close(14) = -1 EBADF (Bad file descriptor) [pid 292] close(15) = -1 EBADF (Bad file descriptor) [pid 292] close(16) = -1 EBADF (Bad file descriptor) [pid 292] close(17) = -1 EBADF (Bad file descriptor) [pid 292] close(18) = -1 EBADF (Bad file descriptor) [pid 292] close(19) = -1 EBADF (Bad file descriptor) [pid 292] close(20) = -1 EBADF (Bad file descriptor) [pid 292] close(21) = -1 EBADF (Bad file descriptor) [pid 292] close(22) = -1 EBADF (Bad file descriptor) [pid 292] close(23) = -1 EBADF (Bad file descriptor) [pid 292] close(24) = -1 EBADF (Bad file descriptor) [pid 292] close(25) = -1 EBADF (Bad file descriptor) [pid 292] close(26) = -1 EBADF (Bad file descriptor) [pid 292] close(27) = -1 EBADF (Bad file descriptor) [pid 292] close(28) = -1 EBADF (Bad file descriptor) [pid 292] close(29) = -1 EBADF (Bad file descriptor) [pid 292] exit_group(0) = ? [pid 293] <... futex resumed>) = ? [pid 293] +++ exited with 0 +++ [pid 292] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./1/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./1") = 0 [pid 283] mkdir("./2", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 6 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x5555761396a0, 24) = 0 [pid 296] chdir("./2") = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 296] write(1, "executing program\n", 18) = 18 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 296] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [], [pid 296] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 297] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] memfd_create("syzkaller", 0) = 3 [pid 297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 297] munmap(0x7fa992d8a000, 138412032) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 297] close(3) = 0 [pid 297] close(4) = 0 [pid 297] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 297] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 24.672741][ T297] EXT4-fs (loop0): Test dummy encryption mode enabled [ 24.679882][ T297] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 297] ioctl(3, LOOP_CLR_FD) = 0 [pid 297] close(3) = 0 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 297] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 0 [pid 297] gettid() = 7 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x07\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x07\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 297] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 296] close(3) = 0 [pid 296] close(4) = 0 [pid 296] close(5) = -1 EBADF (Bad file descriptor) [pid 296] close(6) = -1 EBADF (Bad file descriptor) [pid 296] close(7) = -1 EBADF (Bad file descriptor) [pid 296] close(8) = -1 EBADF (Bad file descriptor) [pid 296] close(9) = -1 EBADF (Bad file descriptor) [pid 296] close(10) = -1 EBADF (Bad file descriptor) [pid 296] close(11) = -1 EBADF (Bad file descriptor) [pid 296] close(12) = -1 EBADF (Bad file descriptor) [pid 296] close(13) = -1 EBADF (Bad file descriptor) [pid 296] close(14) = -1 EBADF (Bad file descriptor) [pid 296] close(15) = -1 EBADF (Bad file descriptor) [pid 296] close(16) = -1 EBADF (Bad file descriptor) [pid 296] close(17) = -1 EBADF (Bad file descriptor) [pid 296] close(18) = -1 EBADF (Bad file descriptor) [pid 296] close(19) = -1 EBADF (Bad file descriptor) [pid 296] close(20) = -1 EBADF (Bad file descriptor) [pid 296] close(21) = -1 EBADF (Bad file descriptor) [pid 296] close(22) = -1 EBADF (Bad file descriptor) [pid 296] close(23) = -1 EBADF (Bad file descriptor) [pid 296] close(24) = -1 EBADF (Bad file descriptor) [pid 296] close(25) = -1 EBADF (Bad file descriptor) [pid 296] close(26) = -1 EBADF (Bad file descriptor) [pid 296] close(27) = -1 EBADF (Bad file descriptor) [pid 296] close(28) = -1 EBADF (Bad file descriptor) [pid 296] close(29) = -1 EBADF (Bad file descriptor) [pid 296] exit_group(0) = ? [pid 297] <... futex resumed>) = ? [pid 297] +++ exited with 0 +++ [pid 296] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./2/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./2") = 0 [pid 283] mkdir("./3", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 8 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x5555761396a0, 24) = 0 [pid 299] chdir("./3") = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 299] write(1, "executing program\n", 18) = 18 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 299] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[9]}, 88) = 9 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 300 attached [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] memfd_create("syzkaller", 0) = 3 [pid 300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 300] munmap(0x7fa992d8a000, 138412032) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 300] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 300] close(3) = 0 [pid 300] close(4) = 0 [pid 300] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 300] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 24.814604][ T300] EXT4-fs (loop0): Test dummy encryption mode enabled [ 24.821478][ T300] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 300] ioctl(3, LOOP_CLR_FD) = 0 [pid 300] close(3) = 0 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 300] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 300] gettid() = 9 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 300] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x09\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 300] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x09\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 300] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] close(3) = 0 [pid 299] close(4) = 0 [pid 299] close(5) = -1 EBADF (Bad file descriptor) [pid 299] close(6) = -1 EBADF (Bad file descriptor) [pid 299] close(7) = -1 EBADF (Bad file descriptor) [pid 299] close(8) = -1 EBADF (Bad file descriptor) [pid 299] close(9) = -1 EBADF (Bad file descriptor) [pid 299] close(10) = -1 EBADF (Bad file descriptor) [pid 299] close(11) = -1 EBADF (Bad file descriptor) [pid 299] close(12) = -1 EBADF (Bad file descriptor) [pid 299] close(13) = -1 EBADF (Bad file descriptor) [pid 299] close(14) = -1 EBADF (Bad file descriptor) [pid 299] close(15) = -1 EBADF (Bad file descriptor) [pid 299] close(16) = -1 EBADF (Bad file descriptor) [pid 299] close(17) = -1 EBADF (Bad file descriptor) [pid 299] close(18) = -1 EBADF (Bad file descriptor) [pid 299] close(19) = -1 EBADF (Bad file descriptor) [pid 299] close(20) = -1 EBADF (Bad file descriptor) [pid 299] close(21) = -1 EBADF (Bad file descriptor) [pid 299] close(22) = -1 EBADF (Bad file descriptor) [pid 299] close(23) = -1 EBADF (Bad file descriptor) [pid 299] close(24) = -1 EBADF (Bad file descriptor) [pid 299] close(25) = -1 EBADF (Bad file descriptor) [pid 299] close(26) = -1 EBADF (Bad file descriptor) [pid 299] close(27) = -1 EBADF (Bad file descriptor) [pid 299] close(28) = -1 EBADF (Bad file descriptor) [pid 299] close(29) = -1 EBADF (Bad file descriptor) [pid 299] exit_group(0) = ? [pid 300] <... futex resumed>) = ? [pid 300] +++ exited with 0 +++ [pid 299] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 24.892693][ T7] ================================================================== [ 24.900927][ T7] BUG: KASAN: use-after-free in vlan_dev_get_iflink+0x6d/0x70 [ 24.908586][ T7] Read of size 4 at addr ffff8881017a2100 by task kworker/u4:0/7 [ 24.917109][ T7] [ 24.919469][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.10.238-syzkaller-00282-gd76d4cd0623a #0 [ 24.930762][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [pid 283] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./3/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./3") = 0 [pid 283] mkdir("./4", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [ 24.941869][ T7] Workqueue: netns cleanup_net [ 24.946660][ T7] Call Trace: [ 24.949982][ T7] __dump_stack+0x21/0x24 [ 24.954822][ T7] dump_stack_lvl+0x169/0x1d8 [ 24.959528][ T7] ? show_regs_print_info+0x18/0x18 [ 24.964774][ T7] ? thaw_kernel_threads+0x220/0x220 [ 24.970067][ T7] print_address_description+0x7f/0x2c0 [ 24.975623][ T7] ? vlan_dev_get_iflink+0x6d/0x70 [ 24.981297][ T7] kasan_report+0xe2/0x130 [ 24.985904][ T7] ? vlan_dev_get_iflink+0x6d/0x70 [ 24.991198][ T7] __asan_report_load4_noabort+0x14/0x20 [ 24.996851][ T7] vlan_dev_get_iflink+0x6d/0x70 [ 25.001785][ T7] ? vlan_dev_fix_features+0x180/0x180 [ 25.007672][ T7] dev_get_iflink+0x70/0xc0 [ 25.012174][ T7] rfc2863_policy+0x124/0x2b0 [ 25.016840][ T7] ? linkwatch_do_dev+0x11/0x140 [ 25.021772][ T7] linkwatch_do_dev+0x3b/0x140 [ 25.026525][ T7] linkwatch_forget_dev+0x170/0x180 [ 25.031735][ T7] netdev_run_todo+0x2bb/0xd20 [ 25.036530][ T7] ? netdev_refcnt_read+0x1d0/0x1d0 [ 25.041726][ T7] ? unregister_netdevice_queue+0x1aa/0x360 [ 25.047614][ T7] ? list_netdevice+0x4c0/0x4c0 [ 25.052552][ T7] ? unregister_vlan_dev+0x248/0x320 [ 25.058519][ T7] rtnl_unlock+0xe/0x10 [ 25.062865][ T7] default_device_exit_batch+0x335/0x390 [ 25.068583][ T7] ? default_device_exit+0x390/0x390 [ 25.073946][ T7] ? wait_woken+0x180/0x180 [ 25.078618][ T7] ? rtnl_unlock+0xe/0x10 [ 25.082937][ T7] ? default_device_exit+0x390/0x390 [ 25.088386][ T7] cleanup_net+0x5fb/0xb70 [ 25.092906][ T7] ? __switch_to_asm+0x34/0x60 [ 25.097873][ T7] ? __schedule+0xb4f/0x1310 [ 25.102550][ T7] ? ops_init+0x4a0/0x4a0 [ 25.106958][ T7] ? read_word_at_a_time+0x12/0x20 [ 25.112059][ T7] ? strscpy+0x9b/0x290 [ 25.116207][ T7] process_one_work+0x6e1/0xba0 [ 25.121049][ T7] worker_thread+0xa6a/0x13b0 [ 25.125864][ T7] kthread+0x346/0x3d0 [ 25.129933][ T7] ? worker_clr_flags+0x190/0x190 [ 25.135037][ T7] ? kthread_blkcg+0xd0/0xd0 [ 25.139616][ T7] ret_from_fork+0x1f/0x30 [ 25.144019][ T7] [ 25.146430][ T7] Allocated by task 283: [ 25.150668][ T7] __kasan_kmalloc+0xda/0x110 [ 25.155333][ T7] __kmalloc+0x1a7/0x330 [ 25.159654][ T7] kvmalloc_node+0x88/0x130 [ 25.164166][ T7] alloc_netdev_mqs+0x88/0xc80 [ 25.168919][ T7] rtnl_create_link+0x242/0x930 [ 25.173755][ T7] rtnl_newlink+0x105e/0x1640 [ 25.178418][ T7] rtnetlink_rcv_msg+0x9db/0xb90 [ 25.183354][ T7] netlink_rcv_skb+0x1e0/0x430 [ 25.188111][ T7] rtnetlink_rcv+0x1c/0x20 [ 25.192525][ T7] netlink_unicast+0x87c/0xa40 [ 25.197273][ T7] netlink_sendmsg+0x88d/0xb30 [ 25.202111][ T7] __sys_sendto+0x41d/0x580 [ 25.206605][ T7] __x64_sys_sendto+0xe5/0x100 [ 25.211487][ T7] do_syscall_64+0x31/0x40 [ 25.216492][ T7] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.222670][ T7] [ 25.225002][ T7] Freed by task 7: [ 25.228727][ T7] kasan_set_track+0x4a/0x70 [ 25.233326][ T7] kasan_set_free_info+0x23/0x40 [ 25.238390][ T7] ____kasan_slab_free+0x125/0x160 [ 25.243513][ T7] __kasan_slab_free+0x11/0x20 [ 25.248455][ T7] slab_free_freelist_hook+0xc5/0x190 [ 25.253823][ T7] kfree+0xc0/0x270 [ 25.257622][ T7] kvfree+0x35/0x40 [ 25.261422][ T7] netdev_freemem+0x3f/0x60 [ 25.265920][ T7] netdev_release+0x7f/0xb0 [ 25.270455][ T7] device_release+0x96/0x1c0 [ 25.275388][ T7] kobject_put+0x18a/0x270 [ 25.279803][ T7] netdev_run_todo+0xb99/0xd20 [ 25.284555][ T7] rtnl_unlock+0xe/0x10 [ 25.288712][ T7] default_device_exit_batch+0x335/0x390 [ 25.294418][ T7] cleanup_net+0x5fb/0xb70 [ 25.298833][ T7] process_one_work+0x6e1/0xba0 [ 25.303675][ T7] worker_thread+0xa6a/0x13b0 [ 25.308436][ T7] kthread+0x346/0x3d0 [ 25.312503][ T7] ret_from_fork+0x1f/0x30 [ 25.316900][ T7] [ 25.319218][ T7] The buggy address belongs to the object at ffff8881017a2000 [ 25.319218][ T7] which belongs to the cache kmalloc-4k of size 4096 [ 25.333264][ T7] The buggy address is located 256 bytes inside of [ 25.333264][ T7] 4096-byte region [ffff8881017a2000, ffff8881017a3000) [ 25.346890][ T7] The buggy address belongs to the page: [ 25.352526][ T7] page:ffffea000405e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1017a0 [ 25.362919][ T7] head:ffffea000405e800 order:3 compound_mapcount:0 compound_pincount:0 [ 25.371256][ T7] flags: 0x4000000000010200(slab|head) [ 25.376795][ T7] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042c00 [ 25.385371][ T7] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 25.393939][ T7] page dumped because: kasan: bad access detected [ 25.400335][ T7] page_owner tracks the page as allocated [ 25.406052][ T7] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2133736420, free_ts 0 [ 25.424015][ T7] prep_new_page+0x179/0x180 [ 25.428780][ T7] get_page_from_freelist+0x2235/0x23d0 [ 25.434348][ T7] __alloc_pages_nodemask+0x268/0x5f0 [ 25.439816][ T7] new_slab+0x84/0x3f0 [ 25.443874][ T7] ___slab_alloc+0x2a6/0x450 [ 25.448463][ T7] __slab_alloc+0x63/0xa0 [ 25.452915][ T7] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 25.458277][ T7] kobject_uevent_env+0x272/0x700 [ 25.463289][ T7] kobject_uevent+0x1d/0x30 [ 25.467780][ T7] device_del+0xd5f/0xed0 [ 25.472109][ T7] serdev_controller_add_platform+0x464/0x710 [ 25.478276][ T7] serdev_tty_port_register+0x21c/0x440 [ 25.483922][ T7] tty_port_register_device_attr_serdev+0xd2/0x140 [ 25.490534][ T7] uart_add_one_port+0xba9/0x1a50 [ 25.495572][ T7] serial8250_register_8250_port+0x138a/0x1aa0 [ 25.501890][ T7] serial_pnp_probe+0x4d5/0x6d0 [ 25.506898][ T7] page_owner free stack trace missing [ 25.512272][ T7] [ 25.514591][ T7] Memory state around the buggy address: [ 25.520234][ T7] ffff8881017a2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.528410][ T7] ffff8881017a2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.536724][ T7] >ffff8881017a2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 303 attached , child_tidptr=0x555576139690) = 10 [pid 303] set_robust_list(0x5555761396a0, 24) = 0 [pid 303] chdir("./4") = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 303] write(1, "executing program\n", 18executing program ) = 18 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 303] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[11]}, 88) = 11 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 305] munmap(0x7fa992d8a000, 138412032) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 305] close(3) = 0 [pid 305] close(4) = 0 [pid 305] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 25.544792][ T7] ^ [ 25.548854][ T7] ffff8881017a2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.557065][ T7] ffff8881017a2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.565158][ T7] ================================================================== [ 25.573215][ T7] Disabling lock debugging due to kernel taint [pid 305] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 25.609292][ T305] EXT4-fs (loop0): Test dummy encryption mode enabled [ 25.617860][ T305] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 305] ioctl(3, LOOP_CLR_FD) = 0 [pid 305] close(3) = 0 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] gettid() = 11 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x0b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x0b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 305] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] close(3) = 0 [pid 303] close(4) = 0 [pid 303] close(5) = -1 EBADF (Bad file descriptor) [pid 303] close(6) = -1 EBADF (Bad file descriptor) [pid 303] close(7) = -1 EBADF (Bad file descriptor) [pid 303] close(8) = -1 EBADF (Bad file descriptor) [pid 303] close(9) = -1 EBADF (Bad file descriptor) [pid 303] close(10) = -1 EBADF (Bad file descriptor) [pid 303] close(11) = -1 EBADF (Bad file descriptor) [pid 303] close(12) = -1 EBADF (Bad file descriptor) [pid 303] close(13) = -1 EBADF (Bad file descriptor) [pid 303] close(14) = -1 EBADF (Bad file descriptor) [pid 303] close(15) = -1 EBADF (Bad file descriptor) [pid 303] close(16) = -1 EBADF (Bad file descriptor) [pid 303] close(17) = -1 EBADF (Bad file descriptor) [pid 303] close(18) = -1 EBADF (Bad file descriptor) [pid 303] close(19) = -1 EBADF (Bad file descriptor) [pid 303] close(20) = -1 EBADF (Bad file descriptor) [pid 303] close(21) = -1 EBADF (Bad file descriptor) [pid 303] close(22) = -1 EBADF (Bad file descriptor) [pid 303] close(23) = -1 EBADF (Bad file descriptor) [pid 303] close(24) = -1 EBADF (Bad file descriptor) [pid 303] close(25) = -1 EBADF (Bad file descriptor) [pid 303] close(26) = -1 EBADF (Bad file descriptor) [pid 303] close(27) = -1 EBADF (Bad file descriptor) [pid 303] close(28) = -1 EBADF (Bad file descriptor) [pid 303] close(29) = -1 EBADF (Bad file descriptor) [pid 303] exit_group(0) = ? [pid 305] <... futex resumed>) = ? [pid 305] +++ exited with 0 +++ [pid 303] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./4/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./4") = 0 [pid 283] mkdir("./5", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 12 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x5555761396a0, 24) = 0 [pid 308] chdir("./5") = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 executing program [pid 308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] write(1, "executing program\n", 18) = 18 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 308] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[13]}, 88) = 13 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] memfd_create("syzkaller", 0) = 3 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 309] munmap(0x7fa992d8a000, 138412032) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 309] close(3) = 0 [pid 309] close(4) = 0 [pid 309] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 309] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 25.742780][ T309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 25.749634][ T309] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 309] ioctl(3, LOOP_CLR_FD) = 0 [pid 309] close(3) = 0 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 309] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 309] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 309] gettid( [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... gettid resumed>) = 13 [pid 308] <... futex resumed>) = 0 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x0d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 309] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x0d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 308] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... sendmsg resumed>) = 40 [pid 309] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 309] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] close(3) = 0 [pid 308] close(4) = 0 [pid 308] close(5) = -1 EBADF (Bad file descriptor) [pid 308] close(6) = -1 EBADF (Bad file descriptor) [pid 308] close(7) = -1 EBADF (Bad file descriptor) [pid 308] close(8) = -1 EBADF (Bad file descriptor) [pid 308] close(9) = -1 EBADF (Bad file descriptor) [pid 308] close(10) = -1 EBADF (Bad file descriptor) [pid 308] close(11) = -1 EBADF (Bad file descriptor) [pid 308] close(12) = -1 EBADF (Bad file descriptor) [pid 308] close(13) = -1 EBADF (Bad file descriptor) [pid 308] close(14) = -1 EBADF (Bad file descriptor) [pid 308] close(15) = -1 EBADF (Bad file descriptor) [pid 308] close(16) = -1 EBADF (Bad file descriptor) [pid 308] close(17) = -1 EBADF (Bad file descriptor) [pid 308] close(18) = -1 EBADF (Bad file descriptor) [pid 308] close(19) = -1 EBADF (Bad file descriptor) [pid 308] close(20) = -1 EBADF (Bad file descriptor) [pid 308] close(21) = -1 EBADF (Bad file descriptor) [pid 308] close(22) = -1 EBADF (Bad file descriptor) [pid 308] close(23) = -1 EBADF (Bad file descriptor) [pid 308] close(24) = -1 EBADF (Bad file descriptor) [pid 308] close(25) = -1 EBADF (Bad file descriptor) [pid 308] close(26) = -1 EBADF (Bad file descriptor) [pid 308] close(27) = -1 EBADF (Bad file descriptor) [pid 308] close(28) = -1 EBADF (Bad file descriptor) [pid 308] close(29) = -1 EBADF (Bad file descriptor) [pid 308] exit_group(0) = ? [pid 309] <... futex resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./5/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./5") = 0 [pid 283] mkdir("./6", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 14 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x5555761396a0, 24) = 0 [pid 311] chdir("./6") = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 311] write(1, "executing program\n", 18executing program ) = 18 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 311] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x7fa99b1aa9a0, 24 [pid 311] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15 [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 312] <... set_robust_list resumed>) = 0 [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 312] memfd_create("syzkaller", 0) = 3 [pid 312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 312] munmap(0x7fa992d8a000, 138412032) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 312] close(3) = 0 [pid 312] close(4) = 0 [pid 312] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 312] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [ 25.889403][ T312] EXT4-fs (loop0): Test dummy encryption mode enabled [ 25.896455][ T312] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 0 [pid 312] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 312] gettid( [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... gettid resumed>) = 15 [pid 311] <... futex resumed>) = 0 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 0 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x0f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... sendmsg resumed>) = 40 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 312] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x0f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 311] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... sendmsg resumed>) = 40 [pid 312] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 312] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] close(3) = 0 [pid 311] close(4) = 0 [pid 311] close(5) = -1 EBADF (Bad file descriptor) [pid 311] close(6) = -1 EBADF (Bad file descriptor) [pid 311] close(7) = -1 EBADF (Bad file descriptor) [pid 311] close(8) = -1 EBADF (Bad file descriptor) [pid 311] close(9) = -1 EBADF (Bad file descriptor) [pid 311] close(10) = -1 EBADF (Bad file descriptor) [pid 311] close(11) = -1 EBADF (Bad file descriptor) [pid 311] close(12) = -1 EBADF (Bad file descriptor) [pid 311] close(13) = -1 EBADF (Bad file descriptor) [pid 311] close(14) = -1 EBADF (Bad file descriptor) [pid 311] close(15) = -1 EBADF (Bad file descriptor) [pid 311] close(16) = -1 EBADF (Bad file descriptor) [pid 311] close(17) = -1 EBADF (Bad file descriptor) [pid 311] close(18) = -1 EBADF (Bad file descriptor) [pid 311] close(19) = -1 EBADF (Bad file descriptor) [pid 311] close(20) = -1 EBADF (Bad file descriptor) [pid 311] close(21) = -1 EBADF (Bad file descriptor) [pid 311] close(22) = -1 EBADF (Bad file descriptor) [pid 311] close(23) = -1 EBADF (Bad file descriptor) [pid 311] close(24) = -1 EBADF (Bad file descriptor) [pid 311] close(25) = -1 EBADF (Bad file descriptor) [pid 311] close(26) = -1 EBADF (Bad file descriptor) [pid 311] close(27) = -1 EBADF (Bad file descriptor) [pid 311] close(28) = -1 EBADF (Bad file descriptor) [pid 311] close(29) = -1 EBADF (Bad file descriptor) [pid 311] exit_group(0) = ? [pid 312] <... futex resumed>) = ? [pid 312] +++ exited with 0 +++ [pid 311] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./6/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./6") = 0 [pid 283] mkdir("./7", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 16 ./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x5555761396a0, 24) = 0 [pid 314] chdir("./7") = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 314] write(1, "executing program\n", 18executing program ) = 18 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 314] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x7fa99b1aa9a0, 24 [pid 314] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 315] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], [pid 315] rt_sigprocmask(SIG_SETMASK, [], [pid 314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 315] memfd_create("syzkaller", 0) = 3 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 315] munmap(0x7fa992d8a000, 138412032) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 315] close(3) = 0 [pid 315] close(4) = 0 [pid 315] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 26.060856][ T315] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.068129][ T315] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 315] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 0 [pid 315] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] gettid() = 17 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x11\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x11\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 315] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 314] close(3) = 0 [pid 314] close(4) = 0 [pid 315] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] close(5) = -1 EBADF (Bad file descriptor) [pid 314] close(6) = -1 EBADF (Bad file descriptor) [pid 314] close(7) = -1 EBADF (Bad file descriptor) [pid 314] close(8) = -1 EBADF (Bad file descriptor) [pid 314] close(9) = -1 EBADF (Bad file descriptor) [pid 314] close(10) = -1 EBADF (Bad file descriptor) [pid 314] close(11) = -1 EBADF (Bad file descriptor) [pid 314] close(12) = -1 EBADF (Bad file descriptor) [pid 314] close(13) = -1 EBADF (Bad file descriptor) [pid 314] close(14) = -1 EBADF (Bad file descriptor) [pid 314] close(15) = -1 EBADF (Bad file descriptor) [pid 314] close(16) = -1 EBADF (Bad file descriptor) [pid 314] close(17) = -1 EBADF (Bad file descriptor) [pid 314] close(18) = -1 EBADF (Bad file descriptor) [pid 314] close(19) = -1 EBADF (Bad file descriptor) [pid 314] close(20) = -1 EBADF (Bad file descriptor) [pid 314] close(21) = -1 EBADF (Bad file descriptor) [pid 314] close(22) = -1 EBADF (Bad file descriptor) [pid 314] close(23) = -1 EBADF (Bad file descriptor) [pid 314] close(24) = -1 EBADF (Bad file descriptor) [pid 314] close(25) = -1 EBADF (Bad file descriptor) [pid 314] close(26) = -1 EBADF (Bad file descriptor) [pid 314] close(27) = -1 EBADF (Bad file descriptor) [pid 314] close(28) = -1 EBADF (Bad file descriptor) [pid 314] close(29) = -1 EBADF (Bad file descriptor) [pid 314] exit_group(0) = ? [pid 315] <... futex resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 314] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./7/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./7") = 0 [pid 283] mkdir("./8", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 18 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x5555761396a0, 24) = 0 [pid 324] chdir("./8") = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 324] write(1, "executing program\n", 18executing program ) = 18 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 324] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 324] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 325 attached => {parent_tid=[19]}, 88) = 19 [pid 325] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] <... futex resumed>) = 0 [pid 325] memfd_create("syzkaller", 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 325] <... memfd_create resumed>) = 3 [pid 325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 325] munmap(0x7fa992d8a000, 138412032) = 0 [pid 325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 325] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 325] close(3) = 0 [pid 325] close(4) = 0 [pid 325] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 26.226923][ T325] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.234033][ T325] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 325] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 325] ioctl(3, LOOP_CLR_FD) = 0 [pid 325] close(3) = 0 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 0 [pid 325] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 0 [pid 325] gettid() = 19 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 1 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x13\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] <... futex resumed>) = 0 [pid 325] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x13\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 324] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... sendmsg resumed>) = 40 [pid 325] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] <... futex resumed>) = 0 [pid 324] close(3) = 0 [pid 324] close(4) = 0 [pid 325] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] close(5) = -1 EBADF (Bad file descriptor) [pid 324] close(6) = -1 EBADF (Bad file descriptor) [pid 324] close(7) = -1 EBADF (Bad file descriptor) [pid 324] close(8) = -1 EBADF (Bad file descriptor) [pid 324] close(9) = -1 EBADF (Bad file descriptor) [pid 324] close(10) = -1 EBADF (Bad file descriptor) [pid 324] close(11) = -1 EBADF (Bad file descriptor) [pid 324] close(12) = -1 EBADF (Bad file descriptor) [pid 324] close(13) = -1 EBADF (Bad file descriptor) [pid 324] close(14) = -1 EBADF (Bad file descriptor) [pid 324] close(15) = -1 EBADF (Bad file descriptor) [pid 324] close(16) = -1 EBADF (Bad file descriptor) [pid 324] close(17) = -1 EBADF (Bad file descriptor) [pid 324] close(18) = -1 EBADF (Bad file descriptor) [pid 324] close(19) = -1 EBADF (Bad file descriptor) [pid 324] close(20) = -1 EBADF (Bad file descriptor) [pid 324] close(21) = -1 EBADF (Bad file descriptor) [pid 324] close(22) = -1 EBADF (Bad file descriptor) [pid 324] close(23) = -1 EBADF (Bad file descriptor) [pid 324] close(24) = -1 EBADF (Bad file descriptor) [pid 324] close(25) = -1 EBADF (Bad file descriptor) [pid 324] close(26) = -1 EBADF (Bad file descriptor) [pid 324] close(27) = -1 EBADF (Bad file descriptor) [pid 324] close(28) = -1 EBADF (Bad file descriptor) [pid 324] close(29) = -1 EBADF (Bad file descriptor) [pid 324] exit_group(0) = ? [pid 325] <... futex resumed>) = ? [pid 325] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./8/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./8") = 0 [pid 283] mkdir("./9", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 20 ./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x5555761396a0, 24) = 0 [pid 327] chdir("./9") = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 327] write(1, "executing program\n", 18) = 18 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 327] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[21]}, 88) = 21 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] memfd_create("syzkaller", 0) = 3 [pid 328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 328] munmap(0x7fa992d8a000, 138412032) = 0 [pid 328] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 328] close(3) = 0 [pid 328] close(4) = 0 [pid 328] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 328] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 328] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 26.402763][ T328] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.409705][ T328] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 328] ioctl(3, LOOP_CLR_FD) = 0 [pid 328] close(3) = 0 [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 0 [pid 328] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] <... futex resumed>) = 0 [pid 328] gettid( [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... gettid resumed>) = 21 [pid 327] <... futex resumed>) = 0 [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x15\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... sendmsg resumed>) = 40 [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] <... futex resumed>) = 0 [pid 328] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x15\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 327] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] <... sendmsg resumed>) = 40 [pid 327] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 327] close(3 [pid 328] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] <... close resumed>) = 0 [pid 327] close(4) = 0 [pid 327] close(5) = -1 EBADF (Bad file descriptor) [pid 327] close(6) = -1 EBADF (Bad file descriptor) [pid 327] close(7) = -1 EBADF (Bad file descriptor) [pid 327] close(8) = -1 EBADF (Bad file descriptor) [pid 327] close(9) = -1 EBADF (Bad file descriptor) [pid 327] close(10) = -1 EBADF (Bad file descriptor) [pid 327] close(11) = -1 EBADF (Bad file descriptor) [pid 327] close(12) = -1 EBADF (Bad file descriptor) [pid 327] close(13) = -1 EBADF (Bad file descriptor) [pid 327] close(14) = -1 EBADF (Bad file descriptor) [pid 327] close(15) = -1 EBADF (Bad file descriptor) [pid 327] close(16) = -1 EBADF (Bad file descriptor) [pid 327] close(17) = -1 EBADF (Bad file descriptor) [pid 327] close(18) = -1 EBADF (Bad file descriptor) [pid 327] close(19) = -1 EBADF (Bad file descriptor) [pid 327] close(20) = -1 EBADF (Bad file descriptor) [pid 327] close(21) = -1 EBADF (Bad file descriptor) [pid 327] close(22) = -1 EBADF (Bad file descriptor) [pid 327] close(23) = -1 EBADF (Bad file descriptor) [pid 327] close(24) = -1 EBADF (Bad file descriptor) [pid 327] close(25) = -1 EBADF (Bad file descriptor) [pid 327] close(26) = -1 EBADF (Bad file descriptor) [pid 327] close(27) = -1 EBADF (Bad file descriptor) [pid 327] close(28) = -1 EBADF (Bad file descriptor) [pid 327] close(29) = -1 EBADF (Bad file descriptor) [pid 327] exit_group(0) = ? [pid 328] <... futex resumed>) = ? [pid 328] +++ exited with 0 +++ [pid 327] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>executing program ) = 0 [pid 283] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./9/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./9") = 0 [pid 283] mkdir("./10", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 22 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x5555761396a0, 24) = 0 [pid 330] chdir("./10") = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 330] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 330] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[23]}, 88) = 23 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] memfd_create("syzkaller", 0) = 3 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 331] munmap(0x7fa992d8a000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 331] close(3) = 0 [pid 331] close(4) = 0 [pid 331] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 26.583418][ T331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.590516][ T331] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 331] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 331] ioctl(3, LOOP_CLR_FD) = 0 [pid 331] close(3) = 0 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 0 [pid 331] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] gettid() = 23 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x17\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x17\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 331] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] <... futex resumed>) = 0 [pid 331] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] close(3) = 0 [pid 330] close(4) = 0 [pid 330] close(5) = -1 EBADF (Bad file descriptor) [pid 330] close(6) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0) = ? [pid 331] <... futex resumed>) = ? [pid 331] +++ exited with 0 +++ [pid 330] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./10/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./10") = 0 [pid 283] mkdir("./11", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 24 ./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x5555761396a0, 24) = 0 [pid 333] chdir("./11") = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 333] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[25]}, 88) = 25 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] memfd_create("syzkaller", 0) = 3 [pid 334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 334] munmap(0x7fa992d8a000, 138412032) = 0 [pid 334] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 334] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 334] close(3) = 0 [pid 334] close(4) = 0 [pid 334] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 26.825390][ T334] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.832339][ T334] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 334] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 334] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 334] ioctl(3, LOOP_CLR_FD) = 0 [pid 334] close(3) = 0 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] gettid() = 25 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 334] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x19\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 0 [pid 333] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x19\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 334] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 333] close(3) = 0 [pid 333] close(4 [pid 334] <... futex resumed>) = 1 [pid 334] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] <... close resumed>) = 0 [pid 333] close(5) = -1 EBADF (Bad file descriptor) [pid 333] close(6) = -1 EBADF (Bad file descriptor) [pid 333] close(7) = -1 EBADF (Bad file descriptor) [pid 333] close(8) = -1 EBADF (Bad file descriptor) [pid 333] close(9) = -1 EBADF (Bad file descriptor) [pid 333] close(10) = -1 EBADF (Bad file descriptor) [pid 333] close(11) = -1 EBADF (Bad file descriptor) [pid 333] close(12) = -1 EBADF (Bad file descriptor) [pid 333] close(13) = -1 EBADF (Bad file descriptor) [pid 333] close(14) = -1 EBADF (Bad file descriptor) [pid 333] close(15) = -1 EBADF (Bad file descriptor) [pid 333] close(16) = -1 EBADF (Bad file descriptor) [pid 333] close(17) = -1 EBADF (Bad file descriptor) [pid 333] close(18) = -1 EBADF (Bad file descriptor) [pid 333] close(19) = -1 EBADF (Bad file descriptor) [pid 333] close(20) = -1 EBADF (Bad file descriptor) [pid 333] close(21) = -1 EBADF (Bad file descriptor) [pid 333] close(22) = -1 EBADF (Bad file descriptor) [pid 333] close(23) = -1 EBADF (Bad file descriptor) [pid 333] close(24) = -1 EBADF (Bad file descriptor) [pid 333] close(25) = -1 EBADF (Bad file descriptor) [pid 333] close(26) = -1 EBADF (Bad file descriptor) [pid 333] close(27) = -1 EBADF (Bad file descriptor) [pid 333] close(28) = -1 EBADF (Bad file descriptor) [pid 333] close(29) = -1 EBADF (Bad file descriptor) [pid 333] exit_group(0) = ? [pid 334] <... futex resumed>) = ? [pid 334] +++ exited with 0 +++ [pid 333] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./11/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./11") = 0 [pid 283] mkdir("./12", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 26 ./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x5555761396a0, 24) = 0 [pid 339] chdir("./12") = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 339] write(1, "executing program\n", 18executing program ) = 18 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 339] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 340 attached => {parent_tid=[27]}, 88) = 27 [pid 340] set_robust_list(0x7fa99b1aa9a0, 24 [pid 339] rt_sigprocmask(SIG_SETMASK, [], [pid 340] <... set_robust_list resumed>) = 0 [pid 339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 340] memfd_create("syzkaller", 0) = 3 [pid 340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 340] munmap(0x7fa992d8a000, 138412032) = 0 [pid 340] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 340] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 340] close(3) = 0 [pid 340] close(4) = 0 [pid 340] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 340] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 340] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 26.999627][ T340] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.006796][ T340] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 340] ioctl(3, LOOP_CLR_FD) = 0 [pid 340] close(3) = 0 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 340] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] <... futex resumed>) = 1 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] gettid() = 27 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x1b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x1b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 340] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] close(3) = 0 [pid 339] close(4) = 0 [pid 339] close(5) = -1 EBADF (Bad file descriptor) [pid 339] close(6) = -1 EBADF (Bad file descriptor) [pid 339] close(7) = -1 EBADF (Bad file descriptor) [pid 339] close(8) = -1 EBADF (Bad file descriptor) [pid 339] close(9) = -1 EBADF (Bad file descriptor) [pid 339] close(10) = -1 EBADF (Bad file descriptor) [pid 339] close(11) = -1 EBADF (Bad file descriptor) [pid 339] close(12) = -1 EBADF (Bad file descriptor) [pid 339] close(13) = -1 EBADF (Bad file descriptor) [pid 339] close(14) = -1 EBADF (Bad file descriptor) [pid 339] close(15) = -1 EBADF (Bad file descriptor) [pid 339] close(16) = -1 EBADF (Bad file descriptor) [pid 339] close(17) = -1 EBADF (Bad file descriptor) [pid 339] close(18) = -1 EBADF (Bad file descriptor) [pid 339] close(19) = -1 EBADF (Bad file descriptor) [pid 339] close(20) = -1 EBADF (Bad file descriptor) [pid 339] close(21) = -1 EBADF (Bad file descriptor) [pid 339] close(22) = -1 EBADF (Bad file descriptor) [pid 339] close(23) = -1 EBADF (Bad file descriptor) [pid 339] close(24) = -1 EBADF (Bad file descriptor) [pid 339] close(25) = -1 EBADF (Bad file descriptor) [pid 339] close(26) = -1 EBADF (Bad file descriptor) [pid 339] close(27) = -1 EBADF (Bad file descriptor) [pid 339] close(28) = -1 EBADF (Bad file descriptor) [pid 339] close(29) = -1 EBADF (Bad file descriptor) [pid 339] exit_group(0) = ? [pid 340] <... futex resumed>) = ? [pid 340] +++ exited with 0 +++ [pid 339] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./12/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./12") = 0 [pid 283] mkdir("./13", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 28 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x5555761396a0, 24) = 0 [pid 342] chdir("./13") = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 342] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[29]}, 88) = 29 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 343] munmap(0x7fa992d8a000, 138412032) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 343] close(3) = 0 [pid 343] close(4) = 0 [pid 343] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 343] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 27.174366][ T343] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.184264][ T343] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 343] ioctl(3, LOOP_CLR_FD) = 0 [pid 343] close(3) = 0 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 343] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] gettid() = 29 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x1d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x1d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 343] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] close(3) = 0 [pid 342] close(4) = 0 [pid 342] close(5) = -1 EBADF (Bad file descriptor) [pid 342] close(6) = -1 EBADF (Bad file descriptor) [pid 342] close(7) = -1 EBADF (Bad file descriptor) [pid 342] close(8) = -1 EBADF (Bad file descriptor) [pid 342] close(9) = -1 EBADF (Bad file descriptor) [pid 342] close(10) = -1 EBADF (Bad file descriptor) [pid 342] close(11) = -1 EBADF (Bad file descriptor) [pid 342] close(12) = -1 EBADF (Bad file descriptor) [pid 342] close(13) = -1 EBADF (Bad file descriptor) [pid 342] close(14) = -1 EBADF (Bad file descriptor) [pid 342] close(15) = -1 EBADF (Bad file descriptor) [pid 342] close(16) = -1 EBADF (Bad file descriptor) [pid 342] close(17) = -1 EBADF (Bad file descriptor) [pid 342] close(18) = -1 EBADF (Bad file descriptor) [pid 342] close(19) = -1 EBADF (Bad file descriptor) [pid 342] close(20) = -1 EBADF (Bad file descriptor) [pid 342] close(21) = -1 EBADF (Bad file descriptor) [pid 342] close(22) = -1 EBADF (Bad file descriptor) [pid 342] close(23) = -1 EBADF (Bad file descriptor) [pid 342] close(24) = -1 EBADF (Bad file descriptor) [pid 342] close(25) = -1 EBADF (Bad file descriptor) [pid 342] close(26) = -1 EBADF (Bad file descriptor) [pid 342] close(27) = -1 EBADF (Bad file descriptor) [pid 342] close(28) = -1 EBADF (Bad file descriptor) [pid 342] close(29) = -1 EBADF (Bad file descriptor) [pid 342] exit_group(0) = ? [pid 343] <... futex resumed>) = ? [pid 343] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./13/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./13") = 0 [pid 283] mkdir("./14", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FDexecuting program ) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 30 ./strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x5555761396a0, 24) = 0 [pid 345] chdir("./14") = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 [pid 345] symlink("/dev/binderfs", "./binderfs") = 0 [pid 345] write(1, "executing program\n", 18) = 18 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 345] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[31]}, 88) = 31 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] memfd_create("syzkaller", 0) = 3 [pid 346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 346] munmap(0x7fa992d8a000, 138412032) = 0 [pid 346] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 346] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 346] close(3) = 0 [pid 346] close(4) = 0 [pid 346] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 346] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 346] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 27.379124][ T346] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.386441][ T346] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 346] ioctl(3, LOOP_CLR_FD) = 0 [pid 346] close(3) = 0 [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... futex resumed>) = 0 [pid 346] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... futex resumed>) = 1 [pid 346] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... futex resumed>) = 1 [pid 346] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... unshare resumed>) = 0 [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 345] <... futex resumed>) = 0 [pid 346] gettid( [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... gettid resumed>) = 31 [pid 345] <... futex resumed>) = 0 [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 346] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x1f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 345] <... futex resumed>) = 0 [pid 346] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x1f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 345] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... sendmsg resumed>) = 40 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 345] <... futex resumed>) = 0 [pid 345] close(3 [pid 346] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] <... close resumed>) = 0 [pid 345] close(4) = 0 [pid 345] close(5) = -1 EBADF (Bad file descriptor) [pid 345] close(6) = -1 EBADF (Bad file descriptor) [pid 345] close(7) = -1 EBADF (Bad file descriptor) [pid 345] close(8) = -1 EBADF (Bad file descriptor) [pid 345] close(9) = -1 EBADF (Bad file descriptor) [pid 345] close(10) = -1 EBADF (Bad file descriptor) [pid 345] close(11) = -1 EBADF (Bad file descriptor) [pid 345] close(12) = -1 EBADF (Bad file descriptor) [pid 345] close(13) = -1 EBADF (Bad file descriptor) [pid 345] close(14) = -1 EBADF (Bad file descriptor) [pid 345] close(15) = -1 EBADF (Bad file descriptor) [pid 345] close(16) = -1 EBADF (Bad file descriptor) [pid 345] close(17) = -1 EBADF (Bad file descriptor) [pid 345] close(18) = -1 EBADF (Bad file descriptor) [pid 345] close(19) = -1 EBADF (Bad file descriptor) [pid 345] close(20) = -1 EBADF (Bad file descriptor) [pid 345] close(21) = -1 EBADF (Bad file descriptor) [pid 345] close(22) = -1 EBADF (Bad file descriptor) [pid 345] close(23) = -1 EBADF (Bad file descriptor) [pid 345] close(24) = -1 EBADF (Bad file descriptor) [pid 345] close(25) = -1 EBADF (Bad file descriptor) [pid 345] close(26) = -1 EBADF (Bad file descriptor) [pid 345] close(27) = -1 EBADF (Bad file descriptor) [pid 345] close(28) = -1 EBADF (Bad file descriptor) [pid 345] close(29) = -1 EBADF (Bad file descriptor) [pid 345] exit_group(0) = ? [pid 346] <... futex resumed>) = ? [pid 346] +++ exited with 0 +++ [pid 345] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./14/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./14") = 0 [pid 283] mkdir("./15", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 32 ./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x5555761396a0, 24) = 0 [pid 351] chdir("./15") = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 [pid 351] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 351] write(1, "executing program\n", 18) = 18 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 351] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[33]}, 88) = 33 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] memfd_create("syzkaller", 0) = 3 [pid 352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 352] munmap(0x7fa992d8a000, 138412032) = 0 [pid 352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 352] close(3) = 0 [pid 352] close(4) = 0 [pid 352] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 352] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 27.628336][ T352] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.635386][ T352] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 352] ioctl(3, LOOP_CLR_FD) = 0 [pid 352] close(3) = 0 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] gettid() = 33 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x21\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x21\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 352] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] close(3) = 0 [pid 351] close(4) = 0 [pid 351] close(5) = -1 EBADF (Bad file descriptor) [pid 351] close(6) = -1 EBADF (Bad file descriptor) [pid 351] close(7) = -1 EBADF (Bad file descriptor) [pid 351] close(8) = -1 EBADF (Bad file descriptor) [pid 351] close(9) = -1 EBADF (Bad file descriptor) [pid 351] close(10) = -1 EBADF (Bad file descriptor) [pid 351] close(11) = -1 EBADF (Bad file descriptor) [pid 351] close(12) = -1 EBADF (Bad file descriptor) [pid 351] close(13) = -1 EBADF (Bad file descriptor) [pid 351] close(14) = -1 EBADF (Bad file descriptor) [pid 351] close(15) = -1 EBADF (Bad file descriptor) [pid 351] close(16) = -1 EBADF (Bad file descriptor) [pid 351] close(17) = -1 EBADF (Bad file descriptor) [pid 351] close(18) = -1 EBADF (Bad file descriptor) [pid 351] close(19) = -1 EBADF (Bad file descriptor) [pid 351] close(20) = -1 EBADF (Bad file descriptor) [pid 351] close(21) = -1 EBADF (Bad file descriptor) [pid 351] close(22) = -1 EBADF (Bad file descriptor) [pid 351] close(23) = -1 EBADF (Bad file descriptor) [pid 351] close(24) = -1 EBADF (Bad file descriptor) [pid 351] close(25) = -1 EBADF (Bad file descriptor) [pid 351] close(26) = -1 EBADF (Bad file descriptor) [pid 351] close(27) = -1 EBADF (Bad file descriptor) [pid 351] close(28) = -1 EBADF (Bad file descriptor) [pid 351] close(29) = -1 EBADF (Bad file descriptor) [pid 351] exit_group(0) = ? [pid 352] <... futex resumed>) = ? [pid 352] +++ exited with 0 +++ [pid 351] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./15/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./15") = 0 [pid 283] mkdir("./16", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) executing program [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 34 ./strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x5555761396a0, 24) = 0 [pid 354] chdir("./16") = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 [pid 354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 354] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[35]}, 88) = 35 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] memfd_create("syzkaller", 0) = 3 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 355] munmap(0x7fa992d8a000, 138412032) = 0 [pid 355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 355] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 355] close(3) = 0 [pid 355] close(4) = 0 [pid 355] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 355] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 27.797217][ T355] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.804468][ T355] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 355] ioctl(3, LOOP_CLR_FD) = 0 [pid 355] close(3) = 0 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 355] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 0 [pid 355] gettid() = 35 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x23\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x23\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 355] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] close(3) = 0 [pid 354] close(4) = 0 [pid 354] close(5) = -1 EBADF (Bad file descriptor) [pid 354] close(6) = -1 EBADF (Bad file descriptor) [pid 354] close(7) = -1 EBADF (Bad file descriptor) [pid 354] close(8) = -1 EBADF (Bad file descriptor) [pid 354] close(9) = -1 EBADF (Bad file descriptor) [pid 354] close(10) = -1 EBADF (Bad file descriptor) [pid 354] close(11) = -1 EBADF (Bad file descriptor) [pid 354] close(12) = -1 EBADF (Bad file descriptor) [pid 354] close(13) = -1 EBADF (Bad file descriptor) [pid 354] close(14) = -1 EBADF (Bad file descriptor) [pid 354] close(15) = -1 EBADF (Bad file descriptor) [pid 354] close(16) = -1 EBADF (Bad file descriptor) [pid 354] close(17) = -1 EBADF (Bad file descriptor) [pid 354] close(18) = -1 EBADF (Bad file descriptor) [pid 354] close(19) = -1 EBADF (Bad file descriptor) [pid 354] close(20) = -1 EBADF (Bad file descriptor) [pid 354] close(21) = -1 EBADF (Bad file descriptor) [pid 354] close(22) = -1 EBADF (Bad file descriptor) [pid 354] close(23) = -1 EBADF (Bad file descriptor) [pid 354] close(24) = -1 EBADF (Bad file descriptor) [pid 354] close(25) = -1 EBADF (Bad file descriptor) [pid 354] close(26) = -1 EBADF (Bad file descriptor) [pid 354] close(27) = -1 EBADF (Bad file descriptor) [pid 354] close(28) = -1 EBADF (Bad file descriptor) [pid 354] close(29) = -1 EBADF (Bad file descriptor) [pid 354] exit_group(0) = ? [pid 355] <... futex resumed>) = ? [pid 355] +++ exited with 0 +++ [pid 354] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./16/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./16") = 0 [pid 283] mkdir("./17", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 36 ./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x5555761396a0, 24) = 0 [pid 360] chdir("./17") = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 360] write(1, "executing program\n", 18executing program ) = 18 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 360] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 360] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[37]}, 88) = 37 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] memfd_create("syzkaller", 0) = 3 [pid 361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 361] munmap(0x7fa992d8a000, 138412032) = 0 [pid 361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 361] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 361] close(3) = 0 [pid 361] close(4) = 0 [pid 361] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 27.944690][ T361] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.952020][ T361] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 361] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 361] ioctl(3, LOOP_CLR_FD) = 0 [pid 361] close(3) = 0 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 0 [pid 361] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 1 [pid 360] <... futex resumed>) = 0 [pid 361] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... socket resumed>) = 4 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 361] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0" [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... ioctl resumed>}) = -1 ENODEV (No such device) [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 361] gettid( [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... gettid resumed>) = 37 [pid 360] <... futex resumed>) = 0 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 0 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x25\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 361] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x25\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 360] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... sendmsg resumed>) = 40 [pid 361] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... futex resumed>) = 0 [pid 360] close(3) = 0 [pid 360] close(4) = 0 [pid 360] close(5) = -1 EBADF (Bad file descriptor) [pid 360] close(6) = -1 EBADF (Bad file descriptor) [pid 360] close(7) = -1 EBADF (Bad file descriptor) [pid 360] close(8) = -1 EBADF (Bad file descriptor) [pid 360] close(9) = -1 EBADF (Bad file descriptor) [pid 360] close(10) = -1 EBADF (Bad file descriptor) [pid 360] close(11) = -1 EBADF (Bad file descriptor) [pid 360] close(12) = -1 EBADF (Bad file descriptor) [pid 360] close(13) = -1 EBADF (Bad file descriptor) [pid 360] close(14) = -1 EBADF (Bad file descriptor) [pid 360] close(15) = -1 EBADF (Bad file descriptor) [pid 360] close(16) = -1 EBADF (Bad file descriptor) [pid 360] close(17) = -1 EBADF (Bad file descriptor) [pid 360] close(18) = -1 EBADF (Bad file descriptor) [pid 360] close(19) = -1 EBADF (Bad file descriptor) [pid 360] close(20) = -1 EBADF (Bad file descriptor) [pid 360] close(21) = -1 EBADF (Bad file descriptor) [pid 360] close(22) = -1 EBADF (Bad file descriptor) [pid 360] close(23) = -1 EBADF (Bad file descriptor) [pid 360] close(24) = -1 EBADF (Bad file descriptor) [pid 360] close(25) = -1 EBADF (Bad file descriptor) [pid 360] close(26) = -1 EBADF (Bad file descriptor) [pid 360] close(27) = -1 EBADF (Bad file descriptor) [pid 360] close(28) = -1 EBADF (Bad file descriptor) [pid 360] close(29) = -1 EBADF (Bad file descriptor) [pid 360] exit_group(0 [pid 361] <... futex resumed>) = ? [pid 360] <... exit_group resumed>) = ? [pid 361] +++ exited with 0 +++ [pid 360] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./17/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./17") = 0 [pid 283] mkdir("./18", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 38 ./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x5555761396a0, 24) = 0 [pid 366] chdir("./18") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 366] write(1, "executing program\n", 18executing program ) = 18 [pid 366] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 366] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 367 attached => {parent_tid=[39]}, 88) = 39 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] set_robust_list(0x7fa99b1aa9a0, 24 [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 367] <... set_robust_list resumed>) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] memfd_create("syzkaller", 0) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 367] munmap(0x7fa992d8a000, 138412032) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 367] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 367] close(3) = 0 [pid 367] close(4) = 0 [pid 367] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 367] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 367] ioctl(3, LOOP_CLR_FD) = 0 [pid 367] close(3) = 0 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... socket resumed>) = 3 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan" [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... ioctl resumed>}) = -1 ENODEV (No such device) [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... socket resumed>) = 4 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0" [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... ioctl resumed>}) = -1 ENODEV (No such device) [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... unshare resumed>) = 0 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] gettid( [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... gettid resumed>) = 39 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x27\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... sendmsg resumed>) = 40 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x27\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... sendmsg resumed>) = 40 [pid 367] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] close(3) = 0 [pid 366] close(4) = 0 [pid 366] close(5) = -1 EBADF (Bad file descriptor) [pid 366] close(6) = -1 EBADF (Bad file descriptor) [pid 366] close(7) = -1 EBADF (Bad file descriptor) [pid 366] close(8) = -1 EBADF (Bad file descriptor) [pid 366] close(9) = -1 EBADF (Bad file descriptor) [pid 366] close(10) = -1 EBADF (Bad file descriptor) [pid 366] close(11) = -1 EBADF (Bad file descriptor) [pid 366] close(12) = -1 EBADF (Bad file descriptor) [pid 366] close(13) = -1 EBADF (Bad file descriptor) [pid 366] close(14) = -1 EBADF (Bad file descriptor) [pid 366] close(15) = -1 EBADF (Bad file descriptor) [pid 366] close(16) = -1 EBADF (Bad file descriptor) [pid 366] close(17) = -1 EBADF (Bad file descriptor) [pid 366] close(18) = -1 EBADF (Bad file descriptor) [pid 366] close(19) = -1 EBADF (Bad file descriptor) [pid 366] close(20) = -1 EBADF (Bad file descriptor) [pid 366] close(21) = -1 EBADF (Bad file descriptor) [pid 366] close(22) = -1 EBADF (Bad file descriptor) [pid 366] close(23) = -1 EBADF (Bad file descriptor) [pid 366] close(24) = -1 EBADF (Bad file descriptor) [pid 366] close(25) = -1 EBADF (Bad file descriptor) [pid 366] close(26) = -1 EBADF (Bad file descriptor) [pid 366] close(27) = -1 EBADF (Bad file descriptor) [pid 366] close(28) = -1 EBADF (Bad file descriptor) [pid 366] close(29) = -1 EBADF (Bad file descriptor) [pid 366] exit_group(0) = ? [pid 367] <... futex resumed>) = ? [pid 367] +++ exited with 0 +++ [pid 366] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [ 28.203621][ T367] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.210483][ T367] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./18/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./18") = 0 [pid 283] mkdir("./19", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FDexecuting program ) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 40 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x5555761396a0, 24) = 0 [pid 369] chdir("./19") = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 369] write(1, "executing program\n", 18) = 18 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 369] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[41]}, 88) = 41 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] memfd_create("syzkaller", 0) = 3 [pid 370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 370] munmap(0x7fa992d8a000, 138412032) = 0 [pid 370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 370] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 370] close(3) = 0 [pid 370] close(4) = 0 [pid 370] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 370] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 28.366018][ T370] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.373016][ T370] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 370] ioctl(3, LOOP_CLR_FD) = 0 [pid 370] close(3) = 0 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 0 [pid 370] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 370] gettid( [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... gettid resumed>) = 41 [pid 369] <... futex resumed>) = 0 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x29\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 370] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x29\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 369] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... sendmsg resumed>) = 40 [pid 370] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] close(3) = 0 [pid 369] close(4) = 0 [pid 369] close(5) = -1 EBADF (Bad file descriptor) [pid 369] close(6) = -1 EBADF (Bad file descriptor) [pid 369] close(7) = -1 EBADF (Bad file descriptor) [pid 369] close(8) = -1 EBADF (Bad file descriptor) [pid 369] close(9) = -1 EBADF (Bad file descriptor) [pid 369] close(10) = -1 EBADF (Bad file descriptor) [pid 369] close(11) = -1 EBADF (Bad file descriptor) [pid 369] close(12) = -1 EBADF (Bad file descriptor) [pid 369] close(13) = -1 EBADF (Bad file descriptor) [pid 369] close(14) = -1 EBADF (Bad file descriptor) [pid 369] close(15) = -1 EBADF (Bad file descriptor) [pid 369] close(16) = -1 EBADF (Bad file descriptor) [pid 369] close(17) = -1 EBADF (Bad file descriptor) [pid 369] close(18) = -1 EBADF (Bad file descriptor) [pid 369] close(19) = -1 EBADF (Bad file descriptor) [pid 369] close(20) = -1 EBADF (Bad file descriptor) [pid 369] close(21) = -1 EBADF (Bad file descriptor) [pid 369] close(22) = -1 EBADF (Bad file descriptor) [pid 369] close(23) = -1 EBADF (Bad file descriptor) [pid 369] close(24) = -1 EBADF (Bad file descriptor) [pid 369] close(25) = -1 EBADF (Bad file descriptor) [pid 369] close(26) = -1 EBADF (Bad file descriptor) [pid 369] close(27) = -1 EBADF (Bad file descriptor) [pid 369] close(28) = -1 EBADF (Bad file descriptor) [pid 369] close(29) = -1 EBADF (Bad file descriptor) [pid 369] exit_group(0) = ? [pid 370] <... futex resumed>) = ? [pid 370] +++ exited with 0 +++ [pid 369] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x31\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x31\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x31\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x31\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x31\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./19/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./19") = 0 [pid 283] mkdir("./20", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) executing program [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 42 ./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x5555761396a0, 24) = 0 [pid 372] chdir("./20") = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 372] write(1, "executing program\n", 18) = 18 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 372] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 372] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 372] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 373 attached => {parent_tid=[43]}, 88) = 43 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] memfd_create("syzkaller", 0) = 3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 373] munmap(0x7fa992d8a000, 138412032) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 373] close(3) = 0 [pid 373] close(4) = 0 [pid 373] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 373] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 28.538421][ T373] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.545608][ T373] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 373] ioctl(3, LOOP_CLR_FD) = 0 [pid 373] close(3) = 0 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] gettid() = 43 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x2b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x2b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 373] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] close(3) = 0 [pid 372] close(4 [pid 373] <... futex resumed>) = 1 [pid 373] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... close resumed>) = 0 [pid 372] close(5) = -1 EBADF (Bad file descriptor) [pid 372] close(6) = -1 EBADF (Bad file descriptor) [pid 372] close(7) = -1 EBADF (Bad file descriptor) [pid 372] close(8) = -1 EBADF (Bad file descriptor) [pid 372] close(9) = -1 EBADF (Bad file descriptor) [pid 372] close(10) = -1 EBADF (Bad file descriptor) [pid 372] close(11) = -1 EBADF (Bad file descriptor) [pid 372] close(12) = -1 EBADF (Bad file descriptor) [pid 372] close(13) = -1 EBADF (Bad file descriptor) [pid 372] close(14) = -1 EBADF (Bad file descriptor) [pid 372] close(15) = -1 EBADF (Bad file descriptor) [pid 372] close(16) = -1 EBADF (Bad file descriptor) [pid 372] close(17) = -1 EBADF (Bad file descriptor) [pid 372] close(18) = -1 EBADF (Bad file descriptor) [pid 372] close(19) = -1 EBADF (Bad file descriptor) [pid 372] close(20) = -1 EBADF (Bad file descriptor) [pid 372] close(21) = -1 EBADF (Bad file descriptor) [pid 372] close(22) = -1 EBADF (Bad file descriptor) [pid 372] close(23) = -1 EBADF (Bad file descriptor) [pid 372] close(24) = -1 EBADF (Bad file descriptor) [pid 372] close(25) = -1 EBADF (Bad file descriptor) [pid 372] close(26) = -1 EBADF (Bad file descriptor) [pid 372] close(27) = -1 EBADF (Bad file descriptor) [pid 372] close(28) = -1 EBADF (Bad file descriptor) [pid 372] close(29) = -1 EBADF (Bad file descriptor) [pid 372] exit_group(0) = ? [pid 373] <... futex resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 372] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./20/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./20") = 0 [pid 283] mkdir("./21", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 44 ./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x5555761396a0, 24) = 0 [pid 375] chdir("./21") = 0 [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3) = 0 [pid 375] symlink("/dev/binderfs", "./binderfs") = 0 [pid 375] write(1, "executing program\n", 18executing program ) = 18 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 375] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 375] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 375] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x7fa99b1aa9a0, 24 [pid 375] <... clone3 resumed> => {parent_tid=[45]}, 88) = 45 [pid 376] <... set_robust_list resumed>) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] memfd_create("syzkaller", 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... memfd_create resumed>) = 3 [pid 376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 376] munmap(0x7fa992d8a000, 138412032) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 376] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 376] close(3) = 0 [pid 376] close(4) = 0 [pid 376] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 376] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 28.734537][ T376] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.742192][ T376] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 376] ioctl(3, LOOP_CLR_FD) = 0 [pid 376] close(3) = 0 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] gettid() = 45 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = 1 [pid 376] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x2d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 375] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... futex resumed>) = 1 [pid 375] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x2d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 376] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] <... futex resumed>) = 0 [pid 376] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] close(3) = 0 [pid 375] close(4) = 0 [pid 375] close(5) = -1 EBADF (Bad file descriptor) [pid 375] close(6) = -1 EBADF (Bad file descriptor) [pid 375] close(7) = -1 EBADF (Bad file descriptor) [pid 375] close(8) = -1 EBADF (Bad file descriptor) [pid 375] close(9) = -1 EBADF (Bad file descriptor) [pid 375] close(10) = -1 EBADF (Bad file descriptor) [pid 375] close(11) = -1 EBADF (Bad file descriptor) [pid 375] close(12) = -1 EBADF (Bad file descriptor) [pid 375] close(13) = -1 EBADF (Bad file descriptor) [pid 375] close(14) = -1 EBADF (Bad file descriptor) [pid 375] close(15) = -1 EBADF (Bad file descriptor) [pid 375] close(16) = -1 EBADF (Bad file descriptor) [pid 375] close(17) = -1 EBADF (Bad file descriptor) [pid 375] close(18) = -1 EBADF (Bad file descriptor) [pid 375] close(19) = -1 EBADF (Bad file descriptor) [pid 375] close(20) = -1 EBADF (Bad file descriptor) [pid 375] close(21) = -1 EBADF (Bad file descriptor) [pid 375] close(22) = -1 EBADF (Bad file descriptor) [pid 375] close(23) = -1 EBADF (Bad file descriptor) [pid 375] close(24) = -1 EBADF (Bad file descriptor) [pid 375] close(25) = -1 EBADF (Bad file descriptor) [pid 375] close(26) = -1 EBADF (Bad file descriptor) [pid 375] close(27) = -1 EBADF (Bad file descriptor) [pid 375] close(28) = -1 EBADF (Bad file descriptor) [pid 375] close(29) = -1 EBADF (Bad file descriptor) [pid 375] exit_group(0) = ? [pid 376] <... futex resumed>) = ? [pid 376] +++ exited with 0 +++ [pid 375] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./21/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./21") = 0 [pid 283] mkdir("./22", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 46 ./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x5555761396a0, 24) = 0 [pid 378] chdir("./22") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 378] write(1, "executing program\n", 18) = 18 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 378] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 379 attached => {parent_tid=[47]}, 88) = 47 [pid 379] set_robust_list(0x7fa99b1aa9a0, 24 [pid 378] rt_sigprocmask(SIG_SETMASK, [], [pid 379] <... set_robust_list resumed>) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 379] memfd_create("syzkaller", 0) = 3 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 379] munmap(0x7fa992d8a000, 138412032) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 379] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 379] close(3) = 0 [pid 379] close(4) = 0 [pid 379] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 379] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 28.965628][ T379] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.973517][ T379] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 379] ioctl(3, LOOP_CLR_FD) = 0 [pid 379] close(3) = 0 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 0 [pid 379] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] gettid() = 47 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x2f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x2f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 379] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] close(3) = 0 [pid 378] close(4) = 0 [pid 378] close(5) = -1 EBADF (Bad file descriptor) [pid 378] close(6) = -1 EBADF (Bad file descriptor) [pid 378] close(7) = -1 EBADF (Bad file descriptor) [pid 378] close(8) = -1 EBADF (Bad file descriptor) [pid 378] close(9) = -1 EBADF (Bad file descriptor) [pid 378] close(10) = -1 EBADF (Bad file descriptor) [pid 378] close(11) = -1 EBADF (Bad file descriptor) [pid 378] close(12) = -1 EBADF (Bad file descriptor) [pid 378] close(13) = -1 EBADF (Bad file descriptor) [pid 378] close(14) = -1 EBADF (Bad file descriptor) [pid 378] close(15) = -1 EBADF (Bad file descriptor) [pid 378] close(16) = -1 EBADF (Bad file descriptor) [pid 378] close(17) = -1 EBADF (Bad file descriptor) [pid 378] close(18) = -1 EBADF (Bad file descriptor) [pid 378] close(19) = -1 EBADF (Bad file descriptor) [pid 378] close(20) = -1 EBADF (Bad file descriptor) [pid 378] close(21) = -1 EBADF (Bad file descriptor) [pid 378] close(22) = -1 EBADF (Bad file descriptor) [pid 378] close(23) = -1 EBADF (Bad file descriptor) [pid 378] close(24) = -1 EBADF (Bad file descriptor) [pid 378] close(25) = -1 EBADF (Bad file descriptor) [pid 378] close(26) = -1 EBADF (Bad file descriptor) [pid 378] close(27) = -1 EBADF (Bad file descriptor) [pid 378] close(28) = -1 EBADF (Bad file descriptor) [pid 378] close(29) = -1 EBADF (Bad file descriptor) [pid 378] exit_group(0) = ? [pid 379] <... futex resumed>) = ? [pid 379] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./22/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./22") = 0 [pid 283] mkdir("./23", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 48 ./strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x5555761396a0, 24) = 0 [pid 381] chdir("./23") = 0 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 381] setpgid(0, 0) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 381] write(1, "executing program\n", 18executing program ) = 18 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 381] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[49]}, 88) = 49 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] memfd_create("syzkaller", 0) = 3 [pid 382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 382] munmap(0x7fa992d8a000, 138412032) = 0 [pid 382] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 382] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 382] close(3) = 0 [pid 382] close(4) = 0 [pid 382] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 382] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 382] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 29.109399][ T382] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.117170][ T382] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 382] ioctl(3, LOOP_CLR_FD) = 0 [pid 382] close(3) = 0 [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 0 [pid 382] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] gettid() = 49 [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x31\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 1 [pid 382] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x31\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 381] <... futex resumed>) = 0 [pid 382] <... sendmsg resumed>) = 40 [pid 381] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] close(3) = 0 [pid 381] close(4) = 0 [pid 381] close(5) = -1 EBADF (Bad file descriptor) [pid 381] close(6) = -1 EBADF (Bad file descriptor) [pid 381] close(7) = -1 EBADF (Bad file descriptor) [pid 381] close(8) = -1 EBADF (Bad file descriptor) [pid 381] close(9) = -1 EBADF (Bad file descriptor) [pid 381] close(10) = -1 EBADF (Bad file descriptor) [pid 381] close(11) = -1 EBADF (Bad file descriptor) [pid 381] close(12) = -1 EBADF (Bad file descriptor) [pid 381] close(13) = -1 EBADF (Bad file descriptor) [pid 381] close(14) = -1 EBADF (Bad file descriptor) [pid 381] close(15) = -1 EBADF (Bad file descriptor) [pid 381] close(16) = -1 EBADF (Bad file descriptor) [pid 381] close(17) = -1 EBADF (Bad file descriptor) [pid 381] close(18) = -1 EBADF (Bad file descriptor) [pid 381] close(19) = -1 EBADF (Bad file descriptor) [pid 381] close(20) = -1 EBADF (Bad file descriptor) [pid 381] close(21) = -1 EBADF (Bad file descriptor) [pid 381] close(22) = -1 EBADF (Bad file descriptor) [pid 381] close(23) = -1 EBADF (Bad file descriptor) [pid 381] close(24) = -1 EBADF (Bad file descriptor) [pid 381] close(25) = -1 EBADF (Bad file descriptor) [pid 381] close(26) = -1 EBADF (Bad file descriptor) [pid 381] close(27) = -1 EBADF (Bad file descriptor) [pid 381] close(28) = -1 EBADF (Bad file descriptor) [pid 381] close(29) = -1 EBADF (Bad file descriptor) [pid 381] exit_group(0) = ? [pid 382] <... futex resumed>) = ? [pid 382] +++ exited with 0 +++ [pid 381] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./23/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./23") = 0 [pid 283] mkdir("./24", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 50 ./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x5555761396a0, 24) = 0 [pid 384] chdir("./24") = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 384] write(1, "executing program\n", 18executing program ) = 18 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 384] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 384] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 384] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x7fa99b1aa9a0, 24 [pid 384] <... clone3 resumed> => {parent_tid=[51]}, 88) = 51 [pid 385] <... set_robust_list resumed>) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 385] memfd_create("syzkaller", 0) = 3 [pid 385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 385] munmap(0x7fa992d8a000, 138412032) = 0 [pid 385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 385] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 385] close(3) = 0 [pid 385] close(4) = 0 [pid 385] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 385] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 29.326060][ T385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.333163][ T385] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 385] ioctl(3, LOOP_CLR_FD) = 0 [pid 385] close(3) = 0 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 385] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 0 [pid 385] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 385] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 0 [pid 385] gettid() = 51 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x33\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x33\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 385] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] close(3) = 0 [pid 384] close(4) = 0 [pid 384] close(5) = -1 EBADF (Bad file descriptor) [pid 384] close(6) = -1 EBADF (Bad file descriptor) [pid 384] close(7) = -1 EBADF (Bad file descriptor) [pid 385] <... futex resumed>) = 1 [pid 384] close(8) = -1 EBADF (Bad file descriptor) [pid 384] close(9) = -1 EBADF (Bad file descriptor) [pid 384] close(10) = -1 EBADF (Bad file descriptor) [pid 384] close(11) = -1 EBADF (Bad file descriptor) [pid 384] close(12) = -1 EBADF (Bad file descriptor) [pid 385] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] close(13) = -1 EBADF (Bad file descriptor) [pid 384] close(14) = -1 EBADF (Bad file descriptor) [pid 384] close(15) = -1 EBADF (Bad file descriptor) [pid 384] close(16) = -1 EBADF (Bad file descriptor) [pid 384] close(17) = -1 EBADF (Bad file descriptor) [pid 384] close(18) = -1 EBADF (Bad file descriptor) [pid 384] close(19) = -1 EBADF (Bad file descriptor) [pid 384] close(20) = -1 EBADF (Bad file descriptor) [pid 384] close(21) = -1 EBADF (Bad file descriptor) [pid 384] close(22) = -1 EBADF (Bad file descriptor) [pid 384] close(23) = -1 EBADF (Bad file descriptor) [pid 384] close(24) = -1 EBADF (Bad file descriptor) [pid 384] close(25) = -1 EBADF (Bad file descriptor) [pid 384] close(26) = -1 EBADF (Bad file descriptor) [pid 384] close(27) = -1 EBADF (Bad file descriptor) [pid 384] close(28) = -1 EBADF (Bad file descriptor) [pid 384] close(29) = -1 EBADF (Bad file descriptor) [pid 384] exit_group(0) = ? [pid 385] <... futex resumed>) = ? [pid 385] +++ exited with 0 +++ [pid 384] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./24/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./24") = 0 [pid 283] mkdir("./25", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 52 ./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x5555761396a0, 24) = 0 [pid 387] chdir("./25") = 0 [pid 387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 387] setpgid(0, 0) = 0 [pid 387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 387] write(3, "1000", 4) = 4 [pid 387] close(3) = 0 [pid 387] symlink("/dev/binderfs", "./binderfs") = 0 [pid 387] write(1, "executing program\n", 18executing program ) = 18 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 387] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 387] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 387] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 387] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 388 attached [pid 388] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] <... clone3 resumed> => {parent_tid=[53]}, 88) = 53 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] memfd_create("syzkaller", 0) = 3 [pid 388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 388] munmap(0x7fa992d8a000, 138412032) = 0 [pid 388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 388] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 388] close(3) = 0 [pid 388] close(4) = 0 [pid 388] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 388] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 388] ioctl(3, LOOP_CLR_FD) = 0 [pid 388] close(3) = 0 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 0 [pid 388] gettid() = 53 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x35\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 388] <... futex resumed>) = 1 [pid 388] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x35\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 388] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 387] close(3) = 0 [pid 387] close(4) = 0 [pid 387] close(5) = -1 EBADF (Bad file descriptor) [pid 387] close(6) = -1 EBADF (Bad file descriptor) [pid 387] close(7) = -1 EBADF (Bad file descriptor) [pid 387] close(8) = -1 EBADF (Bad file descriptor) [pid 387] close(9) = -1 EBADF (Bad file descriptor) [pid 387] close(10) = -1 EBADF (Bad file descriptor) [pid 387] close(11) = -1 EBADF (Bad file descriptor) [pid 387] close(12) = -1 EBADF (Bad file descriptor) [pid 387] close(13) = -1 EBADF (Bad file descriptor) [pid 387] close(14) = -1 EBADF (Bad file descriptor) [pid 387] close(15) = -1 EBADF (Bad file descriptor) [pid 387] close(16) = -1 EBADF (Bad file descriptor) [pid 387] close(17) = -1 EBADF (Bad file descriptor) [pid 387] close(18) = -1 EBADF (Bad file descriptor) [pid 387] close(19) = -1 EBADF (Bad file descriptor) [pid 387] close(20) = -1 EBADF (Bad file descriptor) [pid 387] close(21) = -1 EBADF (Bad file descriptor) [pid 387] close(22) = -1 EBADF (Bad file descriptor) [pid 387] close(23) = -1 EBADF (Bad file descriptor) [pid 387] close(24) = -1 EBADF (Bad file descriptor) [pid 387] close(25) = -1 EBADF (Bad file descriptor) [pid 387] close(26) = -1 EBADF (Bad file descriptor) [pid 387] close(27) = -1 EBADF (Bad file descriptor) [pid 387] close(28) = -1 EBADF (Bad file descriptor) [pid 387] close(29) = -1 EBADF (Bad file descriptor) [pid 387] exit_group(0) = ? [pid 388] <... futex resumed>) = ? [pid 388] +++ exited with 0 +++ [pid 387] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./25/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./25") = 0 [pid 283] mkdir("./26", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 54 ./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x5555761396a0, 24) = 0 [pid 390] chdir("./26") = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 390] close(3) = 0 [pid 390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 390] write(1, "executing program\n", 18) = 18 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 390] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 390] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[55]}, 88) = 55 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] memfd_create("syzkaller", 0) = 3 [pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [ 29.488337][ T388] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.495474][ T388] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 391] munmap(0x7fa992d8a000, 138412032) = 0 [pid 391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 391] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 391] close(3) = 0 [pid 391] close(4) = 0 [pid 391] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 391] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 29.555957][ T391] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.563672][ T391] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 391] ioctl(3, LOOP_CLR_FD) = 0 [pid 391] close(3) = 0 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 0 [pid 391] gettid() = 55 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x37\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x37\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 391] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] close(3) = 0 [pid 390] close(4) = 0 [pid 390] close(5) = -1 EBADF (Bad file descriptor) [pid 390] close(6) = -1 EBADF (Bad file descriptor) [pid 390] close(7) = -1 EBADF (Bad file descriptor) [pid 390] close(8) = -1 EBADF (Bad file descriptor) [pid 390] close(9) = -1 EBADF (Bad file descriptor) [pid 390] close(10) = -1 EBADF (Bad file descriptor) [pid 390] close(11) = -1 EBADF (Bad file descriptor) [pid 390] close(12) = -1 EBADF (Bad file descriptor) [pid 390] close(13) = -1 EBADF (Bad file descriptor) [pid 390] close(14) = -1 EBADF (Bad file descriptor) [pid 390] close(15) = -1 EBADF (Bad file descriptor) [pid 390] close(16) = -1 EBADF (Bad file descriptor) [pid 390] close(17) = -1 EBADF (Bad file descriptor) [pid 390] close(18) = -1 EBADF (Bad file descriptor) [pid 390] close(19) = -1 EBADF (Bad file descriptor) [pid 390] close(20) = -1 EBADF (Bad file descriptor) [pid 390] close(21) = -1 EBADF (Bad file descriptor) [pid 390] close(22) = -1 EBADF (Bad file descriptor) [pid 390] close(23) = -1 EBADF (Bad file descriptor) [pid 390] close(24) = -1 EBADF (Bad file descriptor) [pid 390] close(25) = -1 EBADF (Bad file descriptor) [pid 390] close(26) = -1 EBADF (Bad file descriptor) [pid 390] close(27) = -1 EBADF (Bad file descriptor) [pid 390] close(28) = -1 EBADF (Bad file descriptor) [pid 390] close(29) = -1 EBADF (Bad file descriptor) [pid 390] exit_group(0) = ? [pid 391] <... futex resumed>) = ? [pid 391] +++ exited with 0 +++ [pid 390] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./26/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./26") = 0 [pid 283] mkdir("./27", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 56 ./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x5555761396a0, 24) = 0 [pid 393] chdir("./27") = 0 [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 393] setpgid(0, 0) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 [pid 393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 393] write(1, "executing program\n", 18executing program ) = 18 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 393] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... clone3 resumed> => {parent_tid=[57]}, 88) = 57 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 394] memfd_create("syzkaller", 0) = 3 [pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 394] munmap(0x7fa992d8a000, 138412032) = 0 [pid 394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 394] close(3) = 0 [pid 394] close(4) = 0 [pid 394] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 394] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 29.751131][ T394] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.758410][ T394] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 394] ioctl(3, LOOP_CLR_FD) = 0 [pid 394] close(3) = 0 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 0 [pid 394] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] gettid() = 57 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x39\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 0 [pid 393] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x39\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 394] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 393] close(3) = 0 [pid 393] close(4) = 0 [pid 393] close(5) = -1 EBADF (Bad file descriptor) [pid 393] close(6) = -1 EBADF (Bad file descriptor) [pid 393] close(7) = -1 EBADF (Bad file descriptor) [pid 393] close(8) = -1 EBADF (Bad file descriptor) [pid 394] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] close(9) = -1 EBADF (Bad file descriptor) [pid 393] close(10) = -1 EBADF (Bad file descriptor) [pid 393] close(11) = -1 EBADF (Bad file descriptor) [pid 393] close(12) = -1 EBADF (Bad file descriptor) [pid 393] close(13) = -1 EBADF (Bad file descriptor) [pid 393] close(14) = -1 EBADF (Bad file descriptor) [pid 393] close(15) = -1 EBADF (Bad file descriptor) [pid 393] close(16) = -1 EBADF (Bad file descriptor) [pid 393] close(17) = -1 EBADF (Bad file descriptor) [pid 393] close(18) = -1 EBADF (Bad file descriptor) [pid 393] close(19) = -1 EBADF (Bad file descriptor) [pid 393] close(20) = -1 EBADF (Bad file descriptor) [pid 393] close(21) = -1 EBADF (Bad file descriptor) [pid 393] close(22) = -1 EBADF (Bad file descriptor) [pid 393] close(23) = -1 EBADF (Bad file descriptor) [pid 393] close(24) = -1 EBADF (Bad file descriptor) [pid 393] close(25) = -1 EBADF (Bad file descriptor) [pid 393] close(26) = -1 EBADF (Bad file descriptor) [pid 393] close(27) = -1 EBADF (Bad file descriptor) [pid 393] close(28) = -1 EBADF (Bad file descriptor) [pid 393] close(29) = -1 EBADF (Bad file descriptor) [pid 393] exit_group(0) = ? [pid 394] <... futex resumed>) = ? [pid 394] +++ exited with 0 +++ [pid 393] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./27/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./27") = 0 [pid 283] mkdir("./28", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 58 ./strace-static-x86_64: Process 396 attached [pid 396] set_robust_list(0x5555761396a0, 24) = 0 [pid 396] chdir("./28") = 0 [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 396] setpgid(0, 0) = 0 [pid 396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 396] write(3, "1000", 4) = 4 [pid 396] close(3) = 0 [pid 396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 396] write(1, "executing program\n", 18) = 18 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 396] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 396] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 396] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[59]}, 88) = 59 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] memfd_create("syzkaller", 0) = 3 [pid 397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 executing program [pid 397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 397] munmap(0x7fa992d8a000, 138412032) = 0 [pid 397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 397] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 397] close(3) = 0 [pid 397] close(4) = 0 [pid 397] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 397] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 29.945397][ T397] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.952419][ T397] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 397] ioctl(3, LOOP_CLR_FD) = 0 [pid 397] close(3) = 0 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 397] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 0 [pid 397] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 397] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 0 [pid 397] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] gettid() = 59 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x3b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x3b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 397] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] close(3) = 0 [pid 396] close(4) = 0 [pid 396] close(5) = -1 EBADF (Bad file descriptor) [pid 396] close(6) = -1 EBADF (Bad file descriptor) [pid 396] close(7) = -1 EBADF (Bad file descriptor) [pid 396] close(8) = -1 EBADF (Bad file descriptor) [pid 396] close(9) = -1 EBADF (Bad file descriptor) [pid 396] close(10) = -1 EBADF (Bad file descriptor) [pid 396] close(11) = -1 EBADF (Bad file descriptor) [pid 396] close(12) = -1 EBADF (Bad file descriptor) [pid 396] close(13) = -1 EBADF (Bad file descriptor) [pid 396] close(14) = -1 EBADF (Bad file descriptor) [pid 396] close(15) = -1 EBADF (Bad file descriptor) [pid 396] close(16) = -1 EBADF (Bad file descriptor) [pid 396] close(17) = -1 EBADF (Bad file descriptor) [pid 396] close(18) = -1 EBADF (Bad file descriptor) [pid 396] close(19) = -1 EBADF (Bad file descriptor) [pid 396] close(20) = -1 EBADF (Bad file descriptor) [pid 396] close(21) = -1 EBADF (Bad file descriptor) [pid 396] close(22) = -1 EBADF (Bad file descriptor) [pid 396] close(23) = -1 EBADF (Bad file descriptor) [pid 396] close(24) = -1 EBADF (Bad file descriptor) [pid 396] close(25) = -1 EBADF (Bad file descriptor) [pid 396] close(26) = -1 EBADF (Bad file descriptor) [pid 396] close(27) = -1 EBADF (Bad file descriptor) [pid 396] close(28) = -1 EBADF (Bad file descriptor) [pid 396] close(29) = -1 EBADF (Bad file descriptor) [pid 396] exit_group(0) = ? [pid 397] <... futex resumed>) = ? [pid 397] +++ exited with 0 +++ [pid 396] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./28/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./28") = 0 [pid 283] mkdir("./29", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 60 ./strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x5555761396a0, 24) = 0 [pid 399] chdir("./29") = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 399] write(1, "executing program\n", 18) = 18 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 399] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 400 attached => {parent_tid=[61]}, 88) = 61 [pid 400] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 400] memfd_create("syzkaller", 0) = 3 [pid 400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 400] munmap(0x7fa992d8a000, 138412032) = 0 [pid 400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 400] close(3) = 0 [pid 400] close(4) = 0 [pid 400] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 30.095473][ T400] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.102349][ T400] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 400] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 400] ioctl(3, LOOP_CLR_FD) = 0 [pid 400] close(3) = 0 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 400] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 400] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 400] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] gettid( [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... gettid resumed>) = 61 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x3d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x3d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 399] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... sendmsg resumed>) = 40 [pid 400] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... futex resumed>) = 0 [pid 399] close(3) = 0 [pid 399] close(4) = 0 [pid 399] close(5) = -1 EBADF (Bad file descriptor) [pid 399] close(6) = -1 EBADF (Bad file descriptor) [pid 399] close(7) = -1 EBADF (Bad file descriptor) [pid 399] close(8) = -1 EBADF (Bad file descriptor) [pid 399] close(9) = -1 EBADF (Bad file descriptor) [pid 399] close(10) = -1 EBADF (Bad file descriptor) [pid 399] close(11) = -1 EBADF (Bad file descriptor) [pid 399] close(12) = -1 EBADF (Bad file descriptor) [pid 399] close(13) = -1 EBADF (Bad file descriptor) [pid 399] close(14) = -1 EBADF (Bad file descriptor) [pid 399] close(15) = -1 EBADF (Bad file descriptor) [pid 399] close(16) = -1 EBADF (Bad file descriptor) [pid 399] close(17) = -1 EBADF (Bad file descriptor) [pid 399] close(18) = -1 EBADF (Bad file descriptor) [pid 399] close(19) = -1 EBADF (Bad file descriptor) [pid 399] close(20) = -1 EBADF (Bad file descriptor) [pid 399] close(21) = -1 EBADF (Bad file descriptor) [pid 399] close(22) = -1 EBADF (Bad file descriptor) [pid 399] close(23) = -1 EBADF (Bad file descriptor) [pid 399] close(24) = -1 EBADF (Bad file descriptor) [pid 399] close(25) = -1 EBADF (Bad file descriptor) [pid 399] close(26) = -1 EBADF (Bad file descriptor) [pid 399] close(27) = -1 EBADF (Bad file descriptor) [pid 399] close(28) = -1 EBADF (Bad file descriptor) [pid 399] close(29) = -1 EBADF (Bad file descriptor) [pid 399] exit_group(0) = ? [pid 400] <... futex resumed>) = ? [pid 400] +++ exited with 0 +++ [pid 399] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x32\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x32\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x32\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x32\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x32\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./29/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./29") = 0 [pid 283] mkdir("./30", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 62 ./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x5555761396a0, 24) = 0 [pid 402] chdir("./30") = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 402] write(1, "executing program\n", 18executing program ) = 18 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 402] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 402] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 402] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 402] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[63]}, 88) = 63 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] memfd_create("syzkaller", 0) = 3 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 403] munmap(0x7fa992d8a000, 138412032) = 0 [pid 403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 403] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 403] close(3) = 0 [pid 403] close(4) = 0 [pid 403] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 403] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 30.271525][ T403] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.278474][ T403] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 403] ioctl(3, LOOP_CLR_FD) = 0 [pid 403] close(3) = 0 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 403] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 1 [pid 403] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 1 [pid 403] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 403] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 1 [pid 403] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 403] gettid() = 63 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 1 [pid 403] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x3f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 1 [pid 403] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x3f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 402] <... futex resumed>) = 0 [pid 403] <... sendmsg resumed>) = 40 [pid 403] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] close(3) = 0 [pid 402] close(4) = 0 [pid 402] close(5) = -1 EBADF (Bad file descriptor) [pid 402] close(6) = -1 EBADF (Bad file descriptor) [pid 402] close(7) = -1 EBADF (Bad file descriptor) [pid 402] close(8) = -1 EBADF (Bad file descriptor) [pid 402] close(9) = -1 EBADF (Bad file descriptor) [pid 402] close(10) = -1 EBADF (Bad file descriptor) [pid 402] close(11) = -1 EBADF (Bad file descriptor) [pid 402] close(12) = -1 EBADF (Bad file descriptor) [pid 402] close(13) = -1 EBADF (Bad file descriptor) [pid 402] close(14) = -1 EBADF (Bad file descriptor) [pid 402] close(15) = -1 EBADF (Bad file descriptor) [pid 402] close(16) = -1 EBADF (Bad file descriptor) [pid 402] close(17) = -1 EBADF (Bad file descriptor) [pid 402] close(18) = -1 EBADF (Bad file descriptor) [pid 402] close(19) = -1 EBADF (Bad file descriptor) [pid 402] close(20) = -1 EBADF (Bad file descriptor) [pid 402] close(21) = -1 EBADF (Bad file descriptor) [pid 402] close(22) = -1 EBADF (Bad file descriptor) [pid 402] close(23) = -1 EBADF (Bad file descriptor) [pid 402] close(24) = -1 EBADF (Bad file descriptor) [pid 402] close(25) = -1 EBADF (Bad file descriptor) [pid 402] close(26) = -1 EBADF (Bad file descriptor) [pid 402] close(27) = -1 EBADF (Bad file descriptor) [pid 402] close(28) = -1 EBADF (Bad file descriptor) [pid 402] close(29) = -1 EBADF (Bad file descriptor) [pid 402] exit_group(0) = ? [pid 403] <... futex resumed>) = ? [pid 403] +++ exited with 0 +++ [pid 402] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./30/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./30") = 0 [pid 283] mkdir("./31", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 64 ./strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x5555761396a0, 24) = 0 [pid 405] chdir("./31") = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 405] setpgid(0, 0) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 405] write(3, "1000", 4) = 4 [pid 405] close(3) = 0 [pid 405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 405] write(1, "executing program\n", 18executing program ) = 18 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 405] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 406 attached [pid 406] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... clone3 resumed> => {parent_tid=[65]}, 88) = 65 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 406] memfd_create("syzkaller", 0) = 3 [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 406] munmap(0x7fa992d8a000, 138412032) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 406] close(3) = 0 [pid 406] close(4) = 0 [pid 406] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 406] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 406] ioctl(3, LOOP_CLR_FD) = 0 [pid 406] close(3) = 0 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 0 [pid 406] gettid() = 65 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x41\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x41\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 406] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] close(3) = 0 [pid 405] close(4) = 0 [pid 405] close(5) = -1 EBADF (Bad file descriptor) [pid 405] close(6) = -1 EBADF (Bad file descriptor) [pid 405] close(7) = -1 EBADF (Bad file descriptor) [pid 405] close(8) = -1 EBADF (Bad file descriptor) [pid 405] close(9) = -1 EBADF (Bad file descriptor) [pid 405] close(10) = -1 EBADF (Bad file descriptor) [pid 405] close(11) = -1 EBADF (Bad file descriptor) [pid 405] close(12) = -1 EBADF (Bad file descriptor) [pid 405] close(13) = -1 EBADF (Bad file descriptor) [pid 405] close(14) = -1 EBADF (Bad file descriptor) [pid 405] close(15) = -1 EBADF (Bad file descriptor) [pid 405] close(16) = -1 EBADF (Bad file descriptor) [pid 405] close(17) = -1 EBADF (Bad file descriptor) [pid 405] close(18) = -1 EBADF (Bad file descriptor) [pid 405] close(19) = -1 EBADF (Bad file descriptor) [pid 405] close(20) = -1 EBADF (Bad file descriptor) [pid 405] close(21) = -1 EBADF (Bad file descriptor) [pid 405] close(22) = -1 EBADF (Bad file descriptor) [pid 405] close(23) = -1 EBADF (Bad file descriptor) [pid 405] close(24) = -1 EBADF (Bad file descriptor) [pid 405] close(25) = -1 EBADF (Bad file descriptor) [pid 405] close(26) = -1 EBADF (Bad file descriptor) [pid 405] close(27) = -1 EBADF (Bad file descriptor) [pid 405] close(28) = -1 EBADF (Bad file descriptor) [pid 405] close(29) = -1 EBADF (Bad file descriptor) [pid 405] exit_group(0) = ? [pid 406] <... futex resumed>) = ? [pid 406] +++ exited with 0 +++ [pid 405] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./31/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./31") = 0 [pid 283] mkdir("./32", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 66 ./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x5555761396a0, 24) = 0 [pid 408] chdir("./32") = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 408] write(3, "1000", 4) = 4 [pid 408] close(3) = 0 [pid 408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 408] write(1, "executing program\n", 18executing program ) = 18 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 408] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[67]}, 88) = 67 [pid 408] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 409 attached NULL, 8) = 0 [pid 409] set_robust_list(0x7fa99b1aa9a0, 24 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 409] <... set_robust_list resumed>) = 0 [pid 409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 409] memfd_create("syzkaller", 0) = 3 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [ 30.417135][ T406] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.424175][ T406] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 409] munmap(0x7fa992d8a000, 138412032) = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 409] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 409] close(3) = 0 [pid 409] close(4) = 0 [pid 409] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 30.518359][ T409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.528218][ T409] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 409] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 409] ioctl(3, LOOP_CLR_FD) = 0 [pid 409] close(3) = 0 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 0 [pid 409] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] gettid() = 67 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x43\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x43\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 409] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] close(3) = 0 [pid 408] close(4) = 0 [pid 408] close(5) = -1 EBADF (Bad file descriptor) [pid 408] close(6) = -1 EBADF (Bad file descriptor) [pid 408] close(7) = -1 EBADF (Bad file descriptor) [pid 408] close(8) = -1 EBADF (Bad file descriptor) [pid 408] close(9) = -1 EBADF (Bad file descriptor) [pid 408] close(10) = -1 EBADF (Bad file descriptor) [pid 408] close(11) = -1 EBADF (Bad file descriptor) [pid 408] close(12) = -1 EBADF (Bad file descriptor) [pid 408] close(13) = -1 EBADF (Bad file descriptor) [pid 408] close(14) = -1 EBADF (Bad file descriptor) [pid 408] close(15) = -1 EBADF (Bad file descriptor) [pid 408] close(16) = -1 EBADF (Bad file descriptor) [pid 408] close(17) = -1 EBADF (Bad file descriptor) [pid 408] close(18) = -1 EBADF (Bad file descriptor) [pid 408] close(19) = -1 EBADF (Bad file descriptor) [pid 408] close(20) = -1 EBADF (Bad file descriptor) [pid 408] close(21) = -1 EBADF (Bad file descriptor) [pid 408] close(22) = -1 EBADF (Bad file descriptor) [pid 408] close(23) = -1 EBADF (Bad file descriptor) [pid 408] close(24) = -1 EBADF (Bad file descriptor) [pid 408] close(25) = -1 EBADF (Bad file descriptor) [pid 408] close(26) = -1 EBADF (Bad file descriptor) [pid 408] close(27) = -1 EBADF (Bad file descriptor) [pid 408] close(28) = -1 EBADF (Bad file descriptor) [pid 408] close(29) = -1 EBADF (Bad file descriptor) [pid 408] exit_group(0) = ? [pid 409] <... futex resumed>) = ? [pid 409] +++ exited with 0 +++ [pid 408] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./32/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./32") = 0 [pid 283] mkdir("./33", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 68 ./strace-static-x86_64: Process 411 attached [pid 411] set_robust_list(0x5555761396a0, 24) = 0 executing program [pid 411] chdir("./33") = 0 [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 411] setpgid(0, 0) = 0 [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 411] write(3, "1000", 4) = 4 [pid 411] close(3) = 0 [pid 411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 411] write(1, "executing program\n", 18) = 18 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 411] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 411] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[69]}, 88) = 69 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] memfd_create("syzkaller", 0) = 3 [pid 412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 412] munmap(0x7fa992d8a000, 138412032) = 0 [pid 412] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 412] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 412] close(3) = 0 [pid 412] close(4) = 0 [pid 412] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 412] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 412] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 30.730595][ T412] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.737764][ T412] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 412] ioctl(3, LOOP_CLR_FD) = 0 [pid 412] close(3) = 0 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 0 [pid 412] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 0 [pid 412] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 1 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] gettid() = 69 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x45\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] <... futex resumed>) = 1 [pid 411] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x45\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 412] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] close(3 [pid 412] <... futex resumed>) = 1 [pid 411] <... close resumed>) = 0 [pid 411] close(4) = 0 [pid 411] close(5) = -1 EBADF (Bad file descriptor) [pid 411] close(6) = -1 EBADF (Bad file descriptor) [pid 411] close(7 [pid 412] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(8) = -1 EBADF (Bad file descriptor) [pid 411] close(9) = -1 EBADF (Bad file descriptor) [pid 411] close(10) = -1 EBADF (Bad file descriptor) [pid 411] close(11) = -1 EBADF (Bad file descriptor) [pid 411] close(12) = -1 EBADF (Bad file descriptor) [pid 411] close(13) = -1 EBADF (Bad file descriptor) [pid 411] close(14) = -1 EBADF (Bad file descriptor) [pid 411] close(15) = -1 EBADF (Bad file descriptor) [pid 411] close(16) = -1 EBADF (Bad file descriptor) [pid 411] close(17) = -1 EBADF (Bad file descriptor) [pid 411] close(18) = -1 EBADF (Bad file descriptor) [pid 411] close(19) = -1 EBADF (Bad file descriptor) [pid 411] close(20) = -1 EBADF (Bad file descriptor) [pid 411] close(21) = -1 EBADF (Bad file descriptor) [pid 411] close(22) = -1 EBADF (Bad file descriptor) [pid 411] close(23) = -1 EBADF (Bad file descriptor) [pid 411] close(24) = -1 EBADF (Bad file descriptor) [pid 411] close(25) = -1 EBADF (Bad file descriptor) [pid 411] close(26) = -1 EBADF (Bad file descriptor) [pid 411] close(27) = -1 EBADF (Bad file descriptor) [pid 411] close(28) = -1 EBADF (Bad file descriptor) [pid 411] close(29) = -1 EBADF (Bad file descriptor) [pid 411] exit_group(0 [pid 412] <... futex resumed>) = ? [pid 411] <... exit_group resumed>) = ? [pid 412] +++ exited with 0 +++ [pid 411] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./33/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./33") = 0 [pid 283] mkdir("./34", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 70 ./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x5555761396a0, 24) = 0 [pid 414] chdir("./34") = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4) = 4 [pid 414] close(3) = 0 [pid 414] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 414] write(1, "executing program\n", 18) = 18 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 414] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 414] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 414] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 415 attached => {parent_tid=[71]}, 88) = 71 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 415] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] memfd_create("syzkaller", 0) = 3 [pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 415] munmap(0x7fa992d8a000, 138412032) = 0 [pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 415] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 415] close(3) = 0 [pid 415] close(4) = 0 [pid 415] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 415] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 415] ioctl(3, LOOP_CLR_FD) = 0 [pid 415] close(3) = 0 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 415] <... futex resumed>) = 1 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 415] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 0 [pid 415] gettid() = 71 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x47\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x47\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 415] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] close(3) = 0 [pid 414] close(4) = 0 [pid 414] close(5) = -1 EBADF (Bad file descriptor) [pid 414] close(6) = -1 EBADF (Bad file descriptor) [pid 414] close(7) = -1 EBADF (Bad file descriptor) [pid 414] close(8) = -1 EBADF (Bad file descriptor) [pid 414] close(9) = -1 EBADF (Bad file descriptor) [pid 414] close(10) = -1 EBADF (Bad file descriptor) [pid 414] close(11) = -1 EBADF (Bad file descriptor) [pid 414] close(12) = -1 EBADF (Bad file descriptor) [pid 414] close(13) = -1 EBADF (Bad file descriptor) [pid 414] close(14) = -1 EBADF (Bad file descriptor) [pid 414] close(15) = -1 EBADF (Bad file descriptor) [pid 414] close(16) = -1 EBADF (Bad file descriptor) [pid 414] close(17) = -1 EBADF (Bad file descriptor) [pid 414] close(18) = -1 EBADF (Bad file descriptor) [pid 414] close(19) = -1 EBADF (Bad file descriptor) [pid 414] close(20) = -1 EBADF (Bad file descriptor) [pid 414] close(21) = -1 EBADF (Bad file descriptor) [pid 414] close(22) = -1 EBADF (Bad file descriptor) [pid 414] close(23) = -1 EBADF (Bad file descriptor) [pid 414] close(24) = -1 EBADF (Bad file descriptor) [pid 414] close(25) = -1 EBADF (Bad file descriptor) [pid 414] close(26) = -1 EBADF (Bad file descriptor) [pid 414] close(27) = -1 EBADF (Bad file descriptor) [pid 414] close(28) = -1 EBADF (Bad file descriptor) [pid 414] close(29) = -1 EBADF (Bad file descriptor) [pid 414] exit_group(0) = ? [pid 415] <... futex resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 414] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./34/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./34") = 0 [pid 283] mkdir("./35", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 72 ./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x5555761396a0, 24executing program ) = 0 [pid 417] chdir("./35") = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 417] write(1, "executing program\n", 18) = 18 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 417] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[73]}, 88) = 73 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] memfd_create("syzkaller", 0) = 3 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 418] munmap(0x7fa992d8a000, 138412032) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.943670][ T415] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.950507][ T415] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 418] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 418] close(3) = 0 [pid 418] close(4) = 0 [pid 418] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 31.005919][ T418] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.013055][ T418] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 418] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 418] ioctl(3, LOOP_CLR_FD) = 0 [pid 418] close(3) = 0 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] gettid() = 73 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x49\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x49\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 418] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] close(3) = 0 [pid 417] close(4) = 0 [pid 417] close(5) = -1 EBADF (Bad file descriptor) [pid 417] close(6) = -1 EBADF (Bad file descriptor) [pid 417] close(7) = -1 EBADF (Bad file descriptor) [pid 417] close(8) = -1 EBADF (Bad file descriptor) [pid 417] close(9) = -1 EBADF (Bad file descriptor) [pid 417] close(10) = -1 EBADF (Bad file descriptor) [pid 417] close(11) = -1 EBADF (Bad file descriptor) [pid 417] close(12) = -1 EBADF (Bad file descriptor) [pid 417] close(13) = -1 EBADF (Bad file descriptor) [pid 417] close(14) = -1 EBADF (Bad file descriptor) [pid 417] close(15) = -1 EBADF (Bad file descriptor) [pid 417] close(16) = -1 EBADF (Bad file descriptor) [pid 417] close(17) = -1 EBADF (Bad file descriptor) [pid 417] close(18) = -1 EBADF (Bad file descriptor) [pid 417] close(19) = -1 EBADF (Bad file descriptor) [pid 417] close(20) = -1 EBADF (Bad file descriptor) [pid 417] close(21) = -1 EBADF (Bad file descriptor) [pid 417] close(22) = -1 EBADF (Bad file descriptor) [pid 417] close(23) = -1 EBADF (Bad file descriptor) [pid 417] close(24) = -1 EBADF (Bad file descriptor) [pid 417] close(25) = -1 EBADF (Bad file descriptor) [pid 417] close(26) = -1 EBADF (Bad file descriptor) [pid 417] close(27) = -1 EBADF (Bad file descriptor) [pid 417] close(28) = -1 EBADF (Bad file descriptor) [pid 417] close(29) = -1 EBADF (Bad file descriptor) [pid 417] exit_group(0) = ? [pid 418] <... futex resumed>) = ? [pid 418] +++ exited with 0 +++ [pid 417] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./35/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./35") = 0 [pid 283] mkdir("./36", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FDexecuting program ) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 74 ./strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x5555761396a0, 24) = 0 [pid 420] chdir("./36") = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 420] close(3) = 0 [pid 420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 420] write(1, "executing program\n", 18) = 18 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 420] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 420] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[75]}, 88) = 75 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 421 attached [pid 421] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] memfd_create("syzkaller", 0) = 3 [pid 421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 421] munmap(0x7fa992d8a000, 138412032) = 0 [pid 421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 421] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 421] close(3) = 0 [pid 421] close(4) = 0 [pid 421] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 421] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 31.216350][ T421] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.226021][ T421] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 421] ioctl(3, LOOP_CLR_FD) = 0 [pid 421] close(3) = 0 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 0 [pid 421] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] gettid( [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... gettid resumed>) = 75 [pid 420] <... futex resumed>) = 0 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 0 [pid 420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x4b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x4b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 420] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... sendmsg resumed>) = 40 [pid 421] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] close(3) = 0 [pid 420] close(4) = 0 [pid 420] close(5) = -1 EBADF (Bad file descriptor) [pid 420] close(6) = -1 EBADF (Bad file descriptor) [pid 420] close(7) = -1 EBADF (Bad file descriptor) [pid 420] close(8) = -1 EBADF (Bad file descriptor) [pid 420] close(9) = -1 EBADF (Bad file descriptor) [pid 420] close(10) = -1 EBADF (Bad file descriptor) [pid 420] close(11) = -1 EBADF (Bad file descriptor) [pid 420] close(12) = -1 EBADF (Bad file descriptor) [pid 420] close(13) = -1 EBADF (Bad file descriptor) [pid 420] close(14) = -1 EBADF (Bad file descriptor) [pid 420] close(15) = -1 EBADF (Bad file descriptor) [pid 420] close(16) = -1 EBADF (Bad file descriptor) [pid 420] close(17) = -1 EBADF (Bad file descriptor) [pid 420] close(18) = -1 EBADF (Bad file descriptor) [pid 420] close(19) = -1 EBADF (Bad file descriptor) [pid 420] close(20) = -1 EBADF (Bad file descriptor) [pid 420] close(21) = -1 EBADF (Bad file descriptor) [pid 420] close(22) = -1 EBADF (Bad file descriptor) [pid 420] close(23) = -1 EBADF (Bad file descriptor) [pid 420] close(24) = -1 EBADF (Bad file descriptor) [pid 420] close(25) = -1 EBADF (Bad file descriptor) [pid 420] close(26) = -1 EBADF (Bad file descriptor) [pid 420] close(27) = -1 EBADF (Bad file descriptor) [pid 420] close(28) = -1 EBADF (Bad file descriptor) [pid 420] close(29) = -1 EBADF (Bad file descriptor) [pid 420] exit_group(0) = ? [pid 421] <... futex resumed>) = ? [pid 421] +++ exited with 0 +++ [pid 420] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./36/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./36") = 0 [pid 283] mkdir("./37", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 76 ./strace-static-x86_64: Process 423 attached [pid 423] set_robust_list(0x5555761396a0, 24) = 0 [pid 423] chdir("./37") = 0 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 423] setpgid(0, 0) = 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 423] write(3, "1000", 4) = 4 [pid 423] close(3) = 0 [pid 423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 423] write(1, "executing program\n", 18executing program ) = 18 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 423] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 423] <... clone3 resumed> => {parent_tid=[77]}, 88) = 77 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] memfd_create("syzkaller", 0 [pid 423] <... futex resumed>) = 1 [pid 424] <... memfd_create resumed>) = 3 [pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 424] munmap(0x7fa992d8a000, 138412032) = 0 [pid 424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 424] close(3) = 0 [pid 424] close(4) = 0 [pid 424] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 424] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 31.373335][ T424] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.380284][ T424] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 424] ioctl(3, LOOP_CLR_FD) = 0 [pid 424] close(3) = 0 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] gettid() = 77 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x4d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x4d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 424] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] close(3) = 0 [pid 423] close(4) = 0 [pid 423] close(5) = -1 EBADF (Bad file descriptor) [pid 423] close(6) = -1 EBADF (Bad file descriptor) [pid 423] close(7) = -1 EBADF (Bad file descriptor) [pid 423] close(8) = -1 EBADF (Bad file descriptor) [pid 423] close(9) = -1 EBADF (Bad file descriptor) [pid 423] close(10) = -1 EBADF (Bad file descriptor) [pid 423] close(11) = -1 EBADF (Bad file descriptor) [pid 423] close(12) = -1 EBADF (Bad file descriptor) [pid 423] close(13) = -1 EBADF (Bad file descriptor) [pid 423] close(14) = -1 EBADF (Bad file descriptor) [pid 423] close(15) = -1 EBADF (Bad file descriptor) [pid 423] close(16) = -1 EBADF (Bad file descriptor) [pid 423] close(17) = -1 EBADF (Bad file descriptor) [pid 423] close(18) = -1 EBADF (Bad file descriptor) [pid 423] close(19) = -1 EBADF (Bad file descriptor) [pid 423] close(20) = -1 EBADF (Bad file descriptor) [pid 423] close(21) = -1 EBADF (Bad file descriptor) [pid 423] close(22) = -1 EBADF (Bad file descriptor) [pid 423] close(23) = -1 EBADF (Bad file descriptor) [pid 423] close(24) = -1 EBADF (Bad file descriptor) [pid 423] close(25) = -1 EBADF (Bad file descriptor) [pid 423] close(26) = -1 EBADF (Bad file descriptor) [pid 423] close(27) = -1 EBADF (Bad file descriptor) [pid 423] close(28) = -1 EBADF (Bad file descriptor) [pid 423] close(29) = -1 EBADF (Bad file descriptor) [pid 423] exit_group(0) = ? [pid 424] <... futex resumed>) = ? [pid 424] +++ exited with 0 +++ [pid 423] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./37/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./37") = 0 [pid 283] mkdir("./38", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 78 ./strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x5555761396a0, 24) = 0 [pid 429] chdir("./38") = 0 [pid 429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 429] setpgid(0, 0) = 0 [pid 429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 429] write(3, "1000", 4) = 4 [pid 429] close(3) = 0 [pid 429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 429] write(1, "executing program\n", 18executing program ) = 18 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 429] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 429] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 429] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[79]}, 88) = 79 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 431] munmap(0x7fa992d8a000, 138412032) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 431] close(3) = 0 [pid 431] close(4) = 0 [pid 431] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 431] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 31.556942][ T431] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.563919][ T431] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 431] ioctl(3, LOOP_CLR_FD) = 0 [pid 431] close(3) = 0 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] gettid() = 79 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x4f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x4f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 431] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] close(3) = 0 [pid 429] close(4) = 0 [pid 429] close(5) = -1 EBADF (Bad file descriptor) [pid 429] close(6) = -1 EBADF (Bad file descriptor) [pid 429] close(7) = -1 EBADF (Bad file descriptor) [pid 429] close(8) = -1 EBADF (Bad file descriptor) [pid 429] close(9) = -1 EBADF (Bad file descriptor) [pid 429] close(10) = -1 EBADF (Bad file descriptor) [pid 429] close(11) = -1 EBADF (Bad file descriptor) [pid 429] close(12) = -1 EBADF (Bad file descriptor) [pid 429] close(13) = -1 EBADF (Bad file descriptor) [pid 429] close(14) = -1 EBADF (Bad file descriptor) [pid 429] close(15) = -1 EBADF (Bad file descriptor) [pid 429] close(16) = -1 EBADF (Bad file descriptor) [pid 429] close(17) = -1 EBADF (Bad file descriptor) [pid 429] close(18) = -1 EBADF (Bad file descriptor) [pid 429] close(19) = -1 EBADF (Bad file descriptor) [pid 429] close(20) = -1 EBADF (Bad file descriptor) [pid 429] close(21) = -1 EBADF (Bad file descriptor) [pid 429] close(22) = -1 EBADF (Bad file descriptor) [pid 429] close(23) = -1 EBADF (Bad file descriptor) [pid 429] close(24) = -1 EBADF (Bad file descriptor) [pid 429] close(25) = -1 EBADF (Bad file descriptor) [pid 429] close(26) = -1 EBADF (Bad file descriptor) [pid 429] close(27) = -1 EBADF (Bad file descriptor) [pid 429] close(28) = -1 EBADF (Bad file descriptor) [pid 429] close(29) = -1 EBADF (Bad file descriptor) [pid 429] exit_group(0) = ? [pid 431] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 429] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./38/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./38") = 0 [pid 283] mkdir("./39", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 80 ./strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x5555761396a0, 24) = 0 [pid 433] chdir("./39") = 0 [pid 433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 433] setpgid(0, 0) = 0 [pid 433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 433] write(3, "1000", 4) = 4 [pid 433] close(3) = 0 [pid 433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 433] write(1, "executing program\n", 18executing program ) = 18 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 433] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x7fa99b1aa9a0, 24 [pid 433] <... clone3 resumed> => {parent_tid=[81]}, 88) = 81 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 434] <... set_robust_list resumed>) = 0 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] memfd_create("syzkaller", 0) = 3 [pid 434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 434] munmap(0x7fa992d8a000, 138412032) = 0 [pid 434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 434] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 434] close(3) = 0 [pid 434] close(4) = 0 [pid 434] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 434] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 31.723744][ T434] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.730646][ T434] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 434] ioctl(3, LOOP_CLR_FD) = 0 [pid 434] close(3) = 0 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 434] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 434] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] gettid() = 81 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x51\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x51\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 434] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 433] close(3) = 0 [pid 433] close(4) = 0 [pid 433] close(5) = -1 EBADF (Bad file descriptor) [pid 433] close(6) = -1 EBADF (Bad file descriptor) [pid 433] close(7) = -1 EBADF (Bad file descriptor) [pid 433] close(8) = -1 EBADF (Bad file descriptor) [pid 433] close(9) = -1 EBADF (Bad file descriptor) [pid 433] close(10) = -1 EBADF (Bad file descriptor) [pid 433] close(11) = -1 EBADF (Bad file descriptor) [pid 433] close(12) = -1 EBADF (Bad file descriptor) [pid 433] close(13) = -1 EBADF (Bad file descriptor) [pid 433] close(14) = -1 EBADF (Bad file descriptor) [pid 433] close(15) = -1 EBADF (Bad file descriptor) [pid 433] close(16) = -1 EBADF (Bad file descriptor) [pid 433] close(17) = -1 EBADF (Bad file descriptor) [pid 433] close(18) = -1 EBADF (Bad file descriptor) [pid 433] close(19) = -1 EBADF (Bad file descriptor) [pid 433] close(20) = -1 EBADF (Bad file descriptor) [pid 433] close(21) = -1 EBADF (Bad file descriptor) [pid 433] close(22) = -1 EBADF (Bad file descriptor) [pid 433] close(23) = -1 EBADF (Bad file descriptor) [pid 433] close(24) = -1 EBADF (Bad file descriptor) [pid 433] close(25) = -1 EBADF (Bad file descriptor) [pid 433] close(26) = -1 EBADF (Bad file descriptor) [pid 433] close(27) = -1 EBADF (Bad file descriptor) [pid 433] close(28) = -1 EBADF (Bad file descriptor) [pid 433] close(29) = -1 EBADF (Bad file descriptor) [pid 433] exit_group(0) = ? [pid 434] <... futex resumed>) = ? [pid 434] +++ exited with 0 +++ [pid 433] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x33\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x33\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x33\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x33\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x33\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./39/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./39") = 0 [pid 283] mkdir("./40", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 82 ./strace-static-x86_64: Process 436 attached [pid 436] set_robust_list(0x5555761396a0, 24) = 0 [pid 436] chdir("./40") = 0 [pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 436] setpgid(0, 0) = 0 [pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 436] write(3, "1000", 4) = 4 [pid 436] close(3) = 0 [pid 436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 436] write(1, "executing program\n", 18executing program ) = 18 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 436] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x7fa99b1aa9a0, 24 [pid 436] <... clone3 resumed> => {parent_tid=[83]}, 88) = 83 [pid 437] <... set_robust_list resumed>) = 0 [pid 436] rt_sigprocmask(SIG_SETMASK, [], [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 437] memfd_create("syzkaller", 0) = 3 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 437] munmap(0x7fa992d8a000, 138412032) = 0 [pid 437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 437] close(3) = 0 [pid 437] close(4) = 0 [pid 437] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 437] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 31.864356][ T437] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.871254][ T437] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 437] ioctl(3, LOOP_CLR_FD) = 0 [pid 437] close(3) = 0 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] gettid() = 83 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x53\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x53\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 437] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] close(3) = 0 [pid 436] close(4) = 0 [pid 436] close(5) = -1 EBADF (Bad file descriptor) [pid 436] close(6) = -1 EBADF (Bad file descriptor) [pid 436] close(7) = -1 EBADF (Bad file descriptor) [pid 436] close(8) = -1 EBADF (Bad file descriptor) [pid 436] close(9) = -1 EBADF (Bad file descriptor) [pid 436] close(10) = -1 EBADF (Bad file descriptor) [pid 436] close(11) = -1 EBADF (Bad file descriptor) [pid 436] close(12) = -1 EBADF (Bad file descriptor) [pid 436] close(13) = -1 EBADF (Bad file descriptor) [pid 436] close(14) = -1 EBADF (Bad file descriptor) [pid 436] close(15) = -1 EBADF (Bad file descriptor) [pid 436] close(16) = -1 EBADF (Bad file descriptor) [pid 436] close(17) = -1 EBADF (Bad file descriptor) [pid 436] close(18) = -1 EBADF (Bad file descriptor) [pid 436] close(19) = -1 EBADF (Bad file descriptor) [pid 436] close(20) = -1 EBADF (Bad file descriptor) [pid 436] close(21) = -1 EBADF (Bad file descriptor) [pid 436] close(22) = -1 EBADF (Bad file descriptor) [pid 436] close(23) = -1 EBADF (Bad file descriptor) [pid 436] close(24) = -1 EBADF (Bad file descriptor) [pid 436] close(25) = -1 EBADF (Bad file descriptor) [pid 436] close(26) = -1 EBADF (Bad file descriptor) [pid 436] close(27) = -1 EBADF (Bad file descriptor) [pid 436] close(28) = -1 EBADF (Bad file descriptor) [pid 436] close(29) = -1 EBADF (Bad file descriptor) [pid 436] exit_group(0) = ? [pid 437] <... futex resumed>) = ? [pid 437] +++ exited with 0 +++ [pid 436] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./40/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./40") = 0 [pid 283] mkdir("./41", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 84 ./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x5555761396a0, 24) = 0 [pid 439] chdir("./41") = 0 [pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 439] setpgid(0, 0) = 0 [pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 439] write(3, "1000", 4) = 4 [pid 439] close(3) = 0 [pid 439] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 439] write(1, "executing program\n", 18) = 18 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 439] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[85]}, 88) = 85 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] memfd_create("syzkaller", 0) = 3 [pid 440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 440] munmap(0x7fa992d8a000, 138412032) = 0 [pid 440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 440] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 440] close(3) = 0 [pid 440] close(4) = 0 [pid 440] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 440] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 440] ioctl(3, LOOP_CLR_FD) = 0 [pid 440] close(3) = 0 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] gettid() = 85 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x55\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x55\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 440] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] close(3) = 0 [pid 439] close(4) = 0 [pid 439] close(5) = -1 EBADF (Bad file descriptor) [pid 439] close(6) = -1 EBADF (Bad file descriptor) [pid 439] close(7) = -1 EBADF (Bad file descriptor) [pid 439] close(8) = -1 EBADF (Bad file descriptor) [pid 439] close(9 [pid 440] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 439] close(10) = -1 EBADF (Bad file descriptor) [pid 439] close(11) = -1 EBADF (Bad file descriptor) [pid 439] close(12) = -1 EBADF (Bad file descriptor) [pid 439] close(13) = -1 EBADF (Bad file descriptor) [pid 439] close(14) = -1 EBADF (Bad file descriptor) [pid 439] close(15) = -1 EBADF (Bad file descriptor) [pid 439] close(16) = -1 EBADF (Bad file descriptor) [pid 439] close(17) = -1 EBADF (Bad file descriptor) [pid 439] close(18) = -1 EBADF (Bad file descriptor) [pid 439] close(19) = -1 EBADF (Bad file descriptor) [pid 439] close(20) = -1 EBADF (Bad file descriptor) [pid 439] close(21) = -1 EBADF (Bad file descriptor) [pid 439] close(22) = -1 EBADF (Bad file descriptor) [pid 439] close(23) = -1 EBADF (Bad file descriptor) [pid 439] close(24) = -1 EBADF (Bad file descriptor) [pid 439] close(25) = -1 EBADF (Bad file descriptor) [pid 439] close(26) = -1 EBADF (Bad file descriptor) [pid 439] close(27) = -1 EBADF (Bad file descriptor) [pid 439] close(28) = -1 EBADF (Bad file descriptor) [pid 439] close(29) = -1 EBADF (Bad file descriptor) [pid 439] exit_group(0) = ? [pid 440] <... futex resumed>) = ? [pid 440] +++ exited with 0 +++ [pid 439] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./41/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./41") = 0 [pid 283] mkdir("./42", 0777) = 0 [ 31.987091][ T440] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.994326][ T440] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 86 ./strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x5555761396a0, 24) = 0 [pid 442] chdir("./42") = 0 [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 442] setpgid(0, 0) = 0 [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 442] write(3, "1000", 4) = 4 [pid 442] close(3) = 0 [pid 442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 442] write(1, "executing program\n", 18executing program ) = 18 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 442] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[87]}, 88) = 87 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 443 attached [pid 443] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] memfd_create("syzkaller", 0) = 3 [pid 443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 443] munmap(0x7fa992d8a000, 138412032) = 0 [pid 443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 443] close(3) = 0 [pid 443] close(4) = 0 [pid 443] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 443] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 32.077649][ T443] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.084799][ T443] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 443] ioctl(3, LOOP_CLR_FD) = 0 [pid 443] close(3) = 0 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 443] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 0 [pid 443] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] gettid() = 87 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x57\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x57\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 443] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] close(3) = 0 [pid 442] close(4) = 0 [pid 442] close(5) = -1 EBADF (Bad file descriptor) [pid 442] close(6) = -1 EBADF (Bad file descriptor) [pid 442] close(7) = -1 EBADF (Bad file descriptor) [pid 442] close(8) = -1 EBADF (Bad file descriptor) [pid 442] close(9) = -1 EBADF (Bad file descriptor) [pid 442] close(10) = -1 EBADF (Bad file descriptor) [pid 442] close(11) = -1 EBADF (Bad file descriptor) [pid 442] close(12) = -1 EBADF (Bad file descriptor) [pid 442] close(13) = -1 EBADF (Bad file descriptor) [pid 442] close(14) = -1 EBADF (Bad file descriptor) [pid 442] close(15) = -1 EBADF (Bad file descriptor) [pid 442] close(16) = -1 EBADF (Bad file descriptor) [pid 442] close(17) = -1 EBADF (Bad file descriptor) [pid 442] close(18) = -1 EBADF (Bad file descriptor) [pid 442] close(19) = -1 EBADF (Bad file descriptor) [pid 442] close(20) = -1 EBADF (Bad file descriptor) [pid 442] close(21) = -1 EBADF (Bad file descriptor) [pid 442] close(22) = -1 EBADF (Bad file descriptor) [pid 442] close(23) = -1 EBADF (Bad file descriptor) [pid 442] close(24) = -1 EBADF (Bad file descriptor) [pid 442] close(25) = -1 EBADF (Bad file descriptor) [pid 442] close(26) = -1 EBADF (Bad file descriptor) [pid 442] close(27) = -1 EBADF (Bad file descriptor) [pid 442] close(28) = -1 EBADF (Bad file descriptor) [pid 442] close(29) = -1 EBADF (Bad file descriptor) [pid 442] exit_group(0) = ? [pid 443] <... futex resumed>) = ? [pid 443] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./42/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./42") = 0 [pid 283] mkdir("./43", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 88 ./strace-static-x86_64: Process 445 attached [pid 445] set_robust_list(0x5555761396a0, 24) = 0 [pid 445] chdir("./43") = 0 [pid 445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 445] setpgid(0, 0) = 0 [pid 445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 445] write(3, "1000", 4) = 4 [pid 445] close(3) = 0 [pid 445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 445] write(1, "executing program\n", 18) = 18 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 445] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[89]}, 88) = 89 [pid 445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 446 attached [pid 446] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] memfd_create("syzkaller", 0) = 3 [pid 446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 446] munmap(0x7fa992d8a000, 138412032) = 0 [pid 446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 446] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 446] close(3) = 0 [pid 446] close(4) = 0 [pid 446] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 32.280653][ T446] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.287890][ T446] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 446] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 446] ioctl(3, LOOP_CLR_FD) = 0 [pid 446] close(3) = 0 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] gettid() = 89 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x59\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x59\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 446] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = 0 [pid 445] close(3) = 0 [pid 445] close(4) = 0 [pid 445] close(5) = -1 EBADF (Bad file descriptor) [pid 445] close(6) = -1 EBADF (Bad file descriptor) [pid 445] close(7) = -1 EBADF (Bad file descriptor) [pid 445] close(8) = -1 EBADF (Bad file descriptor) [pid 445] close(9) = -1 EBADF (Bad file descriptor) [pid 445] close(10) = -1 EBADF (Bad file descriptor) [pid 445] close(11) = -1 EBADF (Bad file descriptor) [pid 445] close(12) = -1 EBADF (Bad file descriptor) [pid 445] close(13) = -1 EBADF (Bad file descriptor) [pid 445] close(14) = -1 EBADF (Bad file descriptor) [pid 445] close(15) = -1 EBADF (Bad file descriptor) [pid 445] close(16) = -1 EBADF (Bad file descriptor) [pid 445] close(17) = -1 EBADF (Bad file descriptor) [pid 445] close(18) = -1 EBADF (Bad file descriptor) [pid 445] close(19) = -1 EBADF (Bad file descriptor) [pid 445] close(20) = -1 EBADF (Bad file descriptor) [pid 445] close(21) = -1 EBADF (Bad file descriptor) [pid 445] close(22) = -1 EBADF (Bad file descriptor) [pid 445] close(23) = -1 EBADF (Bad file descriptor) [pid 445] close(24) = -1 EBADF (Bad file descriptor) [pid 445] close(25) = -1 EBADF (Bad file descriptor) [pid 445] close(26) = -1 EBADF (Bad file descriptor) [pid 445] close(27) = -1 EBADF (Bad file descriptor) [pid 445] close(28) = -1 EBADF (Bad file descriptor) [pid 445] close(29) = -1 EBADF (Bad file descriptor) [pid 445] exit_group(0) = ? [pid 446] <... futex resumed>) = ? [pid 446] +++ exited with 0 +++ [pid 445] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./43/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./43") = 0 [pid 283] mkdir("./44", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 90 ./strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x5555761396a0, 24) = 0 [pid 448] chdir("./44") = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 [pid 448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 448] write(1, "executing program\n", 18executing program ) = 18 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 448] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[91]}, 88) = 91 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] memfd_create("syzkaller", 0) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 449] munmap(0x7fa992d8a000, 138412032) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 449] close(3) = 0 [pid 449] close(4) = 0 [pid 449] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 449] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 32.525880][ T449] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.532789][ T449] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 449] ioctl(3, LOOP_CLR_FD) = 0 [pid 449] close(3) = 0 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 449] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 0 [pid 449] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 449] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 0 [pid 449] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 449] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 0 [pid 449] gettid() = 91 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x5b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x5b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 449] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] close(3) = 0 [pid 448] close(4) = 0 [pid 448] close(5) = -1 EBADF (Bad file descriptor) [pid 448] close(6) = -1 EBADF (Bad file descriptor) [pid 448] close(7) = -1 EBADF (Bad file descriptor) [pid 448] close(8) = -1 EBADF (Bad file descriptor) [pid 448] close(9) = -1 EBADF (Bad file descriptor) [pid 448] close(10) = -1 EBADF (Bad file descriptor) [pid 448] close(11) = -1 EBADF (Bad file descriptor) [pid 448] close(12) = -1 EBADF (Bad file descriptor) [pid 448] close(13) = -1 EBADF (Bad file descriptor) [pid 448] close(14) = -1 EBADF (Bad file descriptor) [pid 448] close(15) = -1 EBADF (Bad file descriptor) [pid 448] close(16) = -1 EBADF (Bad file descriptor) [pid 448] close(17) = -1 EBADF (Bad file descriptor) [pid 448] close(18) = -1 EBADF (Bad file descriptor) [pid 448] close(19) = -1 EBADF (Bad file descriptor) [pid 448] close(20) = -1 EBADF (Bad file descriptor) [pid 448] close(21) = -1 EBADF (Bad file descriptor) [pid 448] close(22) = -1 EBADF (Bad file descriptor) [pid 448] close(23) = -1 EBADF (Bad file descriptor) [pid 448] close(24) = -1 EBADF (Bad file descriptor) [pid 448] close(25) = -1 EBADF (Bad file descriptor) [pid 448] close(26) = -1 EBADF (Bad file descriptor) [pid 448] close(27) = -1 EBADF (Bad file descriptor) [pid 448] close(28) = -1 EBADF (Bad file descriptor) [pid 448] close(29) = -1 EBADF (Bad file descriptor) [pid 448] exit_group(0) = ? [pid 449] <... futex resumed>) = ? [pid 449] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./44/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./44") = 0 [pid 283] mkdir("./45", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 92 ./strace-static-x86_64: Process 455 attached [pid 455] set_robust_list(0x5555761396a0, 24) = 0 [pid 455] chdir("./45") = 0 [pid 455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 455] setpgid(0, 0) = 0 [pid 455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 455] write(3, "1000", 4) = 4 [pid 455] close(3) = 0 [pid 455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 455] write(1, "executing program\n", 18) = 18 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 455] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[93]}, 88) = 93 [pid 455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] memfd_create("syzkaller", 0) = 3 [pid 456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 456] munmap(0x7fa992d8a000, 138412032) = 0 [pid 456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 456] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 456] close(3) = 0 [pid 456] close(4) = 0 [pid 456] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 456] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 32.696989][ T456] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.704478][ T456] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 456] ioctl(3, LOOP_CLR_FD) = 0 [pid 456] close(3) = 0 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 0 [pid 456] gettid() = 93 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x5d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x5d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 456] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] close(3) = 0 [pid 455] close(4) = 0 [pid 455] close(5) = -1 EBADF (Bad file descriptor) [pid 455] close(6) = -1 EBADF (Bad file descriptor) [pid 455] close(7) = -1 EBADF (Bad file descriptor) [pid 455] close(8) = -1 EBADF (Bad file descriptor) [pid 455] close(9) = -1 EBADF (Bad file descriptor) [pid 455] close(10) = -1 EBADF (Bad file descriptor) [pid 455] close(11) = -1 EBADF (Bad file descriptor) [pid 455] close(12) = -1 EBADF (Bad file descriptor) [pid 455] close(13) = -1 EBADF (Bad file descriptor) [pid 455] close(14) = -1 EBADF (Bad file descriptor) [pid 455] close(15) = -1 EBADF (Bad file descriptor) [pid 455] close(16) = -1 EBADF (Bad file descriptor) [pid 455] close(17) = -1 EBADF (Bad file descriptor) [pid 455] close(18) = -1 EBADF (Bad file descriptor) [pid 455] close(19) = -1 EBADF (Bad file descriptor) [pid 455] close(20) = -1 EBADF (Bad file descriptor) [pid 455] close(21) = -1 EBADF (Bad file descriptor) [pid 455] close(22) = -1 EBADF (Bad file descriptor) [pid 455] close(23) = -1 EBADF (Bad file descriptor) [pid 455] close(24) = -1 EBADF (Bad file descriptor) [pid 455] close(25) = -1 EBADF (Bad file descriptor) [pid 455] close(26) = -1 EBADF (Bad file descriptor) [pid 455] close(27) = -1 EBADF (Bad file descriptor) [pid 455] close(28) = -1 EBADF (Bad file descriptor) [pid 455] close(29) = -1 EBADF (Bad file descriptor) [pid 455] exit_group(0) = ? [pid 456] <... futex resumed>) = ? [pid 456] +++ exited with 0 +++ [pid 455] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=1, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./45/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./45") = 0 [pid 283] mkdir("./46", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 94 ./strace-static-x86_64: Process 458 attached [pid 458] set_robust_list(0x5555761396a0, 24) = 0 [pid 458] chdir("./46") = 0 [pid 458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 458] setpgid(0, 0) = 0 [pid 458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 458] write(3, "1000", 4) = 4 [pid 458] close(3) = 0 [pid 458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 458] write(1, "executing program\n", 18executing program ) = 18 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 458] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[95]}, 88) = 95 [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] memfd_create("syzkaller", 0) = 3 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 459] munmap(0x7fa992d8a000, 138412032) = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 459] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 459] close(3) = 0 [pid 459] close(4) = 0 [pid 459] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 459] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 32.857840][ T459] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.864810][ T459] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 459] ioctl(3, LOOP_CLR_FD) = 0 [pid 459] close(3) = 0 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] gettid() = 95 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x5f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x5f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 459] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] close(3) = 0 [pid 458] close(4) = 0 [pid 458] close(5) = -1 EBADF (Bad file descriptor) [pid 458] close(6) = -1 EBADF (Bad file descriptor) [pid 458] close(7) = -1 EBADF (Bad file descriptor) [pid 458] close(8) = -1 EBADF (Bad file descriptor) [pid 458] close(9) = -1 EBADF (Bad file descriptor) [pid 458] close(10) = -1 EBADF (Bad file descriptor) [pid 458] close(11) = -1 EBADF (Bad file descriptor) [pid 458] close(12) = -1 EBADF (Bad file descriptor) [pid 458] close(13) = -1 EBADF (Bad file descriptor) [pid 458] close(14) = -1 EBADF (Bad file descriptor) [pid 458] close(15) = -1 EBADF (Bad file descriptor) [pid 458] close(16) = -1 EBADF (Bad file descriptor) [pid 458] close(17) = -1 EBADF (Bad file descriptor) [pid 458] close(18) = -1 EBADF (Bad file descriptor) [pid 458] close(19) = -1 EBADF (Bad file descriptor) [pid 458] close(20) = -1 EBADF (Bad file descriptor) [pid 458] close(21) = -1 EBADF (Bad file descriptor) [pid 458] close(22) = -1 EBADF (Bad file descriptor) [pid 458] close(23) = -1 EBADF (Bad file descriptor) [pid 458] close(24) = -1 EBADF (Bad file descriptor) [pid 458] close(25) = -1 EBADF (Bad file descriptor) [pid 458] close(26) = -1 EBADF (Bad file descriptor) [pid 458] close(27) = -1 EBADF (Bad file descriptor) [pid 458] close(28) = -1 EBADF (Bad file descriptor) [pid 458] close(29) = -1 EBADF (Bad file descriptor) [pid 458] exit_group(0) = ? [pid 459] <... futex resumed>) = ? [pid 459] +++ exited with 0 +++ [pid 458] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./46/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./46") = 0 [pid 283] mkdir("./47", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 96 ./strace-static-x86_64: Process 461 attached [pid 461] set_robust_list(0x5555761396a0, 24) = 0 [pid 461] chdir("./47") = 0 [pid 461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 461] setpgid(0, 0) = 0 [pid 461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 461] write(3, "1000", 4) = 4 [pid 461] close(3) = 0 [pid 461] symlink("/dev/binderfs", "./binderfs") = 0 [pid 461] write(1, "executing program\n", 18executing program ) = 18 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 461] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 461] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[97]}, 88) = 97 [pid 461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 462 attached [pid 462] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] memfd_create("syzkaller", 0) = 3 [pid 462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 462] munmap(0x7fa992d8a000, 138412032) = 0 [pid 462] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 462] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 462] close(3) = 0 [pid 462] close(4) = 0 [pid 462] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 33.056932][ T462] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.064047][ T462] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 462] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 462] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 462] ioctl(3, LOOP_CLR_FD) = 0 [pid 462] close(3) = 0 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 0 [pid 462] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 0 [pid 462] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 462] gettid( [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... gettid resumed>) = 97 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x61\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = 0 [pid 461] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x61\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 462] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = 0 [pid 461] close(3) = 0 [pid 461] close(4) = 0 [pid 461] close(5) = -1 EBADF (Bad file descriptor) [pid 461] close(6) = -1 EBADF (Bad file descriptor) [pid 461] close(7) = -1 EBADF (Bad file descriptor) [pid 461] close(8) = -1 EBADF (Bad file descriptor) [pid 461] close(9) = -1 EBADF (Bad file descriptor) [pid 461] close(10) = -1 EBADF (Bad file descriptor) [pid 461] close(11) = -1 EBADF (Bad file descriptor) [pid 461] close(12) = -1 EBADF (Bad file descriptor) [pid 461] close(13) = -1 EBADF (Bad file descriptor) [pid 461] close(14) = -1 EBADF (Bad file descriptor) [pid 461] close(15) = -1 EBADF (Bad file descriptor) [pid 461] close(16) = -1 EBADF (Bad file descriptor) [pid 461] close(17) = -1 EBADF (Bad file descriptor) [pid 461] close(18) = -1 EBADF (Bad file descriptor) [pid 461] close(19) = -1 EBADF (Bad file descriptor) [pid 461] close(20) = -1 EBADF (Bad file descriptor) [pid 461] close(21) = -1 EBADF (Bad file descriptor) [pid 461] close(22) = -1 EBADF (Bad file descriptor) [pid 461] close(23) = -1 EBADF (Bad file descriptor) [pid 461] close(24) = -1 EBADF (Bad file descriptor) [pid 461] close(25) = -1 EBADF (Bad file descriptor) [pid 461] close(26) = -1 EBADF (Bad file descriptor) [pid 461] close(27) = -1 EBADF (Bad file descriptor) [pid 461] close(28) = -1 EBADF (Bad file descriptor) [pid 461] close(29) = -1 EBADF (Bad file descriptor) [pid 461] exit_group(0) = ? [pid 462] <... futex resumed>) = ? [pid 462] +++ exited with 0 +++ [pid 461] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./47/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./47") = 0 [pid 283] mkdir("./48", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 98 ./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x5555761396a0, 24) = 0 [pid 464] chdir("./48") = 0 [pid 464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 464] setpgid(0, 0) = 0 [pid 464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 464] write(3, "1000", 4) = 4 [pid 464] close(3) = 0 [pid 464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 464] write(1, "executing program\n", 18executing program ) = 18 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 464] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[99]}, 88) = 99 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] memfd_create("syzkaller", 0) = 3 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 465] munmap(0x7fa992d8a000, 138412032) = 0 [pid 465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 465] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 465] close(3) = 0 [pid 465] close(4) = 0 [pid 465] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 33.249252][ T465] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.256504][ T465] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 465] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 465] ioctl(3, LOOP_CLR_FD) = 0 [pid 465] close(3) = 0 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] gettid() = 99 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x63\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x63\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 465] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] close(3) = 0 [pid 464] close(4) = 0 [pid 464] close(5) = -1 EBADF (Bad file descriptor) [pid 464] close(6) = -1 EBADF (Bad file descriptor) [pid 464] close(7) = -1 EBADF (Bad file descriptor) [pid 464] close(8) = -1 EBADF (Bad file descriptor) [pid 464] close(9) = -1 EBADF (Bad file descriptor) [pid 464] close(10) = -1 EBADF (Bad file descriptor) [pid 464] close(11) = -1 EBADF (Bad file descriptor) [pid 464] close(12) = -1 EBADF (Bad file descriptor) [pid 464] close(13) = -1 EBADF (Bad file descriptor) [pid 464] close(14) = -1 EBADF (Bad file descriptor) [pid 464] close(15) = -1 EBADF (Bad file descriptor) [pid 464] close(16) = -1 EBADF (Bad file descriptor) [pid 464] close(17) = -1 EBADF (Bad file descriptor) [pid 464] close(18) = -1 EBADF (Bad file descriptor) [pid 464] close(19) = -1 EBADF (Bad file descriptor) [pid 464] close(20) = -1 EBADF (Bad file descriptor) [pid 464] close(21) = -1 EBADF (Bad file descriptor) [pid 464] close(22) = -1 EBADF (Bad file descriptor) [pid 464] close(23) = -1 EBADF (Bad file descriptor) [pid 464] close(24) = -1 EBADF (Bad file descriptor) [pid 464] close(25) = -1 EBADF (Bad file descriptor) [pid 464] close(26) = -1 EBADF (Bad file descriptor) [pid 464] close(27) = -1 EBADF (Bad file descriptor) [pid 464] close(28) = -1 EBADF (Bad file descriptor) [pid 464] close(29) = -1 EBADF (Bad file descriptor) [pid 464] exit_group(0) = ? [pid 465] <... futex resumed>) = ? [pid 465] +++ exited with 0 +++ [pid 464] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x38\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./48/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./48") = 0 [pid 283] mkdir("./49", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x555576139690) = 100 ./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x5555761396a0, 24) = 0 [pid 467] chdir("./49") = 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 467] write(3, "1000", 4) = 4 [pid 467] close(3) = 0 [pid 467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 467] write(1, "executing program\n", 18) = 18 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 467] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[101]}, 88) = 101 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 468 attached [pid 468] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] memfd_create("syzkaller", 0) = 3 [pid 468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 468] munmap(0x7fa992d8a000, 138412032) = 0 [pid 468] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 468] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 468] close(3) = 0 [pid 468] close(4) = 0 [pid 468] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 33.513876][ T468] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.520888][ T468] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 468] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 468] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 468] ioctl(3, LOOP_CLR_FD) = 0 [pid 468] close(3) = 0 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 1 [pid 468] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 1 [pid 468] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 1 [pid 468] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 1 [pid 468] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 1 [pid 468] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 468] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 0 [pid 468] gettid() = 101 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 1 [pid 468] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x65\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x65\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 467] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... sendmsg resumed>) = 40 [pid 468] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] close(3) = 0 [pid 468] <... futex resumed>) = 1 [pid 467] close(4) = 0 [pid 467] close(5) = -1 EBADF (Bad file descriptor) [pid 467] close(6) = -1 EBADF (Bad file descriptor) [pid 467] close(7) = -1 EBADF (Bad file descriptor) [pid 467] close(8) = -1 EBADF (Bad file descriptor) [pid 467] close(9) = -1 EBADF (Bad file descriptor) [pid 467] close(10) = -1 EBADF (Bad file descriptor) [pid 467] close(11) = -1 EBADF (Bad file descriptor) [pid 467] close(12) = -1 EBADF (Bad file descriptor) [pid 467] close(13) = -1 EBADF (Bad file descriptor) [pid 468] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] close(14) = -1 EBADF (Bad file descriptor) [pid 467] close(15) = -1 EBADF (Bad file descriptor) [pid 467] close(16) = -1 EBADF (Bad file descriptor) [pid 467] close(17) = -1 EBADF (Bad file descriptor) [pid 467] close(18) = -1 EBADF (Bad file descriptor) [pid 467] close(19) = -1 EBADF (Bad file descriptor) [pid 467] close(20) = -1 EBADF (Bad file descriptor) [pid 467] close(21) = -1 EBADF (Bad file descriptor) [pid 467] close(22) = -1 EBADF (Bad file descriptor) [pid 467] close(23) = -1 EBADF (Bad file descriptor) [pid 467] close(24) = -1 EBADF (Bad file descriptor) [pid 467] close(25) = -1 EBADF (Bad file descriptor) [pid 467] close(26) = -1 EBADF (Bad file descriptor) [pid 467] close(27) = -1 EBADF (Bad file descriptor) [pid 467] close(28) = -1 EBADF (Bad file descriptor) [pid 467] close(29) = -1 EBADF (Bad file descriptor) [pid 467] exit_group(0) = ? [pid 468] <... futex resumed>) = ? [pid 468] +++ exited with 0 +++ [pid 467] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x34\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x34\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x34\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x34\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x34\x39\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./49/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./49") = 0 [pid 283] mkdir("./50", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 470 attached , child_tidptr=0x555576139690) = 102 [pid 470] set_robust_list(0x5555761396a0, 24) = 0 [pid 470] chdir("./50") = 0 [pid 470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] setpgid(0, 0) = 0 [pid 470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 470] write(3, "1000", 4) = 4 [pid 470] close(3) = 0 [pid 470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 470] write(1, "executing program\n", 18) = 18 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 470] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 471 attached => {parent_tid=[103]}, 88) = 103 [pid 471] set_robust_list(0x7fa99b1aa9a0, 24 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 471] <... set_robust_list resumed>) = 0 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 471] munmap(0x7fa992d8a000, 138412032) = 0 [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 471] close(3) = 0 [pid 471] close(4) = 0 [pid 471] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 471] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 33.706956][ T471] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.714259][ T471] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 471] ioctl(3, LOOP_CLR_FD) = 0 [pid 471] close(3) = 0 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 0 [pid 471] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 0 [pid 471] gettid() = 103 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x67\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x67\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 471] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] close(3) = 0 [pid 470] close(4) = 0 [pid 470] close(5) = -1 EBADF (Bad file descriptor) [pid 470] close(6) = -1 EBADF (Bad file descriptor) [pid 470] close(7) = -1 EBADF (Bad file descriptor) [pid 470] close(8) = -1 EBADF (Bad file descriptor) [pid 470] close(9) = -1 EBADF (Bad file descriptor) [pid 470] close(10) = -1 EBADF (Bad file descriptor) [pid 470] close(11) = -1 EBADF (Bad file descriptor) [pid 470] close(12) = -1 EBADF (Bad file descriptor) [pid 470] close(13) = -1 EBADF (Bad file descriptor) [pid 470] close(14) = -1 EBADF (Bad file descriptor) [pid 470] close(15) = -1 EBADF (Bad file descriptor) [pid 470] close(16) = -1 EBADF (Bad file descriptor) [pid 470] close(17) = -1 EBADF (Bad file descriptor) [pid 470] close(18) = -1 EBADF (Bad file descriptor) [pid 470] close(19) = -1 EBADF (Bad file descriptor) [pid 470] close(20) = -1 EBADF (Bad file descriptor) [pid 470] close(21) = -1 EBADF (Bad file descriptor) [pid 470] close(22) = -1 EBADF (Bad file descriptor) [pid 470] close(23) = -1 EBADF (Bad file descriptor) [pid 470] close(24) = -1 EBADF (Bad file descriptor) [pid 470] close(25) = -1 EBADF (Bad file descriptor) [pid 470] close(26) = -1 EBADF (Bad file descriptor) [pid 470] close(27) = -1 EBADF (Bad file descriptor) [pid 470] close(28) = -1 EBADF (Bad file descriptor) [pid 470] close(29) = -1 EBADF (Bad file descriptor) [pid 470] exit_group(0) = ? [pid 471] <... futex resumed>) = ? [pid 471] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./50/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./50") = 0 [pid 283] mkdir("./51", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 104 ./strace-static-x86_64: Process 473 attached [pid 473] set_robust_list(0x5555761396a0, 24) = 0 [pid 473] chdir("./51") = 0 [pid 473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 473] setpgid(0, 0) = 0 [pid 473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 473] write(3, "1000", 4) = 4 [pid 473] close(3) = 0 [pid 473] symlink("/dev/binderfs", "./binderfs") = 0 [pid 473] write(1, "executing program\n", 18executing program ) = 18 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 473] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 473] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 473] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 474 attached => {parent_tid=[105]}, 88) = 105 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 474] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 474] memfd_create("syzkaller", 0) = 3 [pid 474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 474] munmap(0x7fa992d8a000, 138412032) = 0 [pid 474] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 474] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 474] close(3) = 0 [pid 474] close(4) = 0 [pid 474] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 33.915329][ T474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.922215][ T474] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 474] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 474] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 474] ioctl(3, LOOP_CLR_FD) = 0 [pid 474] close(3) = 0 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... futex resumed>) = 1 [pid 474] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... futex resumed>) = 1 [pid 474] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 474] <... futex resumed>) = 1 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] gettid( [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... gettid resumed>) = 105 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x69\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 474] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x69\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 473] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... sendmsg resumed>) = 40 [pid 474] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 474] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 473] close(3) = 0 [pid 473] close(4) = 0 [pid 473] close(5) = -1 EBADF (Bad file descriptor) [pid 473] close(6) = -1 EBADF (Bad file descriptor) [pid 473] close(7) = -1 EBADF (Bad file descriptor) [pid 473] close(8) = -1 EBADF (Bad file descriptor) [pid 473] close(9) = -1 EBADF (Bad file descriptor) [pid 473] close(10) = -1 EBADF (Bad file descriptor) [pid 473] close(11) = -1 EBADF (Bad file descriptor) [pid 473] close(12) = -1 EBADF (Bad file descriptor) [pid 473] close(13) = -1 EBADF (Bad file descriptor) [pid 473] close(14) = -1 EBADF (Bad file descriptor) [pid 473] close(15) = -1 EBADF (Bad file descriptor) [pid 473] close(16) = -1 EBADF (Bad file descriptor) [pid 473] close(17) = -1 EBADF (Bad file descriptor) [pid 473] close(18) = -1 EBADF (Bad file descriptor) [pid 473] close(19) = -1 EBADF (Bad file descriptor) [pid 473] close(20) = -1 EBADF (Bad file descriptor) [pid 473] close(21) = -1 EBADF (Bad file descriptor) [pid 473] close(22) = -1 EBADF (Bad file descriptor) [pid 473] close(23) = -1 EBADF (Bad file descriptor) [pid 473] close(24) = -1 EBADF (Bad file descriptor) [pid 473] close(25) = -1 EBADF (Bad file descriptor) [pid 473] close(26) = -1 EBADF (Bad file descriptor) [pid 473] close(27) = -1 EBADF (Bad file descriptor) [pid 473] close(28) = -1 EBADF (Bad file descriptor) [pid 473] close(29) = -1 EBADF (Bad file descriptor) [pid 473] exit_group(0) = ? [pid 474] <... futex resumed>) = ? [pid 474] +++ exited with 0 +++ [pid 473] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x31\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./51/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./51") = 0 [pid 283] mkdir("./52", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3executing program ) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 106 ./strace-static-x86_64: Process 476 attached [pid 476] set_robust_list(0x5555761396a0, 24) = 0 [pid 476] chdir("./52") = 0 [pid 476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 476] setpgid(0, 0) = 0 [pid 476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 476] write(3, "1000", 4) = 4 [pid 476] close(3) = 0 [pid 476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 476] write(1, "executing program\n", 18) = 18 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 476] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 476] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[107]}, 88) = 107 [pid 476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 477 attached [pid 477] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 477] memfd_create("syzkaller", 0) = 3 [pid 477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 477] munmap(0x7fa992d8a000, 138412032) = 0 [pid 477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 477] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 477] close(3) = 0 [pid 477] close(4) = 0 [pid 477] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 477] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 34.151181][ T477] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.158165][ T477] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 477] ioctl(3, LOOP_CLR_FD) = 0 [pid 477] close(3) = 0 [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 477] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 0 [pid 477] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 0 [pid 477] gettid() = 107 [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x6b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x6b\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 477] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] close(3) = 0 [pid 476] close(4) = 0 [pid 476] close(5) = -1 EBADF (Bad file descriptor) [pid 476] close(6) = -1 EBADF (Bad file descriptor) [pid 476] close(7) = -1 EBADF (Bad file descriptor) [pid 476] close(8) = -1 EBADF (Bad file descriptor) [pid 476] close(9) = -1 EBADF (Bad file descriptor) [pid 476] close(10) = -1 EBADF (Bad file descriptor) [pid 476] close(11) = -1 EBADF (Bad file descriptor) [pid 476] close(12) = -1 EBADF (Bad file descriptor) [pid 476] close(13) = -1 EBADF (Bad file descriptor) [pid 476] close(14) = -1 EBADF (Bad file descriptor) [pid 476] close(15) = -1 EBADF (Bad file descriptor) [pid 476] close(16) = -1 EBADF (Bad file descriptor) [pid 476] close(17) = -1 EBADF (Bad file descriptor) [pid 476] close(18) = -1 EBADF (Bad file descriptor) [pid 476] close(19) = -1 EBADF (Bad file descriptor) [pid 476] close(20) = -1 EBADF (Bad file descriptor) [pid 476] close(21) = -1 EBADF (Bad file descriptor) [pid 476] close(22) = -1 EBADF (Bad file descriptor) [pid 476] close(23) = -1 EBADF (Bad file descriptor) [pid 476] close(24) = -1 EBADF (Bad file descriptor) [pid 476] close(25) = -1 EBADF (Bad file descriptor) [pid 476] close(26) = -1 EBADF (Bad file descriptor) [pid 476] close(27) = -1 EBADF (Bad file descriptor) [pid 476] close(28) = -1 EBADF (Bad file descriptor) [pid 476] close(29) = -1 EBADF (Bad file descriptor) [pid 476] exit_group(0) = ? [pid 477] <... futex resumed>) = ? [pid 477] +++ exited with 0 +++ [pid 476] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=106, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x32\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./52/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./52") = 0 [pid 283] mkdir("./53", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 108 ./strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x5555761396a0, 24) = 0 [pid 479] chdir("./53") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 479] write(1, "executing program\n", 18executing program ) = 18 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 479] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[109]}, 88) = 109 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] memfd_create("syzkaller", 0) = 3 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 480] munmap(0x7fa992d8a000, 138412032) = 0 [pid 480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 480] close(3) = 0 [pid 480] close(4) = 0 [pid 480] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 480] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 34.285635][ T480] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.293816][ T480] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 480] ioctl(3, LOOP_CLR_FD) = 0 [pid 480] close(3) = 0 [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 480] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 0 [pid 480] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 480] gettid( [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... gettid resumed>) = 109 [pid 479] <... futex resumed>) = 0 [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 480] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x6d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 480] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x6d\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 479] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] <... sendmsg resumed>) = 40 [pid 479] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 480] <... futex resumed>) = 0 [pid 479] close(3 [pid 480] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] <... close resumed>) = 0 [pid 479] close(4) = 0 [pid 479] close(5) = -1 EBADF (Bad file descriptor) [pid 479] close(6) = -1 EBADF (Bad file descriptor) [pid 479] close(7) = -1 EBADF (Bad file descriptor) [pid 479] close(8) = -1 EBADF (Bad file descriptor) [pid 479] close(9) = -1 EBADF (Bad file descriptor) [pid 479] close(10) = -1 EBADF (Bad file descriptor) [pid 479] close(11) = -1 EBADF (Bad file descriptor) [pid 479] close(12) = -1 EBADF (Bad file descriptor) [pid 479] close(13) = -1 EBADF (Bad file descriptor) [pid 479] close(14) = -1 EBADF (Bad file descriptor) [pid 479] close(15) = -1 EBADF (Bad file descriptor) [pid 479] close(16) = -1 EBADF (Bad file descriptor) [pid 479] close(17) = -1 EBADF (Bad file descriptor) [pid 479] close(18) = -1 EBADF (Bad file descriptor) [pid 479] close(19) = -1 EBADF (Bad file descriptor) [pid 479] close(20) = -1 EBADF (Bad file descriptor) [pid 479] close(21) = -1 EBADF (Bad file descriptor) [pid 479] close(22) = -1 EBADF (Bad file descriptor) [pid 479] close(23) = -1 EBADF (Bad file descriptor) [pid 479] close(24) = -1 EBADF (Bad file descriptor) [pid 479] close(25) = -1 EBADF (Bad file descriptor) [pid 479] close(26) = -1 EBADF (Bad file descriptor) [pid 479] close(27) = -1 EBADF (Bad file descriptor) [pid 479] close(28) = -1 EBADF (Bad file descriptor) [pid 479] close(29) = -1 EBADF (Bad file descriptor) [pid 479] exit_group(0) = ? [pid 480] <... futex resumed>) = ? [pid 480] +++ exited with 0 +++ [pid 479] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x33\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./53/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./53") = 0 [pid 283] mkdir("./54", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 110 ./strace-static-x86_64: Process 482 attached [pid 482] set_robust_list(0x5555761396a0, 24) = 0 [pid 482] chdir("./54") = 0 [pid 482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 482] setpgid(0, 0) = 0 [pid 482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 482] write(3, "1000", 4) = 4 [pid 482] close(3) = 0 [pid 482] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 482] write(1, "executing program\n", 18) = 18 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 482] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0} => {parent_tid=[111]}, 88) = 111 [pid 482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] memfd_create("syzkaller", 0) = 3 [pid 483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 483] munmap(0x7fa992d8a000, 138412032) = 0 [pid 483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 483] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 483] close(3) = 0 [pid 483] close(4) = 0 [pid 483] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 483] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 483] ioctl(3, LOOP_CLR_FD) = 0 [pid 483] close(3) = 0 [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] gettid() = 111 [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x6f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] <... futex resumed>) = 1 [pid 483] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x6f\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 482] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] close(3) = 0 [pid 482] close(4) = 0 [pid 482] close(5) = -1 EBADF (Bad file descriptor) [pid 482] close(6) = -1 EBADF (Bad file descriptor) [pid 482] close(7) = -1 EBADF (Bad file descriptor) [pid 482] close(8) = -1 EBADF (Bad file descriptor) [pid 482] close(9) = -1 EBADF (Bad file descriptor) [pid 482] close(10) = -1 EBADF (Bad file descriptor) [pid 482] close(11) = -1 EBADF (Bad file descriptor) [pid 482] close(12) = -1 EBADF (Bad file descriptor) [pid 482] close(13) = -1 EBADF (Bad file descriptor) [pid 482] close(14) = -1 EBADF (Bad file descriptor) [pid 482] close(15) = -1 EBADF (Bad file descriptor) [pid 482] close(16) = -1 EBADF (Bad file descriptor) [pid 482] close(17) = -1 EBADF (Bad file descriptor) [pid 482] close(18) = -1 EBADF (Bad file descriptor) [pid 482] close(19) = -1 EBADF (Bad file descriptor) [pid 482] close(20) = -1 EBADF (Bad file descriptor) [pid 482] close(21) = -1 EBADF (Bad file descriptor) [pid 482] close(22) = -1 EBADF (Bad file descriptor) [pid 482] close(23) = -1 EBADF (Bad file descriptor) [pid 482] close(24) = -1 EBADF (Bad file descriptor) [pid 482] close(25) = -1 EBADF (Bad file descriptor) [pid 482] close(26) = -1 EBADF (Bad file descriptor) [pid 482] close(27) = -1 EBADF (Bad file descriptor) [pid 482] close(28) = -1 EBADF (Bad file descriptor) [pid 482] close(29) = -1 EBADF (Bad file descriptor) [pid 482] exit_group(0) = ? [pid 483] <... futex resumed>) = ? [pid 483] +++ exited with 0 +++ [pid 482] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x34\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./54/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./54") = 0 [pid 283] mkdir("./55", 0777) = 0 [ 34.503571][ T483] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.510510][ T483] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 112 ./strace-static-x86_64: Process 485 attached [pid 485] set_robust_list(0x5555761396a0, 24) = 0 [pid 485] chdir("./55") = 0 [pid 485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 485] setpgid(0, 0) = 0 [pid 485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 485] write(3, "1000", 4) = 4 [pid 485] close(3) = 0 [pid 485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 485] write(1, "executing program\n", 18executing program ) = 18 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 485] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 486 attached [pid 486] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 486] rt_sigprocmask(SIG_SETMASK, [], [pid 485] <... clone3 resumed> => {parent_tid=[113]}, 88) = 113 [pid 486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 486] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 486] <... futex resumed>) = 0 [pid 486] memfd_create("syzkaller", 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 486] <... memfd_create resumed>) = 3 [pid 486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 486] munmap(0x7fa992d8a000, 138412032) = 0 [pid 486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 486] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 486] close(3) = 0 [pid 486] close(4) = 0 [pid 486] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 34.588357][ T486] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.596129][ T486] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 486] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 486] ioctl(3, LOOP_CLR_FD) = 0 [pid 486] close(3) = 0 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 486] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 0 [pid 486] gettid() = 113 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... futex resumed>) = 1 [pid 486] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x71\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 486] <... futex resumed>) = 1 [pid 485] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x71\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] <... sendmsg resumed>) = 40 [pid 486] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] close(3) = 0 [pid 485] close(4) = 0 [pid 485] close(5) = -1 EBADF (Bad file descriptor) [pid 485] close(6) = -1 EBADF (Bad file descriptor) [pid 486] <... futex resumed>) = 1 [pid 485] close(7 [pid 486] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 485] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 485] close(8) = -1 EBADF (Bad file descriptor) [pid 485] close(9) = -1 EBADF (Bad file descriptor) [pid 485] close(10) = -1 EBADF (Bad file descriptor) [pid 485] close(11) = -1 EBADF (Bad file descriptor) [pid 485] close(12) = -1 EBADF (Bad file descriptor) [pid 485] close(13) = -1 EBADF (Bad file descriptor) [pid 485] close(14) = -1 EBADF (Bad file descriptor) [pid 485] close(15) = -1 EBADF (Bad file descriptor) [pid 485] close(16) = -1 EBADF (Bad file descriptor) [pid 485] close(17) = -1 EBADF (Bad file descriptor) [pid 485] close(18) = -1 EBADF (Bad file descriptor) [pid 485] close(19) = -1 EBADF (Bad file descriptor) [pid 485] close(20) = -1 EBADF (Bad file descriptor) [pid 485] close(21) = -1 EBADF (Bad file descriptor) [pid 485] close(22) = -1 EBADF (Bad file descriptor) [pid 485] close(23) = -1 EBADF (Bad file descriptor) [pid 485] close(24) = -1 EBADF (Bad file descriptor) [pid 485] close(25) = -1 EBADF (Bad file descriptor) [pid 485] close(26) = -1 EBADF (Bad file descriptor) [pid 485] close(27) = -1 EBADF (Bad file descriptor) [pid 485] close(28) = -1 EBADF (Bad file descriptor) [pid 485] close(29) = -1 EBADF (Bad file descriptor) [pid 485] exit_group(0) = ? [pid 486] <... futex resumed>) = ? [pid 486] +++ exited with 0 +++ [pid 485] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=112, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x35\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./55/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./55") = 0 [pid 283] mkdir("./56", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 114 ./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x5555761396a0, 24) = 0 [pid 488] chdir("./56") = 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 488] setpgid(0, 0) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3) = 0 [pid 488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 488] write(1, "executing program\n", 18executing program ) = 18 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 488] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 489 attached => {parent_tid=[115]}, 88) = 115 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] set_robust_list(0x7fa99b1aa9a0, 24) = 0 [pid 489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 489] memfd_create("syzkaller", 0) = 3 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 489] munmap(0x7fa992d8a000, 138412032) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 489] close(3) = 0 [pid 489] close(4) = 0 [pid 489] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 489] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 489] ioctl(3, LOOP_CLR_FD) = 0 [ 34.775939][ T489] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.783171][ T489] EXT4-fs (loop0): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [pid 489] close(3) = 0 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 489] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 489] gettid() = 115 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x73\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x73\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 489] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] close(3) = 0 [pid 488] close(4) = 0 [pid 488] close(5) = -1 EBADF (Bad file descriptor) [pid 488] close(6) = -1 EBADF (Bad file descriptor) [pid 488] close(7) = -1 EBADF (Bad file descriptor) [pid 488] close(8) = -1 EBADF (Bad file descriptor) [pid 488] close(9) = -1 EBADF (Bad file descriptor) [pid 488] close(10) = -1 EBADF (Bad file descriptor) [pid 488] close(11) = -1 EBADF (Bad file descriptor) [pid 488] close(12) = -1 EBADF (Bad file descriptor) [pid 488] close(13) = -1 EBADF (Bad file descriptor) [pid 488] close(14) = -1 EBADF (Bad file descriptor) [pid 488] close(15) = -1 EBADF (Bad file descriptor) [pid 488] close(16) = -1 EBADF (Bad file descriptor) [pid 488] close(17) = -1 EBADF (Bad file descriptor) [pid 488] close(18) = -1 EBADF (Bad file descriptor) [pid 488] close(19) = -1 EBADF (Bad file descriptor) [pid 488] close(20) = -1 EBADF (Bad file descriptor) [pid 488] close(21) = -1 EBADF (Bad file descriptor) [pid 488] close(22) = -1 EBADF (Bad file descriptor) [pid 488] close(23) = -1 EBADF (Bad file descriptor) [pid 488] close(24) = -1 EBADF (Bad file descriptor) [pid 488] close(25) = -1 EBADF (Bad file descriptor) [pid 488] close(26) = -1 EBADF (Bad file descriptor) [pid 488] close(27) = -1 EBADF (Bad file descriptor) [pid 488] close(28) = -1 EBADF (Bad file descriptor) [pid 488] close(29) = -1 EBADF (Bad file descriptor) [pid 488] exit_group(0) = ? [pid 489] <... futex resumed>) = ? [pid 489] +++ exited with 0 +++ [pid 488] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x36\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./56/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./56") = 0 [pid 283] mkdir("./57", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 283] close(3) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576139690) = 116 ./strace-static-x86_64: Process 491 attached [pid 491] set_robust_list(0x5555761396a0, 24) = 0 [pid 491] chdir("./57") = 0 [pid 491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 491] setpgid(0, 0) = 0 [pid 491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 491] write(3, "1000", 4) = 4 [pid 491] close(3) = 0 [pid 491] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 491] write(1, "executing program\n", 18) = 18 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] rt_sigaction(SIGRT_1, {sa_handler=0x7fa99b220a10, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa99b212350}, NULL, 8) = 0 [pid 491] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa99b18a000 [pid 491] mprotect(0x7fa99b18b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 491] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa99b1aa990, parent_tid=0x7fa99b1aa990, exit_signal=0, stack=0x7fa99b18a000, stack_size=0x20300, tls=0x7fa99b1aa6c0}./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x7fa99b1aa9a0, 24 [pid 491] <... clone3 resumed> => {parent_tid=[117]}, 88) = 117 [pid 491] rt_sigprocmask(SIG_SETMASK, [], [pid 492] <... set_robust_list resumed>) = 0 [pid 491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_SETMASK, [], [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 492] memfd_create("syzkaller", 0) = 3 [pid 492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa992d8a000 [pid 492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 492] munmap(0x7fa992d8a000, 138412032) = 0 [pid 492] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 492] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 492] close(3) = 0 [pid 492] close(4) = 0 [pid 492] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [pid 492] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ext4", 0, "inode_readahead_blks=0x0000000008000000,noauto_da_alloc,test_dummy_encryption=v1,mb_optimize_scan=0x"...) = -1 EINVAL (Invalid argument) [pid 492] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 492] ioctl(3, LOOP_CLR_FD) = 0 [pid 492] close(3) = 0 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] ioctl(3, SIOCGIFINDEX, {ifr_name="veth0_vlan"}) = -1 ENODEV (No such device) [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] ioctl(4, SIOCGIFINDEX, {ifr_name="vlan0"}) = -1 ENODEV (No such device) [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] unshare(CLONE_FS|CLONE_SYSVSEM|CLONE_NEWCGROUP|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] futex(0x7fa99b27b728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 0 [pid 492] gettid() = 117 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x75\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] futex(0x7fa99b27b728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7fa99b27b72c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 492] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x6d\x30\x82\x61\x00\x00\x00\x00\x08\x00\x13\x00\x75\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40 [pid 492] futex(0x7fa99b27b72c, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = 0 [pid 491] close(3) = 0 [pid 491] close(4) = 0 [pid 491] close(5) = -1 EBADF (Bad file descriptor) [pid 491] close(6) = -1 EBADF (Bad file descriptor) [pid 491] close(7) = -1 EBADF (Bad file descriptor) [pid 491] close(8) = -1 EBADF (Bad file descriptor) [pid 491] close(9) = -1 EBADF (Bad file descriptor) [pid 491] close(10) = -1 EBADF (Bad file descriptor) [pid 491] close(11) = -1 EBADF (Bad file descriptor) [pid 491] close(12) = -1 EBADF (Bad file descriptor) [pid 491] close(13) = -1 EBADF (Bad file descriptor) [pid 491] close(14) = -1 EBADF (Bad file descriptor) [pid 491] close(15) = -1 EBADF (Bad file descriptor) [pid 491] close(16) = -1 EBADF (Bad file descriptor) [pid 491] close(17) = -1 EBADF (Bad file descriptor) [pid 491] close(18) = -1 EBADF (Bad file descriptor) [pid 491] close(19) = -1 EBADF (Bad file descriptor) [pid 491] close(20) = -1 EBADF (Bad file descriptor) [pid 491] close(21) = -1 EBADF (Bad file descriptor) [pid 491] close(22) = -1 EBADF (Bad file descriptor) [pid 491] close(23) = -1 EBADF (Bad file descriptor) [pid 491] close(24) = -1 EBADF (Bad file descriptor) [pid 491] close(25) = -1 EBADF (Bad file descriptor) [pid 491] close(26) = -1 EBADF (Bad file descriptor) [pid 491] close(27) = -1 EBADF (Bad file descriptor) [pid 491] close(28) = -1 EBADF (Bad file descriptor) [pid 491] close(29) = -1 EBADF (Bad file descriptor) [pid 491] exit_group(0) = ? [pid 492] <... futex resumed>) = ? [pid 492] +++ exited with 0 +++ [pid 491] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x55557613a730 /* 4 entries */, 32768) = 176 [pid 283] umount2("\x2e\x2f\x35\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "\x2e\x2f\x35\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] umount2("\x2e\x2f\x35\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "\x2e\x2f\x35\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 283] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(4, 0x555576142770 /* 2 entries */, 32768) = 48 [pid 283] getdents64(4, 0x555576142770 /* 0 entries */, 32768) = 0 [pid 283] close(4) = 0 [pid 283] rmdir("\x2e\x2f\x35\x37\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0 [pid 283] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./57/binderfs") = 0 [pid 283] getdents64(3, 0x55557613a730 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./57") = 0 [pid 283] mkdir("./58", 0777) = 0 [pid 283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 283] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)