./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor60044382 <...> Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. execve("./syz-executor60044382", ["./syz-executor60044382"], 0x7ffebe1dcdd0 /* 10 vars */) = 0 brk(NULL) = 0x5555574d3000 brk(0x5555574d3d00) = 0x5555574d3d00 arch_prctl(ARCH_SET_FS, 0x5555574d3380) = 0 set_tid_address(0x5555574d3650) = 5065 set_robust_list(0x5555574d3660, 24) = 0 rseq(0x5555574d3ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor60044382", 4096) = 26 getrandom("\x5e\x55\xc0\xad\x43\xf5\x83\x33", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555574d3d00 brk(0x5555574f4d00) = 0x5555574f4d00 brk(0x5555574f5000) = 0x5555574f5000 mprotect(0x7f95460ee000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 [ 123.151479][ T27] audit: type=1400 audit(1701383541.526:83): avc: denied { execmem } for pid=5065 comm="syz-executor600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 [ 123.193682][ T27] audit: type=1400 audit(1701383541.566:84): avc: denied { mounton } for pid=5065 comm="syz-executor600" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 123.217678][ T27] audit: type=1400 audit(1701383541.566:85): avc: denied { mount } for pid=5065 comm="syz-executor600" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 [ 123.267079][ T5065] cgroup: Unknown subsys name 'net' [ 123.278842][ T27] audit: type=1400 audit(1701383541.656:86): avc: denied { unmount } for pid=5065 comm="syz-executor600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 123.501564][ T5065] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 [ 123.671184][ T27] audit: type=1400 audit(1701383542.046:87): avc: denied { mounton } for pid=5065 comm="syz-executor600" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 [ 123.703270][ T27] audit: type=1400 audit(1701383542.046:88): avc: denied { mount } for pid=5065 comm="syz-executor600" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 123.731411][ T27] audit: type=1400 audit(1701383542.106:89): avc: denied { append } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 [ 123.756285][ T27] audit: type=1400 audit(1701383542.106:90): avc: denied { open } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.782711][ T27] audit: type=1400 audit(1701383542.106:91): avc: denied { getattr } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574d3650) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] set_robust_list(0x5555574d3660, 24) = 0 ./strace-static-x86_64: Process 5067 attached [pid 5066] mkdir("./syzkaller.Cnn3VP", 0700 [pid 5067] set_robust_list(0x5555574d3660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x5555574d3650) = 5067 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./syzkaller.gDmiNp", 0700 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] chmod("./syzkaller.Cnn3VP", 0777./strace-static-x86_64: Process 5068 attached [pid 5067] chmod("./syzkaller.gDmiNp", 0777 [pid 5068] set_robust_list(0x5555574d3660, 24) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555574d3650) = 5068 [pid 5068] getrandom( [pid 5067] <... chmod resumed>) = 0 [pid 5066] <... chmod resumed>) = 0 [pid 5068] <... getrandom resumed>"\xe1\xbc\x8f\xfd\x9e\xa0\xa9\xfd", 8, GRND_NONBLOCK) = 8 [pid 5066] chdir("./syzkaller.Cnn3VP" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] chdir("./syzkaller.gDmiNp" [pid 5068] getrandom( [pid 5066] <... chdir resumed>) = 0 [pid 5068] <... getrandom resumed>"\x3e\xe2\xa8\x16\xc9\x31\xfb\x51", 8, GRND_NONBLOCK) = 8 [pid 5066] unshare(CLONE_NEWPID [pid 5068] mkdir("./syzkaller.GB1G25", 0700 [pid 5067] <... chdir resumed>) = 0 [pid 5067] unshare(CLONE_NEWPID [pid 5066] <... unshare resumed>) = 0 ./strace-static-x86_64: Process 5069 attached [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... unshare resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] chmod("./syzkaller.GB1G25", 0777./strace-static-x86_64: Process 5070 attached [pid 5065] <... clone resumed>, child_tidptr=0x5555574d3650) = 5069 [pid 5069] set_robust_list(0x5555574d3660, 24 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] set_robust_list(0x5555574d3660, 24 [pid 5068] <... chmod resumed>) = 0 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5070] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5069] <... set_robust_list resumed>) = 0 [pid 5068] chdir("./syzkaller.GB1G25" [pid 5066] <... clone resumed>, child_tidptr=0x5555574d3650) = 5070 ./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x5555574d3660, 24) = 0 [pid 5071] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setsid() = 1 [pid 5071] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5071] unshare(CLONE_NEWNS) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5072 attached [pid 5071] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5070] <... prctl resumed>) = 0 [pid 5069] mkdir("./syzkaller.Khn9iP", 0700 [pid 5068] <... chdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555574d3650) = 5071 [pid 5065] <... clone resumed>, child_tidptr=0x5555574d3650) = 5072 [pid 5072] set_robust_list(0x5555574d3660, 24 [pid 5071] <... mount resumed>) = 0 [pid 5070] setsid( [pid 5069] <... mkdir resumed>) = 0 [pid 5068] unshare(CLONE_NEWPID [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... setsid resumed>) = 1 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5072] mkdir("./syzkaller.V5SISP", 0700 [pid 5071] unshare(CLONE_NEWIPC [pid 5070] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5068] <... unshare resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] chmod("./syzkaller.V5SISP", 0777) = 0 [pid 5071] <... unshare resumed>) = 0 [pid 5072] chdir("./syzkaller.V5SISP"./strace-static-x86_64: Process 5074 attached ./strace-static-x86_64: Process 5073 attached [pid 5071] unshare(CLONE_NEWCGROUP [pid 5070] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5069] chmod("./syzkaller.Khn9iP", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x5555574d3650) = 5073 [pid 5074] set_robust_list(0x5555574d3660, 24 [pid 5073] set_robust_list(0x5555574d3660, 24 [pid 5072] <... chdir resumed>) = 0 [pid 5071] <... unshare resumed>) = 0 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5069] <... chmod resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555574d3650) = 5074 [pid 5074] <... set_robust_list resumed>) = 0 [pid 5072] unshare(CLONE_NEWPID [pid 5071] unshare(CLONE_NEWUTS [pid 5069] chdir("./syzkaller.Khn9iP" [pid 5070] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5074] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] <... unshare resumed>) = 0 [pid 5071] <... unshare resumed>) = 0 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5069] <... chdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5074] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] mkdir("./syzkaller.k4egyW", 0700 [pid 5071] unshare(CLONE_SYSVSEM [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5069] unshare(CLONE_NEWPID [pid 5070] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5069] <... unshare resumed>) = 0 ./strace-static-x86_64: Process 5075 attached [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] set_robust_list(0x5555574d3660, 24 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... unshare resumed>) = 0 [pid 5070] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5072] <... clone resumed>, child_tidptr=0x5555574d3650) = 5075 [pid 5070] <... prlimit64 resumed>NULL) = 0 [pid 5070] unshare(CLONE_NEWNS [pid 5074] <... prctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5070] <... unshare resumed>) = 0 [pid 5075] <... set_robust_list resumed>) = 0 [pid 5074] setsid( [pid 5075] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5074] <... setsid resumed>) = 1 [pid 5074] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, ./strace-static-x86_64: Process 5076 attached [pid 5075] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] set_robust_list(0x5555574d3660, 24 [pid 5070] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5073] chmod("./syzkaller.k4egyW", 0777 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555574d3650) = 5076 [pid 5076] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5074] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5070] unshare(CLONE_NEWIPC [pid 5076] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... prctl resumed>) = 0 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5073] <... chmod resumed>) = 0 [pid 5071] write(3, "16777216", 8 [pid 5075] setsid( [pid 5070] <... unshare resumed>) = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5076] <... prctl resumed>) = 0 [pid 5075] <... setsid resumed>) = 1 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5073] chdir("./syzkaller.k4egyW" [pid 5071] <... write resumed>) = 8 [pid 5070] unshare(CLONE_NEWCGROUP [pid 5076] setsid( [pid 5075] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5074] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5073] <... chdir resumed>) = 0 [pid 5071] close(3 [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5070] <... unshare resumed>) = 0 [pid 5075] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5071] <... close resumed>) = 0 [pid 5070] unshare(CLONE_NEWUTS [pid 5076] <... setsid resumed>) = 1 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [ 123.978922][ T27] audit: type=1400 audit(1701383542.356:92): avc: denied { mounton } for pid=5070 comm="syz-executor600" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [pid 5073] unshare(CLONE_NEWPID [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5070] <... unshare resumed>) = 0 [pid 5076] <... prlimit64 resumed>NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5074] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5076] <... prlimit64 resumed>NULL) = 0 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5074] unshare(CLONE_NEWNS [pid 5076] <... prlimit64 resumed>NULL) = 0 [pid 5074] <... unshare resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5076] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5076] unshare(CLONE_NEWNS [pid 5071] <... openat resumed>) = 3 [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] write(3, "536870912", 9 [pid 5070] unshare(CLONE_SYSVSEM [pid 5075] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5074] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5071] <... write resumed>) = 9 [pid 5070] <... unshare resumed>) = 0 [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5071] close(3 [pid 5075] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5075] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5076] <... unshare resumed>) = 0 [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5074] <... mount resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... openat resumed>) = 3 [pid 5076] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5075] unshare(CLONE_NEWNS./strace-static-x86_64: Process 5077 attached [pid 5077] set_robust_list(0x5555574d3660, 24 [pid 5075] <... unshare resumed>) = 0 [pid 5074] unshare(CLONE_NEWIPC [pid 5071] write(3, "1024", 4 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5076] <... mount resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555574d3650) = 5077 [pid 5070] write(3, "16777216", 8 [pid 5076] unshare(CLONE_NEWIPC [pid 5074] <... unshare resumed>) = 0 [pid 5071] <... write resumed>) = 4 [pid 5070] <... write resumed>) = 8 [pid 5076] <... unshare resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5077] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5076] unshare(CLONE_NEWCGROUP [pid 5075] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5074] unshare(CLONE_NEWCGROUP [pid 5071] <... openat resumed>) = 3 [pid 5070] close(3 [pid 5071] write(3, "8192", 4 [pid 5077] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unshare resumed>) = 0 [pid 5075] <... mount resumed>) = 0 [pid 5074] <... unshare resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] unshare(CLONE_NEWUTS [pid 5075] unshare(CLONE_NEWIPC [pid 5077] <... prctl resumed>) = 0 [pid 5076] <... unshare resumed>) = 0 [pid 5074] unshare(CLONE_NEWUTS [pid 5071] <... write resumed>) = 4 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5077] setsid( [pid 5074] <... unshare resumed>) = 0 [pid 5071] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5077] <... setsid resumed>) = 1 [pid 5076] unshare(CLONE_SYSVSEM [pid 5075] <... unshare resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] unshare(CLONE_SYSVSEM [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5070] write(3, "536870912", 9 [pid 5074] <... unshare resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... write resumed>) = 9 [pid 5077] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5076] <... unshare resumed>) = 0 [pid 5075] unshare(CLONE_NEWCGROUP [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5070] close(3 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5077] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5070] <... close resumed>) = 0 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... unshare resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] write(3, "1024", 4 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5077] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5076] write(3, "16777216", 8 [pid 5075] unshare(CLONE_NEWUTS [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5077] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5076] <... write resumed>) = 8 [pid 5075] <... unshare resumed>) = 0 [pid 5074] write(3, "16777216", 8 [pid 5071] <... write resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5075] unshare(CLONE_SYSVSEM [pid 5074] <... write resumed>) = 8 [pid 5071] close(3 [pid 5077] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5076] close(3 [pid 5075] <... unshare resumed>) = 0 [pid 5074] close(3 [pid 5071] <... close resumed>) = 0 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5070] write(3, "1024", 4 [pid 5077] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5071] <... openat resumed>) = 3 [pid 5070] <... write resumed>) = 4 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5070] close(3 [pid 5077] unshare(CLONE_NEWNS [pid 5076] write(3, "536870912", 9 [pid 5071] write(3, "1024", 4 [pid 5076] <... write resumed>) = 9 [pid 5074] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 5075] write(3, "16777216", 8 [pid 5076] close(3 [pid 5075] <... write resumed>) = 8 [pid 5076] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5071] <... write resumed>) = 4 [pid 5071] close(3 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] write(3, "536870912", 9 [pid 5071] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5077] <... unshare resumed>) = 0 [pid 5074] <... write resumed>) = 9 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5074] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5070] write(3, "8192", 4 [pid 5074] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5076] write(3, "1024", 4 [pid 5075] <... close resumed>) = 0 [pid 5074] write(3, "1024", 4 [pid 5071] write(3, "1024 1048576 500 1024", 21 [pid 5070] <... write resumed>) = 4 [pid 5077] <... mount resumed>) = 0 [pid 5076] <... write resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5074] <... write resumed>) = 4 [pid 5071] <... write resumed>) = 21 [pid 5070] close(3 [pid 5077] unshare(CLONE_NEWIPC [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5071] close(3 [pid 5070] <... close resumed>) = 0 [pid 5077] <... unshare resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] write(3, "536870912", 9 [pid 5074] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5077] unshare(CLONE_NEWCGROUP [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5071] getpid( [pid 5077] <... unshare resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... write resumed>) = 9 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5071] <... getpid resumed>) = 1 [pid 5070] <... openat resumed>) = 3 [pid 5077] unshare(CLONE_NEWUTS [pid 5075] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5071] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5077] <... unshare resumed>) = 0 [pid 5076] write(3, "8192", 4 [pid 5075] <... close resumed>) = 0 [pid 5071] <... capget resumed>{effective=1< [pid 5076] <... write resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5074] write(3, "8192", 4 [pid 5071] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5070] write(3, "1024", 4 [pid 5077] <... unshare resumed>) = 0 [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... write resumed>) = 4 [pid 5071] <... capset resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5071] unshare(CLONE_NEWNET [pid 5077] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5075] write(3, "1024", 4 [pid 5074] close(3 [pid 5070] close(3 [pid 5077] write(3, "16777216", 8 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... write resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5077] <... write resumed>) = 8 [pid 5075] close(3 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] write(3, "1024", 4 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5076] <... write resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5070] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5070] write(3, "1024", 4 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5077] write(3, "536870912", 9 [pid 5076] <... openat resumed>) = 3 [pid 5075] write(3, "8192", 4 [pid 5074] <... openat resumed>) = 3 [pid 5070] <... write resumed>) = 4 [pid 5077] <... write resumed>) = 9 [pid 5070] close(3 [pid 5077] close(3 [pid 5076] write(3, "1024", 4 [pid 5075] <... write resumed>) = 4 [pid 5070] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... write resumed>) = 4 [pid 5075] close(3 [pid 5074] write(3, "1024", 4 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5074] <... write resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5070] write(3, "1024 1048576 500 1024", 21 [pid 5074] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5070] <... write resumed>) = 21 [pid 5077] write(3, "1024", 4 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5070] close(3 [pid 5077] <... write resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5077] close(3) = 0 [pid 5075] write(3, "1024", 4 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5076] write(3, "1024 1048576 500 1024", 21 [pid 5074] write(3, "1024", 4 [pid 5070] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... write resumed>) = 21 [pid 5075] <... write resumed>) = 4 [pid 5074] <... write resumed>) = 4 [pid 5070] getpid( [pid 5076] close(3 [pid 5075] close(3 [pid 5074] close(3 [pid 5070] <... getpid resumed>) = 1 [pid 5074] <... close resumed>) = 0 [pid 5070] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5077] write(3, "8192", 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5070] <... capget resumed>{effective=1<) = 4 [pid 5076] getpid( [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5076] <... getpid resumed>) = 1 [pid 5075] <... openat resumed>) = 3 [pid 5070] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5077] <... close resumed>) = 0 [pid 5076] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5070] <... capset resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5076] <... capget resumed>{effective=1< [pid 5070] unshare(CLONE_NEWNET [pid 5077] <... openat resumed>) = 3 [pid 5076] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5074] <... openat resumed>) = 3 [pid 5076] <... capset resumed>) = 0 [pid 5075] <... write resumed>) = 4 [pid 5077] write(3, "1024", 4 [pid 5076] unshare(CLONE_NEWNET [pid 5075] close(3 [pid 5077] <... write resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] close(3 [pid 5074] write(3, "1024 1048576 500 1024", 21 [pid 5077] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] write(3, "1024", 4 [pid 5074] <... write resumed>) = 21 [pid 5077] <... write resumed>) = 4 [pid 5077] close(3) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] close(3 [pid 5075] write(3, "1024 1048576 500 1024", 21 [pid 5074] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 21 [pid 5074] getpid( [pid 5075] close(3 [pid 5074] <... getpid resumed>) = 1 [pid 5077] write(3, "1024 1048576 500 1024", 21 [pid 5074] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5075] <... close resumed>) = 0 [pid 5074] <... capget resumed>{effective=1<) = 21 [pid 5074] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5077] close(3 [pid 5075] getpid( [pid 5074] <... capset resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... getpid resumed>) = 1 [pid 5074] unshare(CLONE_NEWNET [pid 5077] getpid( [pid 5075] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5077] <... getpid resumed>) = 1 [pid 5075] <... capget resumed>{effective=1< [pid 5075] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5077] <... capget resumed>{effective=1<) = 0 [pid 5077] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5075] unshare(CLONE_NEWNET [pid 5077] <... capset resumed>) = 0 [pid 5077] unshare(CLONE_NEWNET [pid 5071] <... unshare resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "0 65535", 7) = 7 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/dev/rfkill", O_RDWR) = 3 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8) = 8 [pid 5071] close(3) = 0 [pid 5071] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5071] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5071] recvfrom(3, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2a\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5071] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5071] recvfrom(3, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5077] <... unshare resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] write(3, "0 65535", 7 [pid 5071] recvfrom(3, [pid 5077] <... write resumed>) = 7 [pid 5077] close(3 [pid 5071] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] <... close resumed>) = 0 [pid 5071] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] openat(AT_FDCWD, "/dev/rfkill", O_RDWR) = 3 [pid 5077] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8) = 8 [pid 5077] close(3) = 0 [pid 5077] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5077] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... unshare resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5076] <... unshare resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] write(3, "0 65535", 7 [pid 5076] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] <... write resumed>) = 7 [pid 5074] close(3) = 0 [pid 5076] write(3, "0 65535", 7 [pid 5075] <... unshare resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/rfkill", O_RDWR [pid 5076] <... write resumed>) = 7 [pid 5076] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/rfkill", O_RDWR) = 3 [pid 5075] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5074] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8 [pid 5075] <... openat resumed>) = 3 [pid 5076] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8 [pid 5074] <... write resumed>) = 8 [pid 5070] <... unshare resumed>) = 0 [pid 5076] <... write resumed>) = 8 [pid 5074] close(3 [pid 5076] close(3 [pid 5074] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] write(3, "0 65535", 7 [pid 5074] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5075] <... write resumed>) = 7 [pid 5074] <... socket resumed>) = 3 [pid 5070] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5076] <... socket resumed>) = 3 [pid 5075] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5076] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] openat(AT_FDCWD, "/dev/rfkill", O_RDWR [pid 5074] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] <... sendto resumed>) = 40 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... sendto resumed>) = 36 [pid 5070] write(3, "0 65535", 7 [pid 5077] <... sendto resumed>) = 40 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8 [pid 5071] recvfrom(3, [pid 5076] recvfrom(3, [pid 5070] <... write resumed>) = 7 [pid 5076] <... recvfrom resumed>[{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2a\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5071] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=2, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5077] recvfrom(3, [pid 5076] recvfrom(3, [pid 5075] <... write resumed>) = 8 [pid 5074] <... sendto resumed>) = 40 [pid 5070] close(3 [pid 5077] <... recvfrom resumed>[{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2a\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5075] close(3 [pid 5077] recvfrom(3, [pid 5076] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] recvfrom(3, [pid 5071] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5070] <... close resumed>) = 0 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/rfkill", O_RDWR [pid 5077] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5074] <... recvfrom resumed>[{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2a\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5071] <... socket resumed>) = 4 [pid 5077] <... sendto resumed>) = 32 [pid 5076] <... sendto resumed>) = 32 [pid 5075] <... socket resumed>) = 3 [pid 5074] recvfrom(3, [pid 5070] <... openat resumed>) = 3 [pid 5071] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5077] recvfrom(3, [pid 5076] recvfrom(3, [pid 5075] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8 [pid 5077] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5076] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5075] <... sendto resumed>) = 40 [pid 5074] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] recvfrom(3, [pid 5076] recvfrom(3, [pid 5075] recvfrom(3, [pid 5071] close(4 [pid 5070] <... write resumed>) = 8 [pid 5076] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] <... recvfrom resumed>[{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2a\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5070] close(3 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] recvfrom(3, [pid 5074] <... sendto resumed>) = 32 [pid 5071] <... close resumed>) = 0 [pid 5077] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5070] <... close resumed>) = 0 [pid 5071] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] recvfrom(3, [pid 5070] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5075] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5070] <... socket resumed>) = 3 [pid 5071] <... sendto resumed>) = 36 [pid 5074] recvfrom(3, [pid 5071] recvfrom(3, [pid 5070] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 [pid 5076] <... sendto resumed>) = 36 [pid 5076] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=3, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5076] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5071] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0" [pid 5076] <... socket resumed>) = 4 [pid 5076] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0 [pid 5071] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5071] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5076] close(4) = 0 [pid 5076] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] <... ioctl resumed>) = 0 [pid 5071] close(4 [pid 5076] <... sendto resumed>) = 36 [pid 5071] <... close resumed>) = 0 [pid 5071] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 [pid 5076] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5076] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5077] <... sendto resumed>) = 36 [pid 5075] <... sendto resumed>) = 32 [pid 5071] <... sendto resumed>) = 64 [pid 5070] <... sendto resumed>) = 40 [pid 5077] recvfrom(3, [pid 5075] recvfrom(3, [pid 5071] recvfrom(3, [pid 5070] recvfrom(3, [pid 5077] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=4, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5075] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5071] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] recvfrom(3, [pid 5070] <... recvfrom resumed>[{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2a\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5077] <... socket resumed>) = 4 [pid 5076] close(4 [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5070] recvfrom(3, [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5076] <... close resumed>) = 0 [pid 5075] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5076] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [ 125.006878][ T939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.025290][ T939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5070] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] close(4 [pid 5076] <... sendto resumed>) = 64 [pid 5076] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5070] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... close resumed>) = 0 [pid 5077] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... sendto resumed>) = 36 [pid 5074] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=5, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5077] <... sendto resumed>) = 36 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [ 125.059757][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.077501][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5077] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 [pid 5074] close(4 [pid 5077] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5074] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... ioctl resumed>) = 0 [pid 5071] <... sendto resumed>) = 36 [pid 5077] close(4 [pid 5071] recvfrom(3, [pid 5077] <... close resumed>) = 0 [pid 5071] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=6, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5077] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5074] <... sendto resumed>) = 36 [pid 5071] <... socket resumed>) = 4 [pid 5077] <... sendto resumed>) = 64 [pid 5074] recvfrom(3, [pid 5071] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5077] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5074] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5071] close(4 [pid 5074] <... socket resumed>) = 4 [pid 5074] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0" [pid 5071] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5071] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] <... sendto resumed>) = 36 [pid 5074] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5075] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=7, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [ 125.193481][ T939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.203156][ T939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5074] close(4) = 0 [pid 5074] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5071] <... sendto resumed>) = 36 [pid 5075] close(4 [pid 5071] recvfrom(3, [pid 5075] <... close resumed>) = 0 [pid 5071] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5074] <... sendto resumed>) = 64 [pid 5071] <... socket resumed>) = 4 [pid 5074] recvfrom(3, [pid 5071] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1" [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5074] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] <... sendto resumed>) = 36 [pid 5075] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5075] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 [pid 5075] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5071] close(4 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] close(4 [ 125.267607][ T939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.289655][ T939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5071] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] <... sendto resumed>) = 36 [pid 5075] <... close resumed>) = 0 [pid 5071] <... sendto resumed>) = 64 [pid 5070] <... sendto resumed>) = 32 [pid 5071] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] recvfrom(3, [ 125.332945][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.341588][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5075] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5070] recvfrom(3, [pid 5076] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=8, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5075] <... sendto resumed>) = 64 [pid 5071] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5075] recvfrom(3, [pid 5070] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5076] <... socket resumed>) = 4 [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] <... socket resumed>) = 4 [pid 5076] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5075] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5070] recvfrom(3, [pid 5077] <... sendto resumed>) = 36 [pid 5076] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5071] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5070] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 125.378784][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.394600][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5077] recvfrom(3, [pid 5076] close(4 [pid 5071] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5070] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=9, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5076] <... close resumed>) = 0 [pid 5071] close(4 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... socket resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5077] close(4) = 0 [pid 5071] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5077] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] <... socket resumed>) = 4 [pid 5071] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... sendto resumed>) = 36 [pid 5074] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=10, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5076] <... sendto resumed>) = 36 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] recvfrom(3, [pid 5074] <... socket resumed>) = 4 [pid 5076] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5076] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5074] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5076] <... socket resumed>) = 4 [pid 5074] close(4 [pid 5076] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1" [pid 5074] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5076] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5077] <... sendto resumed>) = 36 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] recvfrom(3, [pid 5076] close(4 [pid 5071] <... sendto resumed>) = 32 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] <... close resumed>) = 0 [pid 5077] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5076] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] recvfrom(4, [pid 5077] <... socket resumed>) = 4 [pid 5077] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1" [pid 5071] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5077] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5077] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5071] close(4 [pid 5077] close(4) = 0 [pid 5076] <... sendto resumed>) = 64 [pid 5071] <... close resumed>) = 0 [pid 5077] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] recvfrom(3, [pid 5074] <... sendto resumed>) = 36 [pid 5071] <... socket resumed>) = 4 [pid 5071] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5074] recvfrom(3, [pid 5076] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5076] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5071] close(4 [pid 5074] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5077] <... sendto resumed>) = 64 [pid 5076] <... socket resumed>) = 4 [pid 5074] <... socket resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5077] recvfrom(3, [pid 5076] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5075] <... sendto resumed>) = 36 [pid 5074] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1" [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] recvfrom(3, [pid 5074] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] close(4 [pid 5074] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5077] <... socket resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=11, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5074] close(4 [pid 5071] <... socket resumed>) = 4 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] <... socket resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5071] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] close(4 [pid 5076] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5074] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [ 125.553811][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.565299][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.588054][ T939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [pid 5077] <... close resumed>) = 0 [pid 5076] <... socket resumed>) = 4 [pid 5075] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5076] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] close(4) = 0 [pid 5075] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5077] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] <... sendto resumed>) = 32 [pid 5074] <... sendto resumed>) = 64 [pid 5071] recvfrom(4, [pid 5074] recvfrom(3, [pid 5071] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5076] <... sendto resumed>) = 32 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] recvfrom(4, [pid 5071] close(4 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5074] <... socket resumed>) = 4 [pid 5071] <... close resumed>) = 0 [ 125.631815][ T939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.658713][ T939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [pid 5076] close(4 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5071] close(3 [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] close(4 [pid 5071] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] mkdir("/dev/binderfs", 0777 [pid 5076] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5070] <... sendto resumed>) = 36 [pid 5076] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5074] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5071] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5076] <... socket resumed>) = 4 [pid 5074] <... socket resumed>) = 4 [pid 5070] recvfrom(3, [pid 5074] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5070] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=12, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5076] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5071] <... mount resumed>) = 0 [pid 5076] close(4 [pid 5070] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... sendto resumed>) = 36 [pid 5071] getpid( [pid 5070] <... socket resumed>) = 4 [pid 5075] recvfrom(3, [pid 5071] <... getpid resumed>) = 1 [pid 5070] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [ 125.685524][ T939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5071] mkdir("/syzcgroup/unified/syz1", 0777 [pid 5070] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] <... sendto resumed>) = 32 [pid 5075] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5074] <... sendto resumed>) = 32 [pid 5071] <... mkdir resumed>) = 0 [pid 5070] close(4 [pid 5076] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5075] <... socket resumed>) = 4 [pid 5074] recvfrom(4, [{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5076] <... socket resumed>) = 4 [pid 5074] close(4) = 0 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5075] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1" [pid 5074] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5070] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5074] close(4 [pid 5070] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] recvfrom(4, [pid 5076] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5074] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC [pid 5077] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5076] <... sendto resumed>) = 32 [pid 5075] <... ioctl resumed>) = 0 [pid 5070] <... sendto resumed>) = 36 [pid 5077] close(4 [pid 5076] recvfrom(4, [pid 5075] close(4 [pid 5071] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5075] <... close resumed>) = 0 [pid 5070] recvfrom(3, [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5076] close(4 [pid 5075] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5071] write(3, "32", 2 [pid 5070] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] <... socket resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] <... socket resumed>) = 4 [pid 5071] <... write resumed>) = 2 [pid 5070] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5076] close(3 [pid 5077] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5076] <... close resumed>) = 0 [pid 5070] <... socket resumed>) = 4 [pid 5077] close(4 [pid 5076] mkdir("/dev/binderfs", 0777 [pid 5077] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5076] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 5070] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0" [pid 5077] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5076] getpid( [pid 5070] <... ioctl resumed>, ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5077] <... socket resumed>) = 4 [pid 5076] <... getpid resumed>) = 1 [pid 5077] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] mkdir("/syzcgroup/unified/syz3", 0777 [pid 5077] <... sendto resumed>) = 32 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... sendto resumed>) = 64 [pid 5074] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] close(3 [pid 5070] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5077] recvfrom(4, [pid 5076] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 5070] <... ioctl resumed>) = 0 [pid 5077] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5077] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5075] recvfrom(3, [pid 5074] <... sendto resumed>) = 32 [pid 5071] <... close resumed>) = 0 [pid 5070] close(4 [pid 5077] <... close resumed>) = 0 [pid 5076] write(3, "32", 2 [pid 5070] <... close resumed>) = 0 [pid 5077] close(3 [pid 5076] <... write resumed>) = 2 [pid 5070] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... close resumed>) = 0 [pid 5076] close(3 [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] recvfrom(4, [pid 5071] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5070] <... sendto resumed>) = 64 [pid 5077] mkdir("/dev/binderfs", 0777 [pid 5076] <... close resumed>) = 0 [pid 5070] recvfrom(3, [pid 5077] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5076] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5070] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5076] <... openat resumed>) = 3 [ 125.785538][ T939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.796464][ T939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.816182][ T939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [pid 5070] sendto(3, [{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... mount resumed>) = 0 [pid 5076] write(3, "1", 1 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5074] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5071] <... openat resumed>) = 3 [pid 5077] getpid( [pid 5075] <... socket resumed>) = 4 [pid 5074] close(4 [pid 5077] <... getpid resumed>) = 1 [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5074] <... close resumed>) = 0 [pid 5071] write(3, "1", 1 [pid 5075] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] close(3 [pid 5077] mkdir("/syzcgroup/unified/syz5", 0777 [pid 5075] close(4 [pid 5074] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5074] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... mount resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/syzcgroup/unified/syz5/pids.max", O_WRONLY|O_CLOEXEC [pid 5076] <... write resumed>) = 1 [pid 5075] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5071] <... write resumed>) = 1 [pid 5076] close(3 [pid 5075] <... socket resumed>) = 4 [pid 5071] close(3 [pid 5075] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... sendto resumed>) = 32 [pid 5074] getpid( [pid 5071] <... close resumed>) = 0 [pid 5076] mkdir("/syzcgroup/cpu/syz3", 0777 [ 125.834055][ T939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5075] recvfrom(4, [pid 5074] <... getpid resumed>) = 1 [pid 5075] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5074] mkdir("/syzcgroup/unified/syz2", 0777 [pid 5077] write(3, "32", 2 [pid 5075] close(4 [pid 5071] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 5077] <... write resumed>) = 2 [pid 5075] <... close resumed>) = 0 [pid 5077] close(3 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... socket resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/syzcgroup/unified/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5077] write(3, "1", 1 [pid 5075] <... close resumed>) = 0 [pid 5075] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5075] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5075] <... sendto resumed>) = 32 [pid 5074] <... mkdir resumed>) = 0 [pid 5075] recvfrom(4, [{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5077] <... write resumed>) = 1 [pid 5076] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5074] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5070] <... sendto resumed>) = 36 [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 5075] close(3 [pid 5070] recvfrom(3, [pid 5077] mkdir("/syzcgroup/cpu/syz5", 0777 [pid 5076] write(3, "1", 1 [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... recvfrom resumed>[{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=13, msg=[{nlmsg_len=36, nlmsg_type=0x2a /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56 [pid 5075] mkdir("/dev/binderfs", 0777 [pid 5074] write(3, "32", 2 [pid 5071] write(3, "1", 1 [pid 5075] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5074] <... write resumed>) = 2 [pid 5070] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5075] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5074] close(3 [pid 5070] <... socket resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5070] close(4 [pid 5075] <... mount resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5074] write(3, "1", 1 [pid 5075] getpid( [pid 5070] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... getpid resumed>) = 1 [pid 5075] mkdir("/syzcgroup/unified/syz4", 0777 [pid 5077] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5076] <... write resumed>) = 1 [pid 5071] <... write resumed>) = 1 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... write resumed>) = 1 [pid 5071] close(3 [pid 5070] <... sendto resumed>) = 36 [pid 5071] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5070] recvfrom(3, [pid 5075] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 5074] close(3 [pid 5070] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] write(3, "1", 1 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5070] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP [pid 5077] <... write resumed>) = 1 [pid 5076] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5075] write(3, "32", 2 [pid 5074] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 5070] <... socket resumed>) = 4 [pid 5077] close(3 [pid 5070] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0 [pid 5070] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST} [pid 5076] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 2 [pid 5077] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5075] close(3) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5071] write(3, "313524224", 9 [pid 5077] <... openat resumed>) = 3 [pid 5076] write(3, "313524224", 9 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... write resumed>) = 9 [pid 5077] write(3, "313524224", 9 [pid 5071] close(3 [pid 5077] <... write resumed>) = 9 [pid 5076] <... write resumed>) = 9 [pid 5071] <... close resumed>) = 0 [pid 5077] close(3 [pid 5076] close(3 [pid 5071] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5075] write(3, "1", 1 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(4) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5075] <... write resumed>) = 1 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] write(3, "314572800", 9 [pid 5070] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5071] <... write resumed>) = 9 [pid 5076] write(3, "314572800", 9 [pid 5071] close(3 [pid 5076] <... write resumed>) = 9 [pid 5071] <... close resumed>) = 0 [pid 5076] close(3 [pid 5071] mkdir("/syzcgroup/net/syz1", 0777 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5077] write(3, "314572800", 9 [pid 5076] mkdir("/syzcgroup/net/syz3", 0777 [pid 5074] write(3, "1", 1 [pid 5070] <... sendto resumed>) = 64 [pid 5075] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 5077] <... write resumed>) = 9 [pid 5074] <... write resumed>) = 1 [pid 5071] <... mkdir resumed>) = 0 [pid 5070] recvfrom(3, [pid 5071] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5076] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5070] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5077] mkdir("/syzcgroup/net/syz5", 0777 [pid 5070] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5071] write(3, "1", 1) = 1 [ 126.038035][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.052431][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [pid 5071] close(3 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] write(3, "1", 1 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5070] <... socket resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5076] <... write resumed>) = 1 [pid 5075] write(3, "1", 1 [pid 5071] mkdir("./0", 0777 [pid 5070] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5074] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5075] <... write resumed>) = 1 [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 5077] openat(AT_FDCWD, "/syzcgroup/net/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5076] mkdir("./0", 0777 [pid 5075] <... close resumed>) = 0 [pid 5074] write(3, "313524224", 9 [pid 5070] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5074] <... write resumed>) = 9 [pid 5070] close(4 [pid 5074] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... close resumed>) = 0 [pid 5077] write(3, "1", 1 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] write(3, "313524224", 9 [pid 5074] <... close resumed>) = 0 [pid 5077] <... write resumed>) = 1 [pid 5075] <... write resumed>) = 9 [pid 5074] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5084 attached [pid 5075] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 2 [pid 5084] set_robust_list(0x5555574d3660, 24 [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5070] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5084] chdir("./0" [pid 5077] close(3 [pid 5074] write(3, "314572800", 9 [pid 5070] <... socket resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... write resumed>) = 9 [pid 5070] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12./strace-static-x86_64: Process 5085 attached [pid 5084] <... chdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] write(3, "314572800", 9 [pid 5074] close(3 [pid 5070] <... sendto resumed>) = 32 [pid 5085] set_robust_list(0x5555574d3660, 24 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] mkdir("./0", 0777 [pid 5076] <... clone resumed>, child_tidptr=0x5555574d3650) = 2 [pid 5075] <... write resumed>) = 9 [pid 5074] <... close resumed>) = 0 [pid 5085] <... set_robust_list resumed>) = 0 [pid 5084] <... prctl resumed>) = 0 [pid 5074] mkdir("/syzcgroup/net/syz2", 0777 [pid 5070] recvfrom(4, [pid 5084] setpgid(0, 0 [pid 5075] close(3 [pid 5070] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5085] chdir("./0" [pid 5084] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 5084] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5077] <... mkdir resumed>) = 0 [pid 5075] mkdir("/syzcgroup/net/syz4", 0777 [pid 5074] <... mkdir resumed>) = 0 [pid 5070] close(4 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... symlink resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... close resumed>) = 0 [pid 5085] <... prctl resumed>) = 0 [pid 5084] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5074] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5070] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5084] <... symlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5070] <... socket resumed>) = 4 [pid 5070] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1" [pid 5085] setpgid(0, 0 [pid 5084] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5075] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 5070] <... ioctl resumed>, ifr_ifindex=12}) = 0 [pid 5070] close(4) = 0 [pid 5084] <... symlink resumed>) = 0 [pid 5070] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5085] <... setpgid resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 5074] write(3, "1", 1 [pid 5070] <... socket resumed>) = 4 [pid 5070] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12./strace-static-x86_64: Process 5086 attached [pid 5085] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5084] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x5555574d3650) = 2 [pid 5075] write(3, "1", 1 [pid 5074] <... write resumed>) = 1 [pid 5070] <... sendto resumed>) = 32 [pid 5086] set_robust_list(0x5555574d3660, 24) = 0 [pid 5085] <... symlink resumed>) = 0 [pid 5084] write(3, "1000", 4 [pid 5075] <... write resumed>) = 1 [pid 5074] close(3 [pid 5070] recvfrom(4, [pid 5085] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5070] <... recvfrom resumed>[{nlmsg_len=1460, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1460 [pid 5086] chdir("./0" [pid 5085] <... symlink resumed>) = 0 [pid 5084] <... write resumed>) = 4 [pid 5075] close(3 [pid 5074] <... close resumed>) = 0 [pid 5070] close(4 [pid 5085] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5086] <... chdir resumed>) = 0 [pid 5084] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] mkdir("./0", 0777 [pid 5070] <... close resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... close resumed>) = 0 [pid 5070] close(3 [pid 5086] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5085] <... symlink resumed>) = 0 [pid 5084] symlink("/dev/binderfs", "./binderfs" [pid 5075] mkdir("./0", 0777 [pid 5070] <... close resumed>) = 0 [pid 5086] <... setpgid resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5084] <... symlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] mkdir("/dev/binderfs", 0777 [pid 5085] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5070] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5087 attached [pid 5086] <... symlink resumed>) = 0 [pid 5085] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] set_robust_list(0x5555574d3660, 24 [pid 5086] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5085] <... openat resumed>) = 3 [pid 5070] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5087] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555574d3650) = 2 [pid 5085] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0./strace-static-x86_64: Process 5088 attached [pid 5087] chdir("./0" [pid 5088] set_robust_list(0x5555574d3660, 24 [pid 5087] <... chdir resumed>) = 0 [pid 5086] <... symlink resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5070] <... mount resumed>) = 0 [pid 5084] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 2 [pid 5070] getpid( [pid 5087] <... prctl resumed>) = 0 [pid 5088] chdir("./0") = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5088] <... prctl resumed>) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5088] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5087] setpgid(0, 0 [pid 5086] <... symlink resumed>) = 0 [pid 5085] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5084] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5070] <... getpid resumed>) = 1 [pid 5087] <... setpgid resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... symlink resumed>) = 0 [pid 5087] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5085] <... socket resumed>) = 4 [pid 5084] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5070] mkdir("/syzcgroup/unified/syz0", 0777 [pid 5088] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5084] <... socket resumed>) = 4 [pid 5070] <... mkdir resumed>) = 0 [pid 5086] <... openat resumed>) = 3 [pid 5070] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 5087] <... symlink resumed>) = 0 [pid 5084] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5086] write(3, "1000", 4 [pid 5084] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5087] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5086] <... write resumed>) = 4 [pid 5088] <... close resumed>) = 0 [pid 5086] close(3 [pid 5084] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... close resumed>) = 0 [pid 5087] <... symlink resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5085] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5084] <... socket resumed>) = 5 [pid 5070] write(3, "32", 2 [pid 5086] <... symlink resumed>) = 0 [pid 5084] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5088] <... symlink resumed>) = 0 [pid 5087] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5085] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5084] <... socket resumed>) = 6 [pid 5088] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5087] <... symlink resumed>) = 0 [pid 5086] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5085] <... socket resumed>) = 5 [pid 5084] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5070] <... write resumed>) = 2 [pid 5088] <... openat resumed>) = 3 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] <... openat resumed>) = 3 [pid 5085] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5088] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5070] close(3 [pid 5088] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5087] <... openat resumed>) = 3 [pid 5086] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5085] <... socket resumed>) = 6 [pid 5084] <... sendto resumed>) = 32 [pid 5070] <... close resumed>) = 0 [pid 5085] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5088] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5087] write(3, "1000", 4 [pid 5086] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5085] <... sendto resumed>) = 32 [pid 5084] recvfrom(6, [pid 5070] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5088] <... socket resumed>) = 4 [pid 5087] <... write resumed>) = 4 [pid 5086] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5084] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5088] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5087] close(3 [pid 5086] <... socket resumed>) = 4 [pid 5085] recvfrom(6, [pid 5084] recvfrom(6, [pid 5070] <... openat resumed>) = 3 [pid 5088] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5087] <... close resumed>) = 0 [pid 5086] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5085] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5084] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5088] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5085] recvfrom(6, [pid 5084] close(6 [pid 5070] write(3, "1", 1 [pid 5087] <... symlink resumed>) = 0 [pid 5086] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5084] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5088] <... socket resumed>) = 5 [pid 5088] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5087] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5086] <... socket resumed>) = 5 [pid 5085] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5084] write(6, "13", 2 [pid 5070] <... write resumed>) = 1 [pid 5088] <... socket resumed>) = 6 [pid 5087] <... openat resumed>) = 3 [pid 5086] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5085] close(6 [pid 5084] <... write resumed>) = 2 [pid 5085] <... close resumed>) = 0 [pid 5084] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5087] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5070] close(3 [pid 5088] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5087] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5086] <... socket resumed>) = 6 [pid 5085] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5084] <... sendmsg resumed>) = 84 [pid 5070] <... close resumed>) = 0 [pid 5088] <... sendto resumed>) = 32 [pid 5087] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5086] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5085] <... openat resumed>) = 6 [pid 5084] close(3 [pid 5070] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 5088] recvfrom(6, [pid 5087] <... socket resumed>) = 4 [pid 5086] <... sendto resumed>) = 32 [pid 5085] write(6, "13", 2 [pid 5084] <... close resumed>) = 0 [pid 5088] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5085] <... write resumed>) = 2 [pid 5087] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5084] close(4 [pid 5087] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5085] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5084] <... close resumed>) = 0 [pid 5088] recvfrom(6, [pid 5087] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5086] recvfrom(6, [pid 5070] <... mkdir resumed>) = 0 [pid 5088] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5086] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5088] close(6 [pid 5086] recvfrom(6, [pid 5070] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5088] <... close resumed>) = 0 [pid 5087] <... socket resumed>) = 5 [ 126.380242][ T5085] FAULT_INJECTION: forcing a failure. [ 126.380242][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 126.401496][ T5085] CPU: 0 PID: 5085 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 126.415514][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 126.428187][ T5085] Call Trace: [ 126.432493][ T5085] [ 126.436537][ T5085] dump_stack_lvl+0x125/0x1b0 [ 126.442419][ T5085] should_fail_ex+0x496/0x5b0 [ 126.447770][ T5085] should_failslab+0x9/0x20 [ 126.453721][ T5085] kmem_cache_alloc_node+0x64/0x4a0 [ 126.460745][ T5085] ? genl_family_rcv_msg_doit+0x24b/0x2e0 [ 126.468764][ T5085] __alloc_skb+0x287/0x330 [ 126.474824][ T5085] ? __napi_build_skb+0x50/0x50 [ 126.480377][ T5085] ? ns_capable+0xd5/0x110 [ 126.486286][ T5085] netlink_ack+0x3bb/0x1380 [ 126.492156][ T5085] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 126.499708][ T5085] ? netlink_sendmsg+0xe40/0xe40 [ 126.506535][ T5085] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 126.514116][ T5085] netlink_rcv_skb+0x345/0x440 [ 126.521119][ T5085] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 126.529837][ T5085] ? netlink_ack+0x1380/0x1380 [ 126.536079][ T5085] ? down_read+0xc9/0x330 [ 126.541547][ T5085] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 126.548940][ T5085] ? netlink_deliver_tap+0x1a0/0xd00 [ 126.556836][ T5085] genl_rcv+0x28/0x40 [ 126.561436][ T5085] netlink_unicast+0x53b/0x810 [ 126.567169][ T5085] ? netlink_attachskb+0x880/0x880 [ 126.574331][ T5085] netlink_sendmsg+0x93c/0xe40 [ 126.581548][ T5085] ? netlink_unicast+0x810/0x810 [ 126.588130][ T5085] ? netlink_unicast+0x810/0x810 [ 126.594188][ T5085] __sock_sendmsg+0xd5/0x180 [ 126.600594][ T5085] ____sys_sendmsg+0x6ac/0x940 [ 126.605868][ T5085] ? copy_msghdr_from_user+0x10b/0x160 [ 126.612982][ T5085] ? kernel_sendmsg+0x50/0x50 [ 126.618777][ T5085] ? hlock_class+0x4e/0x130 [ 126.624555][ T5085] ___sys_sendmsg+0x135/0x1d0 [ 126.633305][ T5085] ? do_recvmmsg+0x740/0x740 [ 126.639101][ T5085] ? recalc_sigpending_tsk+0x187/0x1d0 [ 126.649876][ T5085] ? __fget_light+0x1fc/0x260 [ 126.656175][ T5085] __sys_sendmsg+0x117/0x1e0 [ 126.663258][ T5085] ? __sys_sendmsg_sock+0x30/0x30 [ 126.671667][ T5085] ? ptrace_notify+0xf4/0x130 [ 126.676674][ T5085] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 126.685029][ T5085] do_syscall_64+0x40/0x110 [ 126.690135][ T5085] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 126.698563][ T5085] RIP: 0033:0x7f95460762a9 [ 126.703950][ T5085] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.727088][ T5085] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.738111][ T5085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 126.747879][ T5085] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 126.757895][ T5085] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 126.772092][ T5085] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 [pid 5086] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5084] close(5 [pid 5088] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5070] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 6 [pid 5086] close(6) = 0 [pid 5087] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5070] write(3, "1", 1 [pid 5086] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5086] write(6, "13", 2) = 2 [ 126.781985][ T5085] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000000 [ 126.791716][ T5085] [ 126.810929][ T5088] FAULT_INJECTION: forcing a failure. [ 126.810929][ T5088] name failslab, interval 1, probability 0, space 0, times 0 [ 126.839202][ T5088] CPU: 1 PID: 5088 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 126.853185][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 126.867193][ T5088] Call Trace: [ 126.870572][ T5088] [ 126.874772][ T5088] dump_stack_lvl+0x125/0x1b0 [ 126.881621][ T5088] should_fail_ex+0x496/0x5b0 [ 126.889408][ T5088] should_failslab+0x9/0x20 [ 126.896398][ T5088] kmem_cache_alloc_node+0x64/0x4a0 [ 126.911002][ T5088] __alloc_skb+0x287/0x330 [ 126.921246][ T5088] ? __napi_build_skb+0x50/0x50 [ 126.928675][ T5088] ? mark_held_locks+0x9f/0xe0 [ 126.935123][ T5088] ? do_raw_spin_lock+0x12e/0x2b0 [ 126.946771][ T5088] ? spin_bug+0x1d0/0x1d0 [ 126.955011][ T5088] skb_copy+0x12c/0x2e0 [ 126.964463][ T5088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.971994][ T5088] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 126.982675][ T5088] ? hwsim_virtio_rx_work+0x390/0x390 [ 126.990971][ T5088] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 126.997950][ T5088] mac80211_hwsim_tx+0x7a2/0x25d0 [ 127.005300][ T5088] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 127.012894][ T5088] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 127.023156][ T5088] ? __local_bh_enable_ip+0xa4/0x120 [ 127.030881][ T5088] ieee80211_queue_skb+0x1299/0x1fb0 [ 127.038379][ T5088] ieee80211_tx+0x2e2/0x420 [ 127.045036][ T5088] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 127.051868][ T5088] ? mutex_destroy+0x2a/0x100 [ 127.058045][ T5088] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 127.068493][ T5088] ? ieee80211_skb_resize+0x22a/0x620 [ 127.076135][ T5088] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 127.083220][ T5088] ieee80211_xmit+0x30e/0x3e0 [ 127.089114][ T5088] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 127.097191][ T5088] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 127.107674][ T5088] ieee80211_tx_control_port+0x616/0xe10 [ 127.115396][ T5088] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 127.122402][ T5088] ? netdev_run_todo+0x85b/0x12e0 [ 127.130198][ T5088] ? ref_tracker_alloc+0x2ef/0x5a0 [ 127.136618][ T5088] ? generic_xdp_install+0x4c0/0x4c0 [ 127.144171][ T5088] nl80211_tx_control_port+0x5ad/0xa20 [ 127.150579][ T5088] ? nl80211_put_regdom+0x9b0/0x9b0 [ 127.157404][ T5088] ? nl80211_pre_doit+0x1b0/0xb10 [ 127.163815][ T5088] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 127.170692][ T5088] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 127.183453][ T5088] ? ns_capable+0xd5/0x110 [ 127.190041][ T5088] genl_rcv_msg+0x561/0x800 [ 127.195400][ T5088] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 127.203782][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 127.210622][ T5088] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 127.219397][ T5088] ? nl80211_put_regdom+0x9b0/0x9b0 [ 127.227885][ T5088] ? nl80211_get_power_save+0x480/0x480 [ 127.234099][ T5088] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 127.241969][ T5088] netlink_rcv_skb+0x16b/0x440 [ 127.249041][ T5088] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 127.258682][ T5088] ? netlink_ack+0x1380/0x1380 [ 127.265069][ T5088] ? down_read+0xc9/0x330 [ 127.273212][ T5088] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 127.284252][ T5088] ? netlink_deliver_tap+0x1a0/0xd00 [ 127.291946][ T5088] genl_rcv+0x28/0x40 [ 127.298450][ T5088] netlink_unicast+0x53b/0x810 [ 127.305363][ T5088] ? netlink_attachskb+0x880/0x880 [ 127.312520][ T5088] netlink_sendmsg+0x93c/0xe40 [ 127.319105][ T5088] ? netlink_unicast+0x810/0x810 [ 127.329122][ T5088] ? netlink_unicast+0x810/0x810 [ 127.335495][ T5088] __sock_sendmsg+0xd5/0x180 [ 127.342248][ T5088] ____sys_sendmsg+0x6ac/0x940 [ 127.352641][ T5088] ? copy_msghdr_from_user+0x10b/0x160 [ 127.361225][ T5088] ? kernel_sendmsg+0x50/0x50 [ 127.368687][ T5088] ? hlock_class+0x4e/0x130 [ 127.374528][ T5088] ___sys_sendmsg+0x135/0x1d0 [ 127.380752][ T5088] ? do_recvmmsg+0x740/0x740 [ 127.385737][ T5088] ? recalc_sigpending_tsk+0x187/0x1d0 [ 127.394317][ T5088] ? __fget_light+0x1fc/0x260 [ 127.400611][ T5088] __sys_sendmsg+0x117/0x1e0 [ 127.408450][ T5088] ? __sys_sendmsg_sock+0x30/0x30 [ 127.415795][ T5088] ? ptrace_notify+0xf4/0x130 [ 127.423403][ T5088] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 127.436415][ T5088] do_syscall_64+0x40/0x110 [ 127.446864][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 127.456765][ T5088] RIP: 0033:0x7f95460762a9 [ 127.462195][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 127.488448][ T5088] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.500414][ T5088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 127.514006][ T5088] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 127.526297][ T5088] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [pid 5086] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5088] write(6, "13", 2 [pid 5086] <... sendmsg resumed>) = 84 [pid 5088] <... write resumed>) = 2 [pid 5086] close(3 [pid 5088] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5086] <... close resumed>) = 0 [pid 5087] <... socket resumed>) = 6 [pid 5086] close(4 [pid 5085] <... sendmsg resumed>) = 84 [pid 5084] <... close resumed>) = 0 [pid 5087] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5086] <... close resumed>) = 0 [pid 5085] close(3 [pid 5084] close(6 [pid 5087] <... sendto resumed>) = 32 [pid 5086] close(5 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5087] recvfrom(6, [pid 5084] close(7 [pid 5087] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5086] <... close resumed>) = 0 [pid 5085] close(4 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = 0 [pid 5086] close(6 [pid 5085] close(5 [pid 5084] close(8 [pid 5087] recvfrom(6, [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] close(9 [pid 5087] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5086] close(7 [pid 5085] close(6 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(10 [pid 5086] close(8 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(9 [pid 5085] close(7 [pid 5084] close(11 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(10 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(12) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(8 [pid 5086] close(11 [pid 5084] close(13 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 127.536371][ T5088] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 [ 127.551619][ T5088] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000000 [ 127.565369][ T5088] [pid 5086] close(12 [pid 5087] close(6 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(9 [pid 5084] close(14 [pid 5086] close(13 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(15 [pid 5085] close(10 [pid 5086] close(14 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(11 [pid 5084] close(16 [pid 5086] close(15 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(17 [pid 5086] close(16 [pid 5085] close(12 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(18 [pid 5086] close(17 [pid 5085] close(13 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(19 [pid 5086] close(18 [pid 5085] close(14 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(20 [pid 5088] <... sendmsg resumed>) = 84 [pid 5087] <... close resumed>) = 0 [pid 5086] close(19 [pid 5085] close(15 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(3 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(21 [pid 5088] <... close resumed>) = 0 [pid 5086] close(20 [pid 5085] close(16 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(4 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(21 [pid 5085] close(17 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] <... close resumed>) = 0 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(22 [pid 5085] close(18 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(23 [pid 5085] close(19 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(20 [pid 5086] close(24 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(21 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(25 [pid 5085] close(22 [pid 5088] close(5 [pid 5087] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(22 [pid 5085] close(23 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(26 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(24 [pid 5084] close(23 [pid 5086] close(27 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(25 [pid 5084] close(24 [pid 5088] <... close resumed>) = 0 [pid 5086] close(28 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(6 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(26 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] <... close resumed>) = 0 [pid 5086] close(29 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(7 [pid 5086] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(25 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] close(27 [pid 5088] close(8 [pid 5087] <... openat resumed>) = 6 [pid 5086] exit_group(0 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... exit_group resumed>) = ? [pid 5085] close(28 [pid 5084] close(26 [pid 5088] close(9 [pid 5087] write(6, "13", 2 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] <... write resumed>) = 1 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... write resumed>) = 2 [pid 5086] +++ exited with 0 +++ [pid 5085] close(29 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(10 [pid 5087] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5085] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] close(27 [pid 5070] close(3 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... sendmsg resumed>) = 84 [pid 5085] exit_group(0 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5088] close(11 [pid 5087] close(3 [pid 5085] <... exit_group resumed>) = ? [pid 5084] close(28 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5070] <... close resumed>) = 0 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5087] close(4) = 0 [pid 5088] close(12 [pid 5085] +++ exited with 0 +++ [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] close(5 [pid 5084] close(29 [pid 5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5088] close(13 [pid 5087] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] close(6 [pid 5084] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... openat resumed>) = 3 [pid 5088] close(14 [pid 5087] <... close resumed>) = 0 [pid 5084] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5070] write(3, "313524224", 9 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] close(7 [pid 5084] <... exit_group resumed>) = ? [pid 5077] newfstatat(3, "", [pid 5088] close(15 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... write resumed>) = 9 [pid 5087] close(8 [pid 5077] getdents64(3, [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] close(3 [pid 5088] close(16 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5087] close(9 [pid 5077] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... close resumed>) = 0 [pid 5088] close(17 [pid 5087] close(10 [pid 5077] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5076] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5070] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] close(11 [pid 5077] unlink("./0/cgroup.cpu" [pid 5088] close(18 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... openat resumed>) = 3 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] close(12 [pid 5077] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5071] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] write(3, "314572800", 9 [pid 5088] close(19 [pid 5076] newfstatat(3, "", [pid 5070] <... write resumed>) = 9 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] close(3 [pid 5088] close(20 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... close resumed>) = 0 [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] close(13 [pid 5077] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] mkdir("/syzcgroup/net/syz0", 0777 [pid 5088] close(21 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5087] close(14 [pid 5077] unlink("./0/binderfs" [pid 5071] newfstatat(3, "", [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5088] close(22 [pid 5087] close(15 [pid 5076] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5071] getdents64(3, [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] <... mkdir resumed>) = 0 [pid 5088] close(23 [pid 5087] close(16 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./0/cgroup.cpu" [pid 5071] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] close(24 [pid 5087] close(17 [pid 5077] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5076] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5070] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5088] close(25 [pid 5087] close(18 [pid 5077] unlink("./0/cgroup" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./0/cgroup.cpu" [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5071] <... unlink resumed>) = 0 [pid 5088] close(26 [pid 5087] close(19 [pid 5071] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] close(27 [pid 5087] close(20 [pid 5076] unlink("./0/binderfs" [pid 5071] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5088] close(28 [pid 5087] close(21 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... unlink resumed>) = 0 [pid 5071] unlink("./0/binderfs" [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./0/memory.events", [pid 5076] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5088] close(29 [pid 5087] close(22 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] close(23 [pid 5071] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5088] exit_group(0 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./0/memory.events" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] write(3, "1", 1 [pid 5088] <... exit_group resumed>) = ? [pid 5087] close(24 [pid 5071] unlink("./0/cgroup" [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... unlink resumed>) = 0 [pid 5087] close(25 [pid 5071] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] close(26 [pid 5071] newfstatat(AT_FDCWD, "./0/memory.events", [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5088] +++ exited with 0 +++ [pid 5087] close(27 [pid 5071] unlink("./0/memory.events" [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5076] unlink("./0/cgroup" [pid 5070] <... write resumed>) = 1 [pid 5087] close(28 [pid 5077] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5070] close(3 [pid 5087] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] mkdir("./0", 0777 [pid 5087] close(29) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5087] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... exit_group resumed>) = ? [pid 5075] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./0/cgroup.net" [pid 5076] newfstatat(AT_FDCWD, "./0/memory.events", [pid 5070] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] +++ exited with 0 +++ [pid 5076] unlink("./0/memory.events" [pid 5075] getdents64(3, [pid 5071] unlink("./0/cgroup.net" [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] <... unlink resumed>) = 0 [pid 5075] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5074] <... restart_syscall resumed>) = 0 [pid 5071] close(3./strace-static-x86_64: Process 5089 attached [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 5089] set_robust_list(0x5555574d3660, 24 [pid 5075] unlink("./0/cgroup.cpu" [pid 5071] rmdir("./0" [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5076] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 2 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./0/binderfs") = 0 [pid 5075] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./0/cgroup") = 0 [pid 5074] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] chdir("./0" [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] <... chdir resumed>) = 0 [pid 5077] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... close resumed>) = 0 [pid 5076] unlink("./0/cgroup.net" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./1", 0777 [pid 5089] <... prctl resumed>) = 0 [pid 5077] rmdir("./0" [pid 5076] <... unlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/memory.events", [pid 5074] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5089] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./0/memory.events" [pid 5089] <... setpgid resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5077] mkdir("./1", 0777 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5089] <... symlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5074] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./0/cgroup.net" [pid 5074] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5089] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 5089] <... symlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] unlink("./0/cgroup.cpu"./strace-static-x86_64: Process 5090 attached [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./0" [pid 5074] <... unlink resumed>) = 0 [pid 5090] set_robust_list(0x5555574d3660, 24 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5074] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 3 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./1", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] chdir("./1" [pid 5089] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5090] <... chdir resumed>) = 0 [pid 5075] rmdir("./0" [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5091 attached [pid 5090] <... prctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... rmdir resumed>) = 0 [pid 5074] unlink("./0/binderfs" [pid 5091] set_robust_list(0x5555574d3660, 24 [pid 5090] setpgid(0, 0 [pid 5089] <... symlink resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555574d3650) = 3 [pid 5075] mkdir("./1", 0777 [pid 5074] <... unlink resumed>) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5090] <... setpgid resumed>) = 0 [pid 5091] chdir("./1" [pid 5074] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555574d3650) = 3 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5091] <... prctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5091] setpgid(0, 0) = 0 [pid 5091] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5090] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5092 attached [pid 5090] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./0/cgroup" [pid 5091] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5093 attached [pid 5092] set_robust_list(0x5555574d3660, 24 [pid 5091] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5090] <... symlink resumed>) = 0 [pid 5089] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5093] set_robust_list(0x5555574d3660, 24 [pid 5089] write(3, "1000", 4 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 3 [pid 5074] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] <... set_robust_list resumed>) = 0 [pid 5089] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5093] chdir("./1" [pid 5092] <... set_robust_list resumed>) = 0 [pid 5091] <... symlink resumed>) = 0 [pid 5090] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5089] close(3 [pid 5074] newfstatat(AT_FDCWD, "./0/memory.events", [pid 5093] <... chdir resumed>) = 0 [pid 5092] chdir("./1" [pid 5089] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] <... chdir resumed>) = 0 [pid 5091] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5089] symlink("/dev/binderfs", "./binderfs" [pid 5074] unlink("./0/memory.events" [pid 5093] <... prctl resumed>) = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5091] <... symlink resumed>) = 0 [pid 5090] <... symlink resumed>) = 0 [pid 5089] <... symlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5093] setpgid(0, 0 [pid 5092] <... prctl resumed>) = 0 [pid 5074] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] <... setpgid resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5093] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5092] setpgid(0, 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5089] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5093] <... symlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5093] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5092] <... setpgid resumed>) = 0 [pid 5074] unlink("./0/cgroup.net" [pid 5093] <... symlink resumed>) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5089] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5093] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5091] write(3, "1000", 4 [pid 5074] getdents64(3, [pid 5093] <... symlink resumed>) = 0 [pid 5092] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5090] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./0") = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] mkdir("./1", 0777 [pid 5093] <... openat resumed>) = 3 [pid 5092] <... symlink resumed>) = 0 [pid 5091] <... write resumed>) = 4 [pid 5090] write(3, "1000", 4 [pid 5089] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5093] write(3, "1000", 4 [pid 5092] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5091] close(3 [pid 5090] <... write resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5091] <... close resumed>) = 0 [pid 5090] close(3 [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5090] <... close resumed>) = 0 [pid 5093] <... write resumed>) = 4 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5093] close(3 [pid 5092] <... symlink resumed>) = 0 [pid 5091] <... symlink resumed>) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5093] <... close resumed>) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5094 attached [pid 5092] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5091] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5090] <... symlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555574d3650) = 3 [pid 5094] set_robust_list(0x5555574d3660, 24 [pid 5093] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5090] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5094] chdir("./1") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5093] <... openat resumed>) = 3 [pid 5092] <... symlink resumed>) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5090] <... openat resumed>) = 3 [pid 5094] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5093] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5091] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5090] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5092] <... openat resumed>) = 3 [pid 5094] <... symlink resumed>) = 0 [pid 5092] write(3, "1000", 4 [pid 5091] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5090] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5094] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5092] <... write resumed>) = 4 [pid 5092] close(3) = 0 [pid 5092] symlink("/dev/binderfs", "./binderfs" [pid 5094] <... symlink resumed>) = 0 [pid 5092] <... symlink resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5092] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5090] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5091] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5094] <... openat resumed>) = 3 [pid 5094] write(3, "1000", 4 [pid 5091] <... socket resumed>) = 4 [pid 5090] <... socket resumed>) = 4 [pid 5089] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5094] <... write resumed>) = 4 [pid 5091] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5089] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5094] close(3 [pid 5092] <... openat resumed>) = 3 [pid 5091] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5090] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5089] <... socket resumed>) = 4 [pid 5094] <... close resumed>) = 0 [pid 5091] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5089] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5094] symlink("/dev/binderfs", "./binderfs" [pid 5092] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5091] <... socket resumed>) = 5 [pid 5090] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5089] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5094] <... symlink resumed>) = 0 [pid 5093] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5092] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5091] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5090] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5089] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5091] <... socket resumed>) = 6 [pid 5091] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5090] <... socket resumed>) = 5 [pid 5089] <... socket resumed>) = 5 [pid 5094] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5093] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5092] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5090] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5091] <... sendto resumed>) = 32 [pid 5089] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5094] <... openat resumed>) = 3 [pid 5093] <... socket resumed>) = 4 [pid 5092] <... socket resumed>) = 4 [pid 5091] recvfrom(6, [pid 5090] <... socket resumed>) = 6 [pid 5094] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5093] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5092] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5091] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5090] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5089] <... socket resumed>) = 6 [pid 5094] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5093] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5092] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5091] recvfrom(6, [pid 5094] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5091] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5094] <... socket resumed>) = 4 [pid 5093] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5092] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5091] close(6 [pid 5090] <... sendto resumed>) = 32 [pid 5089] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5094] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5093] <... socket resumed>) = 5 [pid 5092] <... socket resumed>) = 5 [pid 5091] <... close resumed>) = 0 [pid 5090] recvfrom(6, [pid 5094] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5093] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5089] <... sendto resumed>) = 32 [pid 5090] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5094] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5093] <... socket resumed>) = 6 [pid 5092] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5091] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5089] recvfrom(6, [pid 5094] <... socket resumed>) = 5 [pid 5093] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5090] recvfrom(6, [pid 5089] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5094] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5093] <... sendto resumed>) = 32 [pid 5092] <... socket resumed>) = 6 [pid 5091] <... openat resumed>) = 6 [pid 5090] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5089] recvfrom(6, [pid 5094] <... socket resumed>) = 6 [pid 5093] recvfrom(6, [pid 5092] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5091] write(6, "13", 2 [pid 5090] close(6 [pid 5089] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5094] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5093] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5092] <... sendto resumed>) = 32 [pid 5091] <... write resumed>) = 2 [pid 5090] <... close resumed>) = 0 [pid 5089] close(6 [pid 5094] <... sendto resumed>) = 32 [pid 5093] recvfrom(6, [pid 5092] recvfrom(6, [pid 5091] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5090] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5089] <... close resumed>) = 0 [pid 5094] recvfrom(6, [pid 5093] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5092] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5089] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5089] write(6, "13", 2) = 2 [ 128.004237][ T5091] FAULT_INJECTION: forcing a failure. [ 128.004237][ T5091] name failslab, interval 1, probability 0, space 0, times 0 [ 128.016075][ T5089] FAULT_INJECTION: forcing a failure. [ 128.016075][ T5089] name failslab, interval 1, probability 0, space 0, times 0 [ 128.022228][ T5091] CPU: 0 PID: 5091 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [pid 5089] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5094] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5093] close(6 [pid 5092] recvfrom(6, [pid 5090] <... openat resumed>) = 6 [ 128.048181][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 128.058720][ T5091] Call Trace: [ 128.062129][ T5091] [ 128.065259][ T5091] dump_stack_lvl+0x125/0x1b0 [ 128.072183][ T5091] should_fail_ex+0x496/0x5b0 [ 128.077780][ T5091] should_failslab+0x9/0x20 [ 128.082771][ T5091] kmem_cache_alloc_node+0x64/0x4a0 [ 128.088210][ T5091] ? genl_family_rcv_msg_doit+0x24b/0x2e0 [ 128.095231][ T5091] __alloc_skb+0x287/0x330 [ 128.102147][ T5091] ? __napi_build_skb+0x50/0x50 [ 128.108920][ T5091] ? ns_capable+0xd5/0x110 [ 128.113544][ T5091] netlink_ack+0x3bb/0x1380 [ 128.118394][ T5091] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 128.125743][ T5091] ? netlink_sendmsg+0xe40/0xe40 [ 128.132061][ T5091] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 128.139105][ T5091] netlink_rcv_skb+0x345/0x440 [ 128.145349][ T5091] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 128.152364][ T5091] ? netlink_ack+0x1380/0x1380 [ 128.162682][ T5091] ? down_read+0xc9/0x330 [ 128.167582][ T5091] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 128.176163][ T5091] ? netlink_deliver_tap+0x1a0/0xd00 [ 128.181888][ T5091] genl_rcv+0x28/0x40 [ 128.190109][ T5091] netlink_unicast+0x53b/0x810 [ 128.195214][ T5091] ? netlink_attachskb+0x880/0x880 [ 128.200760][ T5091] netlink_sendmsg+0x93c/0xe40 [ 128.206853][ T5091] ? netlink_unicast+0x810/0x810 [ 128.212920][ T5091] ? netlink_unicast+0x810/0x810 [ 128.218009][ T5091] __sock_sendmsg+0xd5/0x180 [ 128.223281][ T5091] ____sys_sendmsg+0x6ac/0x940 [ 128.228984][ T5091] ? copy_msghdr_from_user+0x10b/0x160 [ 128.235128][ T5091] ? kernel_sendmsg+0x50/0x50 [ 128.240992][ T5091] ? hlock_class+0x4e/0x130 [ 128.246587][ T5091] ___sys_sendmsg+0x135/0x1d0 [ 128.253958][ T5091] ? do_recvmmsg+0x740/0x740 [ 128.259409][ T5091] ? recalc_sigpending_tsk+0x187/0x1d0 [ 128.265025][ T5091] ? __fget_light+0x1fc/0x260 [ 128.270098][ T5091] __sys_sendmsg+0x117/0x1e0 [ 128.275006][ T5091] ? __sys_sendmsg_sock+0x30/0x30 [ 128.280551][ T5091] ? ptrace_notify+0xf4/0x130 [ 128.286072][ T5091] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 128.292815][ T5091] do_syscall_64+0x40/0x110 [ 128.299644][ T5091] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 128.306391][ T5091] RIP: 0033:0x7f95460762a9 [ 128.314023][ T5091] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 128.344932][ T5091] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.356517][ T5091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 128.368642][ T5091] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 128.377883][ T5091] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 128.388259][ T5091] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 128.397896][ T5091] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000001 [ 128.407542][ T5091] [ 128.415902][ T5089] CPU: 1 PID: 5089 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 128.429813][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 128.444088][ T5089] Call Trace: [ 128.448649][ T5089] [ 128.452447][ T5089] dump_stack_lvl+0x125/0x1b0 [ 128.457825][ T5089] should_fail_ex+0x496/0x5b0 [ 128.463107][ T5089] should_failslab+0x9/0x20 [ 128.468621][ T5089] kmem_cache_alloc_node+0x64/0x4a0 [ 128.475616][ T5089] ? genl_family_rcv_msg_doit+0x24b/0x2e0 [ 128.482970][ T5089] __alloc_skb+0x287/0x330 [ 128.490425][ T5089] ? __napi_build_skb+0x50/0x50 [ 128.496185][ T5089] ? ns_capable+0xd5/0x110 [ 128.502414][ T5089] netlink_ack+0x3bb/0x1380 [ 128.507207][ T5089] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 128.517848][ T5089] ? netlink_sendmsg+0xe40/0xe40 [ 128.524637][ T5089] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 128.533753][ T5089] netlink_rcv_skb+0x345/0x440 [ 128.539019][ T5089] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 128.547047][ T5089] ? netlink_ack+0x1380/0x1380 [ 128.552174][ T5089] ? down_read+0xc9/0x330 [ 128.558558][ T5089] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 128.567719][ T5089] ? netlink_deliver_tap+0x1a0/0xd00 [ 128.575877][ T5089] genl_rcv+0x28/0x40 [ 128.581156][ T5089] netlink_unicast+0x53b/0x810 [ 128.587872][ T5089] ? netlink_attachskb+0x880/0x880 [ 128.594273][ T5089] netlink_sendmsg+0x93c/0xe40 [ 128.601180][ T5089] ? netlink_unicast+0x810/0x810 [ 128.608630][ T5089] ? netlink_unicast+0x810/0x810 [ 128.614576][ T5089] __sock_sendmsg+0xd5/0x180 [ 128.619345][ T5089] ____sys_sendmsg+0x6ac/0x940 [ 128.624501][ T5089] ? copy_msghdr_from_user+0x10b/0x160 [ 128.630889][ T5089] ? kernel_sendmsg+0x50/0x50 [ 128.636055][ T5089] ? hlock_class+0x4e/0x130 [ 128.641295][ T5089] ___sys_sendmsg+0x135/0x1d0 [ 128.646899][ T5089] ? do_recvmmsg+0x740/0x740 [ 128.651738][ T5089] ? recalc_sigpending_tsk+0x187/0x1d0 [ 128.659302][ T5089] ? __fget_light+0x1fc/0x260 [ 128.664124][ T5089] __sys_sendmsg+0x117/0x1e0 [ 128.670500][ T5089] ? __sys_sendmsg_sock+0x30/0x30 [ 128.676102][ T5089] ? ptrace_notify+0xf4/0x130 [ 128.680842][ T5089] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 128.689542][ T5089] do_syscall_64+0x40/0x110 [ 128.695937][ T5089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 128.702592][ T5089] RIP: 0033:0x7f95460762a9 [ 128.707490][ T5089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 128.730806][ T5089] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.740049][ T5089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 128.752376][ T5089] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [pid 5094] recvfrom(6, [pid 5093] <... close resumed>) = 0 [pid 5092] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5090] write(6, "13", 2 [pid 5091] <... sendmsg resumed>) = 84 [pid 5094] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5093] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5092] close(6 [pid 5090] <... write resumed>) = 2 [pid 5094] close(6 [pid 5091] close(3 [pid 5089] <... sendmsg resumed>) = 84 [pid 5093] <... openat resumed>) = 6 [pid 5091] <... close resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5091] close(4 [pid 5094] <... close resumed>) = 0 [pid 5091] <... close resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5093] write(6, "13", 2 [pid 5092] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5091] close(5 [pid 5090] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5089] close(3 [pid 5094] <... openat resumed>) = 6 [pid 5091] <... close resumed>) = 0 [pid 5091] close(6 [pid 5090] <... sendmsg resumed>) = 84 [pid 5093] <... write resumed>) = 2 [pid 5091] <... close resumed>) = 0 [ 128.763431][ T5089] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 128.773705][ T5089] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 [ 128.784319][ T5089] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000000 [ 128.794265][ T5089] [ 128.838788][ T5093] FAULT_INJECTION: forcing a failure. [ 128.838788][ T5093] name failslab, interval 1, probability 0, space 0, times 0 [ 128.856111][ T5093] CPU: 0 PID: 5093 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 128.868270][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 128.880633][ T5093] Call Trace: [ 128.884645][ T5093] [ 128.889779][ T5093] dump_stack_lvl+0x125/0x1b0 [ 128.895216][ T5093] should_fail_ex+0x496/0x5b0 [ 128.903324][ T5093] should_failslab+0x9/0x20 [ 128.911437][ T5093] kmem_cache_alloc_node+0x64/0x4a0 [ 128.918278][ T5093] __alloc_skb+0x287/0x330 [ 128.923395][ T5093] ? __napi_build_skb+0x50/0x50 [ 128.929957][ T5093] ? mark_held_locks+0x9f/0xe0 [ 128.936138][ T5093] ? do_raw_spin_lock+0x12e/0x2b0 [ 128.942576][ T5093] ? spin_bug+0x1d0/0x1d0 [ 128.947650][ T5093] skb_copy+0x12c/0x2e0 [ 128.953283][ T5093] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.960537][ T5093] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 128.970376][ T5093] ? hwsim_virtio_rx_work+0x390/0x390 [ 128.976347][ T5093] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 128.983256][ T5093] mac80211_hwsim_tx+0x7a2/0x25d0 [ 128.990764][ T5093] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 128.999134][ T5093] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 129.006753][ T5093] ? __local_bh_enable_ip+0xa4/0x120 [ 129.013991][ T5093] ieee80211_queue_skb+0x1299/0x1fb0 [ 129.020470][ T5093] ieee80211_tx+0x2e2/0x420 [ 129.025554][ T5093] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 129.033834][ T5093] ? mutex_destroy+0x2a/0x100 [ 129.039009][ T5093] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 129.045835][ T5093] ? ieee80211_skb_resize+0x22a/0x620 [ 129.053953][ T5093] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 129.061347][ T5093] ieee80211_xmit+0x30e/0x3e0 [ 129.066278][ T5093] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 129.074095][ T5093] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 129.080229][ T5093] ieee80211_tx_control_port+0x616/0xe10 [ 129.086001][ T5093] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 129.095168][ T5093] ? netdev_run_todo+0x85b/0x12e0 [ 129.100883][ T5093] ? ref_tracker_alloc+0x2ef/0x5a0 [ 129.107089][ T5093] ? generic_xdp_install+0x4c0/0x4c0 [ 129.116962][ T5093] nl80211_tx_control_port+0x5ad/0xa20 [ 129.123263][ T5093] ? nl80211_put_regdom+0x9b0/0x9b0 [ 129.131004][ T5093] ? nl80211_pre_doit+0x1b0/0xb10 [ 129.137461][ T5093] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 129.143621][ T5093] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 129.152676][ T5093] ? ns_capable+0xd5/0x110 [ 129.160181][ T5093] genl_rcv_msg+0x561/0x800 [ 129.166034][ T5093] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 129.175053][ T5093] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 129.181280][ T5093] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 129.190385][ T5093] ? nl80211_put_regdom+0x9b0/0x9b0 [ 129.196325][ T5093] ? nl80211_get_power_save+0x480/0x480 [ 129.202991][ T5093] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 129.209574][ T5093] netlink_rcv_skb+0x16b/0x440 [ 129.216849][ T5093] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 129.224842][ T5093] ? netlink_ack+0x1380/0x1380 [ 129.231008][ T5093] ? down_read+0xc9/0x330 [ 129.236345][ T5093] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 129.243622][ T5093] ? netlink_deliver_tap+0x1a0/0xd00 [ 129.249804][ T5093] genl_rcv+0x28/0x40 [ 129.255652][ T5093] netlink_unicast+0x53b/0x810 [ 129.260931][ T5093] ? netlink_attachskb+0x880/0x880 [ 129.266878][ T5093] netlink_sendmsg+0x93c/0xe40 [ 129.273204][ T5093] ? netlink_unicast+0x810/0x810 [ 129.279348][ T5093] ? netlink_unicast+0x810/0x810 [ 129.286015][ T5093] __sock_sendmsg+0xd5/0x180 [ 129.291645][ T5093] ____sys_sendmsg+0x6ac/0x940 [ 129.302094][ T5093] ? copy_msghdr_from_user+0x10b/0x160 [ 129.310325][ T5093] ? kernel_sendmsg+0x50/0x50 [ 129.317965][ T5093] ? hlock_class+0x4e/0x130 [ 129.324156][ T5093] ___sys_sendmsg+0x135/0x1d0 [ 129.335246][ T5093] ? do_recvmmsg+0x740/0x740 [ 129.341179][ T5093] ? recalc_sigpending_tsk+0x187/0x1d0 [ 129.347719][ T5093] ? __fget_light+0x1fc/0x260 [ 129.352701][ T5093] __sys_sendmsg+0x117/0x1e0 [ 129.359716][ T5093] ? __sys_sendmsg_sock+0x30/0x30 [ 129.367395][ T5093] ? ptrace_notify+0xf4/0x130 [ 129.373416][ T5093] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 129.381034][ T5093] do_syscall_64+0x40/0x110 [ 129.388832][ T5093] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 129.395846][ T5093] RIP: 0033:0x7f95460762a9 [ 129.401369][ T5093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 129.428334][ T5093] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.441115][ T5093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 129.454080][ T5093] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 129.463731][ T5093] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 129.473031][ T5093] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 129.482976][ T5093] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000001 [pid 5090] close(3 [pid 5094] write(6, "13", 2 [pid 5093] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5092] <... openat resumed>) = 6 [pid 5091] close(7 [pid 5090] <... close resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5094] <... write resumed>) = 2 [pid 5092] write(6, "13", 2 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(4 [pid 5089] close(4 [pid 5094] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5092] <... write resumed>) = 2 [pid 5091] close(8 [pid 5090] <... close resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5094] <... sendmsg resumed>) = 84 [pid 5093] <... sendmsg resumed>) = 84 [pid 5092] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [ 129.494570][ T5093] [ 129.509346][ T5092] FAULT_INJECTION: forcing a failure. [ 129.509346][ T5092] name failslab, interval 1, probability 0, space 0, times 0 [ 129.524667][ T5092] CPU: 0 PID: 5092 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 129.538225][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 129.550443][ T5092] Call Trace: [ 129.554455][ T5092] [ 129.558040][ T5092] dump_stack_lvl+0x125/0x1b0 [ 129.562927][ T5092] should_fail_ex+0x496/0x5b0 [ 129.570689][ T5092] should_failslab+0x9/0x20 [ 129.575589][ T5092] kmem_cache_alloc_node+0x64/0x4a0 [ 129.581958][ T5092] __alloc_skb+0x287/0x330 [ 129.586720][ T5092] ? __napi_build_skb+0x50/0x50 [ 129.593090][ T5092] ? mark_held_locks+0x9f/0xe0 [ 129.598524][ T5092] ? do_raw_spin_lock+0x12e/0x2b0 [ 129.603897][ T5092] ? spin_bug+0x1d0/0x1d0 [ 129.610118][ T5092] skb_copy+0x12c/0x2e0 [ 129.616038][ T5092] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.623728][ T5092] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 129.633317][ T5092] ? hwsim_virtio_rx_work+0x390/0x390 [ 129.639797][ T5092] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 129.647544][ T5092] mac80211_hwsim_tx+0x7a2/0x25d0 [ 129.654550][ T5092] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 129.661735][ T5092] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 129.674611][ T5092] ? __local_bh_enable_ip+0xa4/0x120 [ 129.682486][ T5092] ieee80211_queue_skb+0x1299/0x1fb0 [ 129.690839][ T5092] ieee80211_tx+0x2e2/0x420 [ 129.695476][ T5092] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 129.703600][ T5092] ? mutex_destroy+0x2a/0x100 [ 129.709824][ T5092] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 129.716055][ T5092] ? ieee80211_skb_resize+0x22a/0x620 [ 129.723133][ T5092] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 129.730209][ T5092] ieee80211_xmit+0x30e/0x3e0 [ 129.735190][ T5092] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 129.743554][ T5092] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 129.752200][ T5092] ieee80211_tx_control_port+0x616/0xe10 [ 129.762451][ T5092] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 129.768490][ T5092] ? netdev_run_todo+0x85b/0x12e0 [ 129.774908][ T5092] ? ref_tracker_alloc+0x2ef/0x5a0 [ 129.781917][ T5092] ? generic_xdp_install+0x4c0/0x4c0 [ 129.788421][ T5092] nl80211_tx_control_port+0x5ad/0xa20 [ 129.795772][ T5092] ? nl80211_put_regdom+0x9b0/0x9b0 [ 129.802005][ T5092] ? nl80211_pre_doit+0x1b0/0xb10 [ 129.807608][ T5092] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 129.814243][ T5092] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 129.822249][ T5092] ? ns_capable+0xd5/0x110 [ 129.828185][ T5092] genl_rcv_msg+0x561/0x800 [ 129.833318][ T5092] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 129.839691][ T5092] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 129.846000][ T5092] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 129.853544][ T5092] ? nl80211_put_regdom+0x9b0/0x9b0 [ 129.858924][ T5092] ? nl80211_get_power_save+0x480/0x480 [ 129.865048][ T5092] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 129.871381][ T5092] netlink_rcv_skb+0x16b/0x440 [ 129.876959][ T5092] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 129.883933][ T5092] ? netlink_ack+0x1380/0x1380 [ 129.889180][ T5092] ? down_read+0xc9/0x330 [ 129.894801][ T5092] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 129.901877][ T5092] ? netlink_deliver_tap+0x1a0/0xd00 [ 129.907830][ T5092] genl_rcv+0x28/0x40 [ 129.913535][ T5092] netlink_unicast+0x53b/0x810 [ 129.920870][ T5092] ? netlink_attachskb+0x880/0x880 [ 129.927843][ T5092] netlink_sendmsg+0x93c/0xe40 [ 129.934900][ T5092] ? netlink_unicast+0x810/0x810 [ 129.941670][ T5092] ? netlink_unicast+0x810/0x810 [ 129.947708][ T5092] __sock_sendmsg+0xd5/0x180 [ 129.954207][ T5092] ____sys_sendmsg+0x6ac/0x940 [ 129.959300][ T5092] ? copy_msghdr_from_user+0x10b/0x160 [ 129.967317][ T5092] ? kernel_sendmsg+0x50/0x50 [ 129.973324][ T5092] ? hlock_class+0x4e/0x130 [ 129.978890][ T5092] ___sys_sendmsg+0x135/0x1d0 [ 129.983962][ T5092] ? do_recvmmsg+0x740/0x740 [ 129.989222][ T5092] ? recalc_sigpending_tsk+0x187/0x1d0 [ 129.995868][ T5092] ? __fget_light+0x1fc/0x260 [ 130.000704][ T5092] __sys_sendmsg+0x117/0x1e0 [ 130.005615][ T5092] ? __sys_sendmsg_sock+0x30/0x30 [ 130.013065][ T5092] ? ptrace_notify+0xf4/0x130 [ 130.018913][ T5092] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 130.025336][ T5092] do_syscall_64+0x40/0x110 [ 130.032560][ T5092] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 130.040698][ T5092] RIP: 0033:0x7f95460762a9 [ 130.048237][ T5092] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 130.074752][ T5092] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.084060][ T5092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(5 [pid 5089] close(5 [pid 5094] close(3 [pid 5093] close(3 [pid 5091] close(9 [pid 5094] <... close resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] <... close resumed>) = 0 [pid 5091] close(10 [pid 5090] <... close resumed>) = 0 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(6 [pid 5091] close(11 [pid 5094] close(4 [pid 5093] close(4 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = 0 [pid 5089] close(6 [pid 5091] close(12 [pid 5090] close(7 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] close(13 [pid 5090] close(8 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5094] <... close resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5091] close(14 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] <... close resumed>) = 0 [pid 5094] close(5 [pid 5093] close(5 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(9 [pid 5089] close(7 [pid 5093] <... close resumed>) = 0 [pid 5091] close(15 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(10 [pid 5091] close(16 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(11 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] close(17 [pid 5090] close(12 [pid 5094] <... close resumed>) = 0 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(8 [pid 5091] close(18 [pid 5090] close(13 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(14 [pid 5091] close(19 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(15 [pid 5094] close(6 [pid 5093] close(6 [pid 5091] close(20 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(9 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(16 [pid 5091] close(21 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(17 [pid 5091] close(22 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(18 [pid 5091] close(23 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(19 [pid 5091] close(24 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(20 [pid 5091] close(25 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(21 [pid 5091] close(26 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] close(27 [pid 5090] close(22) = -1 EBADF (Bad file descriptor) [pid 5090] close(23 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = 0 [pid 5090] close(24 [pid 5089] close(10 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(25 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(26) = -1 EBADF (Bad file descriptor) [pid 5094] <... close resumed>) = 0 [pid 5093] close(7 [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(27 [pid 5089] close(11 [pid 5091] close(28 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(28 [pid 5091] close(29 [pid 5090] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5090] close(29) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] exit_group(0 [pid 5090] exit_group(0 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] <... exit_group resumed>) = ? [pid 5090] <... exit_group resumed>) = ? [ 130.093732][ T5092] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 130.105019][ T5092] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 130.114970][ T5092] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 130.124224][ T5092] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000001 [ 130.133380][ T5092] [pid 5094] close(7 [pid 5093] close(8 [pid 5089] close(12) = -1 EBADF (Bad file descriptor) [pid 5089] close(13) = -1 EBADF (Bad file descriptor) [pid 5089] close(14) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(15 [pid 5093] close(9 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(16 [pid 5091] +++ exited with 0 +++ [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(17) = -1 EBADF (Bad file descriptor) [pid 5089] close(18) = -1 EBADF (Bad file descriptor) [pid 5089] close(19) = -1 EBADF (Bad file descriptor) [pid 5089] close(20) = -1 EBADF (Bad file descriptor) [pid 5089] close(21) = -1 EBADF (Bad file descriptor) [pid 5089] close(22) = -1 EBADF (Bad file descriptor) [pid 5089] close(23) = -1 EBADF (Bad file descriptor) [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(24 [pid 5094] close(8 [pid 5093] close(10 [pid 5090] +++ exited with 0 +++ [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(25 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5093] close(11 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(26 [pid 5093] close(12 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(27 [pid 5094] close(9 [pid 5093] close(13 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5094] close(10 [pid 5093] close(14 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(28 [pid 5093] close(15 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5094] close(11 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] close(29 [pid 5071] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(16 [pid 5089] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] close(12 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5077] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(17 [pid 5089] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5077] newfstatat(3, "", [pid 5071] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5093] close(18 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5094] close(13 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(19 [pid 5071] unlink("./1/cgroup.cpu" [pid 5070] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] close(14 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(20 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] close(15 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(21 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1/binderfs" [pid 5070] newfstatat(3, "", [pid 5094] close(16 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(22 [pid 5077] unlink("./1/cgroup.cpu" [pid 5071] <... unlink resumed>) = 0 [pid 5070] getdents64(3, [pid 5094] close(17 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(23 [pid 5071] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5070] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] close(18 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1/cgroup" [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(24 [pid 5070] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5094] close(19 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... sendmsg resumed>) = 84 [pid 5077] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] close(25 [pid 5092] close(3 [pid 5077] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] close(20 [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./0/cgroup.cpu" [pid 5093] close(26 [pid 5092] close(4 [pid 5077] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5071] newfstatat(AT_FDCWD, "./1/memory.events", [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5094] close(21 [pid 5093] close(27 [pid 5092] close(5 [pid 5077] unlink("./1/binderfs" [pid 5071] unlink("./1/memory.events" [pid 5070] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] close(22 [pid 5093] close(28 [pid 5092] close(6 [pid 5071] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5071] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5094] close(23 [pid 5093] close(29 [pid 5092] close(7 [pid 5077] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./0/binderfs" [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5070] <... unlink resumed>) = 0 [pid 5094] close(24 [pid 5093] exit_group(0 [pid 5092] close(8 [pid 5070] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5093] <... exit_group resumed>) = ? [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] close(25 [pid 5092] close(9 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1/cgroup.net" [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./1/cgroup" [pid 5071] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5071] getdents64(3, [pid 5094] close(26 [pid 5092] close(10 [pid 5077] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] close(3 [pid 5094] close(27 [pid 5092] close(11 [pid 5077] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5070] unlink("./0/cgroup" [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] rmdir("./1" [pid 5094] close(28 [pid 5093] +++ exited with 0 +++ [pid 5092] close(12 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] close(13 [pid 5070] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5092] close(14 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5094] close(29 [pid 5077] newfstatat(AT_FDCWD, "./1/memory.events", [pid 5071] mkdir("./2", 0777 [pid 5094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5092] close(15 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5094] exit_group(0 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./1/memory.events" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] <... exit_group resumed>) = ? [pid 5092] close(16 [pid 5071] <... mkdir resumed>) = 0 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./0/memory.events", [pid 5092] close(17 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] +++ exited with 0 +++ [pid 5092] close(18 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(3, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=63 /* 0.63 s */} --- [pid 5092] close(19 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] unlink("./0/memory.events" [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5092] close(20 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] close(21 [pid 5077] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 4 ./strace-static-x86_64: Process 5095 attached [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5095] set_robust_list(0x5555574d3660, 24 [pid 5092] close(22 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... unlink resumed>) = 0 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./1/cgroup.cpu" [pid 5092] close(23 [pid 5077] unlink("./1/cgroup.net" [pid 5074] <... openat resumed>) = 3 [pid 5070] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] chdir("./2" [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5095] <... chdir resumed>) = 0 [pid 5092] close(24 [pid 5075] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5095] <... prctl resumed>) = 0 [pid 5092] close(25 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] setpgid(0, 0 [pid 5077] getdents64(3, [pid 5092] close(26 [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5095] <... setpgid resumed>) = 0 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] close(3 [pid 5075] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5074] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5095] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5092] close(27 [pid 5077] <... close resumed>) = 0 [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] rmdir("./1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./0/cgroup.net" [pid 5095] <... symlink resumed>) = 0 [pid 5092] close(28 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] unlink("./1/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5070] <... unlink resumed>) = 0 [pid 5095] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] mkdir("./2", 0777 [pid 5095] <... symlink resumed>) = 0 [pid 5092] close(29 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] getdents64(3, [pid 5095] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5092] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./1/cgroup.cpu" [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5092] exit_group(0 [pid 5074] <... unlink resumed>) = 0 [pid 5092] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] +++ exited with 0 +++ [pid 5095] <... symlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5074] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] close(3./strace-static-x86_64: Process 5096 attached [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... close resumed>) = 0 [pid 5096] set_robust_list(0x5555574d3660, 24 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... clone resumed>, child_tidptr=0x5555574d3650) = 4 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] unlink("./1/cgroup" [pid 5074] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5070] rmdir("./0" [pid 5096] <... set_robust_list resumed>) = 0 [pid 5095] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5096] chdir("./2") = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5075] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] write(3, "1000", 4 [pid 5070] mkdir("./1", 0777 [pid 5095] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5096] setpgid(0, 0 [pid 5076] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./1/memory.events", [pid 5070] <... mkdir resumed>) = 0 [pid 5095] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] <... close resumed>) = 0 [pid 5096] <... setpgid resumed>) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5096] symlink("/syzcgroup/unified/syz5", "./cgroup"./strace-static-x86_64: Process 5097 attached [pid 5095] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./1/memory.events" [pid 5074] unlink("./1/binderfs" [pid 5097] set_robust_list(0x5555574d3660, 24 [pid 5096] <... symlink resumed>) = 0 [pid 5095] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5076] <... openat resumed>) = 3 [pid 5096] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5095] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5097] <... set_robust_list resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 3 [pid 5096] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5097] chdir("./1" [pid 5095] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5076] getdents64(3, [pid 5075] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5076] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] <... chdir resumed>) = 0 [pid 5096] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5097] <... prctl resumed>) = 0 [pid 5096] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5097] setpgid(0, 0 [pid 5096] write(3, "1000", 4 [pid 5076] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5075] unlink("./1/cgroup.net" [pid 5074] unlink("./1/cgroup" [pid 5097] <... setpgid resumed>) = 0 [pid 5096] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5076] unlink("./1/cgroup.cpu" [pid 5075] getdents64(3, [pid 5074] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5096] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] <... symlink resumed>) = 0 [pid 5096] <... close resumed>) = 0 [pid 5075] close(3 [pid 5074] newfstatat(AT_FDCWD, "./1/memory.events", [pid 5097] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5096] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./1" [pid 5076] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5097] <... symlink resumed>) = 0 [pid 5096] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] unlink("./1/memory.events" [pid 5097] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5096] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5076] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5075] mkdir("./2", 0777 [pid 5074] <... unlink resumed>) = 0 [pid 5097] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./1/binderfs" [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] write(3, "1000", 4 [pid 5076] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5076] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5097] <... write resumed>) = 4 [pid 5097] close(3) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./1/cgroup.net" [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] unlink("./1/cgroup" [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 4 [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 5076] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5097] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5076] newfstatat(AT_FDCWD, "./1/memory.events", [pid 5074] <... close resumed>) = 0 [pid 5097] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./1" [pid 5097] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5076] unlink("./1/memory.events" [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5098 attached [pid 5076] <... unlink resumed>) = 0 [pid 5098] set_robust_list(0x5555574d3660, 24 [pid 5074] mkdir("./2", 0777 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5096] <... openat resumed>) = 3 [pid 5076] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] chdir("./2" [pid 5096] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5098] <... chdir resumed>) = 0 [pid 5076] unlink("./1/cgroup.net" [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5098] <... prctl resumed>) = 0 [pid 5098] setpgid(0, 0 [pid 5076] <... unlink resumed>) = 0 [pid 5098] <... setpgid resumed>) = 0 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 5099 attached [pid 5098] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5097] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5095] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5099] set_robust_list(0x5555574d3660, 24 [pid 5095] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555574d3650) = 4 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5098] <... symlink resumed>) = 0 [pid 5095] <... socket resumed>) = 4 [pid 5099] chdir("./2" [pid 5095] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5076] close(3 [pid 5097] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5099] <... chdir resumed>) = 0 [pid 5098] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5096] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5095] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5095] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] <... close resumed>) = 0 [pid 5099] <... prctl resumed>) = 0 [pid 5096] <... socket resumed>) = 4 [pid 5095] <... socket resumed>) = 5 [pid 5099] setpgid(0, 0 [pid 5098] <... symlink resumed>) = 0 [pid 5095] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5099] <... setpgid resumed>) = 0 [pid 5097] <... socket resumed>) = 4 [pid 5096] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5095] <... socket resumed>) = 6 [pid 5099] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5098] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5095] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] rmdir("./1" [pid 5099] <... symlink resumed>) = 0 [pid 5098] <... symlink resumed>) = 0 [pid 5097] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5096] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5095] <... sendto resumed>) = 32 [pid 5099] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5096] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5095] recvfrom(6, [pid 5076] <... rmdir resumed>) = 0 [pid 5097] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5076] mkdir("./2", 0777 [pid 5099] <... symlink resumed>) = 0 [pid 5098] <... openat resumed>) = 3 [pid 5096] <... socket resumed>) = 5 [pid 5095] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5099] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5098] write(3, "1000", 4 [pid 5097] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5096] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5095] recvfrom(6, [pid 5076] <... mkdir resumed>) = 0 [pid 5099] <... symlink resumed>) = 0 [pid 5098] <... write resumed>) = 4 [pid 5097] <... socket resumed>) = 5 [pid 5096] <... socket resumed>) = 6 [pid 5095] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5098] close(3 [pid 5097] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5096] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5095] close(6./strace-static-x86_64: Process 5100 attached [pid 5099] <... openat resumed>) = 3 [pid 5098] <... close resumed>) = 0 [pid 5097] <... socket resumed>) = 6 [pid 5096] <... sendto resumed>) = 32 [pid 5095] <... close resumed>) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs" [pid 5097] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5100] set_robust_list(0x5555574d3660, 24 [pid 5099] write(3, "1000", 4 [pid 5098] <... symlink resumed>) = 0 [pid 5096] recvfrom(6, [pid 5095] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x5555574d3650) = 4 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5099] <... write resumed>) = 4 [pid 5098] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5097] <... sendto resumed>) = 32 [pid 5096] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5095] <... openat resumed>) = 6 [pid 5100] chdir("./2" [pid 5099] close(3 [pid 5098] <... openat resumed>) = 3 [pid 5097] recvfrom(6, [pid 5096] recvfrom(6, [pid 5095] write(6, "13", 2 [pid 5100] <... chdir resumed>) = 0 [pid 5099] <... close resumed>) = 0 [pid 5097] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5099] symlink("/dev/binderfs", "./binderfs" [pid 5098] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5097] recvfrom(6, [pid 5096] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5095] <... write resumed>) = 2 [pid 5100] <... prctl resumed>) = 0 [pid 5099] <... symlink resumed>) = 0 [pid 5097] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5096] close(6 [pid 5095] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5100] setpgid(0, 0 [pid 5099] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5097] close(6 [pid 5096] <... close resumed>) = 0 [pid 5095] <... sendmsg resumed>) = 84 [pid 5100] <... setpgid resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5098] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5097] <... close resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5095] close(3 [pid 5100] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5097] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5098] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5096] write(6, "13", 2 [pid 5099] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5098] <... socket resumed>) = 4 [pid 5096] <... write resumed>) = 2 [pid 5095] <... close resumed>) = 0 [pid 5099] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5098] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5097] <... openat resumed>) = 6 [pid 5096] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5098] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5099] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5095] close(4 [pid 5099] <... socket resumed>) = 4 [pid 5095] <... close resumed>) = 0 [pid 5095] close(5 [pid 5099] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0 [pid 5099] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5095] <... close resumed>) = 0 [pid 5099] <... socket resumed>) = 5 [pid 5095] close(6) = 0 [pid 5095] close(7 [pid 5099] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5099] <... socket resumed>) = 6 [ 130.501357][ T5096] FAULT_INJECTION: forcing a failure. [ 130.501357][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 130.515783][ T5096] CPU: 0 PID: 5096 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 130.528503][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 130.540300][ T5096] Call Trace: [ 130.544065][ T5096] [ 130.547033][ T5096] dump_stack_lvl+0x125/0x1b0 [ 130.552980][ T5096] should_fail_ex+0x496/0x5b0 [ 130.559123][ T5096] should_failslab+0x9/0x20 [ 130.564324][ T5096] kmem_cache_alloc_node+0x64/0x4a0 [ 130.571429][ T5096] ? genl_family_rcv_msg_doit+0x24b/0x2e0 [ 130.578598][ T5096] __alloc_skb+0x287/0x330 [ 130.583905][ T5096] ? __napi_build_skb+0x50/0x50 [ 130.592720][ T5096] ? ns_capable+0xd5/0x110 [ 130.597641][ T5096] netlink_ack+0x3bb/0x1380 [ 130.602810][ T5096] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 130.609683][ T5096] ? netlink_sendmsg+0xe40/0xe40 [ 130.616447][ T5096] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 130.623984][ T5096] netlink_rcv_skb+0x345/0x440 [ 130.629615][ T5096] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 130.637235][ T5096] ? netlink_ack+0x1380/0x1380 [ 130.642848][ T5096] ? down_read+0xc9/0x330 [ 130.649683][ T5096] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 130.658530][ T5096] ? netlink_deliver_tap+0x1a0/0xd00 [ 130.665625][ T5096] genl_rcv+0x28/0x40 [ 130.670211][ T5096] netlink_unicast+0x53b/0x810 [ 130.678014][ T5096] ? netlink_attachskb+0x880/0x880 [ 130.684133][ T5096] netlink_sendmsg+0x93c/0xe40 [ 130.689431][ T5096] ? netlink_unicast+0x810/0x810 [ 130.695309][ T5096] ? netlink_unicast+0x810/0x810 [ 130.701057][ T5096] __sock_sendmsg+0xd5/0x180 [ 130.705906][ T5096] ____sys_sendmsg+0x6ac/0x940 [ 130.711249][ T5096] ? copy_msghdr_from_user+0x10b/0x160 [ 130.717291][ T5096] ? kernel_sendmsg+0x50/0x50 [ 130.722848][ T5096] ? hlock_class+0x4e/0x130 [ 130.727571][ T5096] ___sys_sendmsg+0x135/0x1d0 [ 130.732783][ T5096] ? do_recvmmsg+0x740/0x740 [ 130.739627][ T5096] ? recalc_sigpending_tsk+0x187/0x1d0 [ 130.746190][ T5096] ? __fget_light+0x1fc/0x260 [ 130.752268][ T5096] __sys_sendmsg+0x117/0x1e0 [ 130.759437][ T5096] ? __sys_sendmsg_sock+0x30/0x30 [ 130.765731][ T5096] ? ptrace_notify+0xf4/0x130 [ 130.771244][ T5096] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 130.779134][ T5096] do_syscall_64+0x40/0x110 [ 130.784105][ T5096] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 130.792656][ T5096] RIP: 0033:0x7f95460762a9 [ 130.797265][ T5096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 130.818896][ T5096] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.828711][ T5096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 130.838711][ T5096] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [pid 5095] close(8) = -1 EBADF (Bad file descriptor) [pid 5100] <... symlink resumed>) = 0 [pid 5099] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5098] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5097] write(6, "13", 2 [pid 5100] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5099] <... sendto resumed>) = 32 [pid 5097] <... write resumed>) = 2 [pid 5096] <... sendmsg resumed>) = 84 [pid 5095] close(9 [pid 5098] <... socket resumed>) = 5 [pid 5098] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5100] <... symlink resumed>) = 0 [pid 5098] <... socket resumed>) = 6 [pid 5097] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5096] close(3 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5099] recvfrom(6, [pid 5100] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5096] <... close resumed>) = 0 [pid 5095] close(10 [pid 5099] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5100] <... symlink resumed>) = 0 [pid 5096] close(4 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5099] recvfrom(6, [pid 5098] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5097] <... sendmsg resumed>) = 84 [pid 5096] <... close resumed>) = 0 [pid 5100] <... openat resumed>) = 3 [pid 5099] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5095] close(11 [ 130.847986][ T5096] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 130.857714][ T5096] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 130.867020][ T5096] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000002 [ 130.876273][ T5096] [pid 5100] write(3, "1000", 4 [pid 5099] close(6 [pid 5098] <... sendto resumed>) = 32 [pid 5097] close(3 [pid 5096] close(5 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5100] <... write resumed>) = 4 [pid 5098] recvfrom(6, [pid 5097] <... close resumed>) = 0 [pid 5095] close(12 [pid 5098] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5097] close(4 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5100] close(3 [pid 5099] <... close resumed>) = 0 [pid 5098] recvfrom(6, [pid 5096] <... close resumed>) = 0 [pid 5097] <... close resumed>) = 0 [pid 5095] close(13 [pid 5100] <... close resumed>) = 0 [pid 5099] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5098] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5097] close(5 [pid 5096] close(6 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5100] symlink("/dev/binderfs", "./binderfs" [pid 5099] <... openat resumed>) = 6 [pid 5098] close(6 [pid 5097] <... close resumed>) = 0 [pid 5096] <... close resumed>) = 0 [pid 5095] close(14 [pid 5100] <... symlink resumed>) = 0 [pid 5099] write(6, "13", 2 [pid 5098] <... close resumed>) = 0 [pid 5097] close(6 [pid 5096] close(7 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5097] <... close resumed>) = 0 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(15 [pid 5097] close(7 [pid 5096] close(8 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... openat resumed>) = 6 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(16 [pid 5096] close(9 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] write(6, "13", 2 [pid 5097] close(8 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(17 [pid 5098] <... write resumed>) = 2 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] close(10 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5097] close(9 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(18 [pid 5100] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5099] <... write resumed>) = 2 [pid 5098] <... sendmsg resumed>) = 84 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] close(11 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] close(10 [pid 5095] close(19 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(3 [pid 5097] close(11 [pid 5096] close(12 [pid 5095] close(20 [pid 5098] <... close resumed>) = 0 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(4 [pid 5097] close(12 [pid 5096] close(13 [pid 5100] <... openat resumed>) = 3 [pid 5095] close(21 [pid 5099] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5098] <... close resumed>) = 0 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(5 [pid 5097] close(13 [ 130.967837][ T5099] FAULT_INJECTION: forcing a failure. [ 130.967837][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 130.983364][ T5099] CPU: 1 PID: 5099 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 130.997230][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 131.010817][ T5099] Call Trace: [ 131.015074][ T5099] [pid 5095] close(22 [pid 5098] <... close resumed>) = 0 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(23) = -1 EBADF (Bad file descriptor) [pid 5095] close(24) = -1 EBADF (Bad file descriptor) [pid 5095] close(25) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(26 [pid 5098] close(6 [pid 5097] close(14 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = 0 [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(27 [pid 5098] close(7 [pid 5097] close(15 [pid 5096] close(14 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(28 [pid 5098] close(8 [pid 5097] close(16 [pid 5096] close(15 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] close(29 [pid 5098] close(9 [pid 5097] close(17 [pid 5096] close(16 [pid 5095] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] exit_group(0 [pid 5098] close(10 [pid 5097] close(18 [pid 5096] close(17 [pid 5095] <... exit_group resumed>) = ? [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5095] +++ exited with 0 +++ [pid 5098] close(11) = -1 EBADF (Bad file descriptor) [pid 5098] close(12) = -1 EBADF (Bad file descriptor) [pid 5098] close(13 [pid 5096] close(18 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] close(19 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(14 [pid 5097] close(20 [pid 5096] close(19 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(15 [pid 5097] close(21 [pid 5096] close(20 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(16 [pid 5097] close(22 [pid 5096] close(21 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(17 [pid 5097] close(23 [pid 5096] close(22 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(18 [pid 5097] close(24 [pid 5096] close(23 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(19 [pid 5097] close(25 [pid 5096] close(24 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(20 [pid 5097] close(26 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] close(25 [pid 5098] close(21 [pid 5097] close(27 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] close(26 [pid 5071] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5098] close(22 [pid 5097] close(28 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... openat resumed>) = 3 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] close(27 [pid 5098] close(23 [pid 5097] close(29 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] close(28 [pid 5071] newfstatat(3, "", [pid 5098] close(24 [pid 5097] exit_group(0 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] <... exit_group resumed>) = ? [pid 5096] close(29 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5098] close(25 [pid 5096] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] getdents64(3, [pid 5098] close(26 [pid 5096] exit_group(0 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5098] close(27 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5096] <... exit_group resumed>) = ? [pid 5098] close(28 [pid 5096] +++ exited with 0 +++ [pid 5071] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5098] close(29 [pid 5071] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5098] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5097] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./2/cgroup.cpu" [pid 5098] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5098] <... exit_group resumed>) = ? [pid 5071] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5098] +++ exited with 0 +++ [pid 5071] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./2/binderfs" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 131.018673][ T5099] dump_stack_lvl+0x125/0x1b0 [ 131.024204][ T5099] should_fail_ex+0x496/0x5b0 [ 131.029852][ T5099] should_failslab+0x9/0x20 [ 131.037905][ T5099] kmem_cache_alloc_node+0x64/0x4a0 [ 131.043756][ T5099] __alloc_skb+0x287/0x330 [ 131.052766][ T5099] ? __napi_build_skb+0x50/0x50 [ 131.058702][ T5099] ? mark_held_locks+0x9f/0xe0 [ 131.064213][ T5099] ? do_raw_spin_lock+0x12e/0x2b0 [ 131.071286][ T5099] ? spin_bug+0x1d0/0x1d0 [ 131.075746][ T5099] skb_copy+0x12c/0x2e0 [ 131.081305][ T5099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.088146][ T5099] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 131.096015][ T5099] ? hwsim_virtio_rx_work+0x390/0x390 [ 131.104039][ T5099] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 131.111016][ T5099] mac80211_hwsim_tx+0x7a2/0x25d0 [ 131.118072][ T5099] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 131.128781][ T5099] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 131.137050][ T5099] ? __local_bh_enable_ip+0xa4/0x120 [ 131.143216][ T5099] ieee80211_queue_skb+0x1299/0x1fb0 [ 131.149351][ T5099] ieee80211_tx+0x2e2/0x420 [ 131.154009][ T5099] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 131.160814][ T5099] ? mutex_destroy+0x2a/0x100 [ 131.166843][ T5099] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 131.174418][ T5099] ? ieee80211_skb_resize+0x22a/0x620 [ 131.180909][ T5099] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 131.187747][ T5099] ieee80211_xmit+0x30e/0x3e0 [ 131.193394][ T5099] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 131.200642][ T5099] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 131.207201][ T5099] ieee80211_tx_control_port+0x616/0xe10 [ 131.215520][ T5099] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 131.221651][ T5099] ? netdev_run_todo+0x85b/0x12e0 [ 131.226988][ T5099] ? ref_tracker_alloc+0x2ef/0x5a0 [ 131.233313][ T5099] ? generic_xdp_install+0x4c0/0x4c0 [ 131.240818][ T5099] nl80211_tx_control_port+0x5ad/0xa20 [ 131.249071][ T5099] ? nl80211_put_regdom+0x9b0/0x9b0 [ 131.255807][ T5099] ? nl80211_pre_doit+0x1b0/0xb10 [ 131.263943][ T5099] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 131.270953][ T5099] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 131.279688][ T5099] ? ns_capable+0xd5/0x110 [ 131.285036][ T5099] genl_rcv_msg+0x561/0x800 [ 131.290696][ T5099] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 131.297848][ T5099] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 131.306427][ T5099] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 131.315613][ T5099] ? nl80211_put_regdom+0x9b0/0x9b0 [ 131.322431][ T5099] ? nl80211_get_power_save+0x480/0x480 [ 131.328718][ T5099] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 131.335570][ T5099] netlink_rcv_skb+0x16b/0x440 [ 131.340391][ T5099] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 131.347930][ T5099] ? netlink_ack+0x1380/0x1380 [ 131.353276][ T5099] ? down_read+0xc9/0x330 [ 131.359748][ T5099] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 131.367161][ T5099] ? netlink_deliver_tap+0x1a0/0xd00 [ 131.373890][ T5099] genl_rcv+0x28/0x40 [ 131.378871][ T5099] netlink_unicast+0x53b/0x810 [ 131.383780][ T5099] ? netlink_attachskb+0x880/0x880 [ 131.389523][ T5099] netlink_sendmsg+0x93c/0xe40 [ 131.396117][ T5099] ? netlink_unicast+0x810/0x810 [ 131.403309][ T5099] ? netlink_unicast+0x810/0x810 [ 131.408768][ T5099] __sock_sendmsg+0xd5/0x180 [ 131.414603][ T5099] ____sys_sendmsg+0x6ac/0x940 [ 131.419513][ T5099] ? copy_msghdr_from_user+0x10b/0x160 [ 131.426707][ T5099] ? kernel_sendmsg+0x50/0x50 [ 131.433046][ T5099] ? hlock_class+0x4e/0x130 [ 131.438174][ T5099] ___sys_sendmsg+0x135/0x1d0 [ 131.443621][ T5099] ? do_recvmmsg+0x740/0x740 [ 131.449575][ T5099] ? recalc_sigpending_tsk+0x187/0x1d0 [ 131.455353][ T5099] ? __fget_light+0x1fc/0x260 [ 131.460515][ T5099] __sys_sendmsg+0x117/0x1e0 [ 131.469692][ T5099] ? __sys_sendmsg_sock+0x30/0x30 [ 131.475734][ T5099] ? ptrace_notify+0xf4/0x130 [ 131.482388][ T5099] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 131.493052][ T5099] do_syscall_64+0x40/0x110 [ 131.498234][ T5099] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 131.505354][ T5099] RIP: 0033:0x7f95460762a9 [ 131.512250][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 131.539309][ T5099] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.549573][ T5099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5071] <... unlink resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5100] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 3 [pid 5100] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5070] newfstatat(3, "", [pid 5100] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5100] <... socket resumed>) = 4 [pid 5077] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5070] getdents64(3, [pid 5100] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5100] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5099] <... sendmsg resumed>) = 84 [pid 5077] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5100] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5099] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5075] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./2/cgroup" [pid 5070] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... close resumed>) = 0 [pid 5100] <... socket resumed>) = 5 [pid 5077] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5100] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5099] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5070] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5099] close(5 [pid 5100] <... socket resumed>) = 6 [pid 5099] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5100] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./1/cgroup.cpu" [pid 5100] <... sendto resumed>) = 32 [pid 5099] close(6 [pid 5100] recvfrom(6, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./2/memory.events", [pid 5070] <... unlink resumed>) = 0 [pid 5100] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5077] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5075] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5100] recvfrom(6, [pid 5099] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] unlink("./2/memory.events" [ 131.562299][ T5099] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 131.573942][ T5099] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 131.584514][ T5099] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 131.593947][ T5099] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000002 [ 131.604040][ T5099] [pid 5100] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5099] close(7 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5100] close(6 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./2/cgroup.cpu" [pid 5075] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5100] <... close resumed>) = 0 [pid 5099] close(8 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5100] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./1/binderfs" [pid 5099] close(9 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5070] <... unlink resumed>) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./2/cgroup.cpu" [pid 5070] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] close(10 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5099] close(11 [pid 5077] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5075] <... unlink resumed>) = 0 [pid 5071] unlink("./2/cgroup.net" [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] unlink("./1/cgroup" [pid 5100] <... openat resumed>) = 6 [pid 5099] close(12 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./2/binderfs" [pid 5070] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5100] write(6, "13", 2 [pid 5099] close(13 [pid 5075] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5070] newfstatat(AT_FDCWD, "./1/memory.events", [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5100] <... write resumed>) = 2 [pid 5099] close(14 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5100] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5075] unlink("./2/binderfs" [pid 5071] close(3 [pid 5070] unlink("./1/memory.events" [pid 5099] close(15 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./2/cgroup" [pid 5071] <... close resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5071] rmdir("./2" [pid 5099] close(16 [pid 5077] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5070] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] mkdir("./3", 0777 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 131.682404][ T5100] FAULT_INJECTION: forcing a failure. [ 131.682404][ T5100] name failslab, interval 1, probability 0, space 0, times 0 [ 131.696214][ T5100] CPU: 0 PID: 5100 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 131.707248][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 131.717552][ T5100] Call Trace: [ 131.721837][ T5100] [ 131.725217][ T5100] dump_stack_lvl+0x125/0x1b0 [pid 5099] close(17 [pid 5077] newfstatat(AT_FDCWD, "./2/memory.events", [pid 5075] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5071] <... mkdir resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5099] close(18 [pid 5077] unlink("./2/memory.events" [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./1/cgroup.net" [pid 5099] close(19 [pid 5077] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./2/cgroup" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... unlink resumed>) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5070] getdents64(3, [pid 5099] close(20 [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5075] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] close(21) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] close(22 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./2/memory.events", [ 131.730774][ T5100] should_fail_ex+0x496/0x5b0 [ 131.736250][ T5100] should_failslab+0x9/0x20 [ 131.741337][ T5100] kmem_cache_alloc_node+0x64/0x4a0 [ 131.746814][ T5100] __alloc_skb+0x287/0x330 [ 131.752471][ T5100] ? __napi_build_skb+0x50/0x50 [ 131.759424][ T5100] ? mark_held_locks+0x9f/0xe0 [ 131.764765][ T5100] ? do_raw_spin_lock+0x12e/0x2b0 [ 131.770499][ T5100] ? spin_bug+0x1d0/0x1d0 [ 131.775035][ T5100] skb_copy+0x12c/0x2e0 [ 131.779508][ T5100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.785566][ T5100] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 131.792351][ T5100] ? hwsim_virtio_rx_work+0x390/0x390 [ 131.798361][ T5100] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 131.804543][ T5100] mac80211_hwsim_tx+0x7a2/0x25d0 [ 131.810761][ T5100] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 131.818594][ T5100] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 131.826112][ T5100] ? __local_bh_enable_ip+0xa4/0x120 [ 131.832322][ T5100] ieee80211_queue_skb+0x1299/0x1fb0 [ 131.839234][ T5100] ieee80211_tx+0x2e2/0x420 [ 131.844666][ T5100] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 131.851794][ T5100] ? mutex_destroy+0x2a/0x100 [ 131.857038][ T5100] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 131.863005][ T5100] ? ieee80211_skb_resize+0x22a/0x620 [ 131.868424][ T5100] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 131.874021][ T5100] ieee80211_xmit+0x30e/0x3e0 [ 131.878746][ T5100] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 131.884772][ T5100] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 131.890488][ T5100] ieee80211_tx_control_port+0x616/0xe10 [ 131.897045][ T5100] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 131.902509][ T5100] ? netdev_run_todo+0x85b/0x12e0 [ 131.907582][ T5100] ? ref_tracker_alloc+0x2ef/0x5a0 [ 131.913588][ T5100] ? generic_xdp_install+0x4c0/0x4c0 [ 131.920918][ T5100] nl80211_tx_control_port+0x5ad/0xa20 [ 131.928692][ T5100] ? nl80211_put_regdom+0x9b0/0x9b0 [ 131.934575][ T5100] ? nl80211_pre_doit+0x1b0/0xb10 [ 131.943645][ T5100] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 131.949856][ T5100] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 131.960943][ T5100] ? ns_capable+0xd5/0x110 [ 131.967118][ T5100] genl_rcv_msg+0x561/0x800 [ 131.971802][ T5100] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 131.978315][ T5100] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 131.986055][ T5100] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 131.995326][ T5100] ? nl80211_put_regdom+0x9b0/0x9b0 [ 132.002676][ T5100] ? nl80211_get_power_save+0x480/0x480 [ 132.013249][ T5100] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 132.020877][ T5100] netlink_rcv_skb+0x16b/0x440 [ 132.027263][ T5100] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 132.033558][ T5100] ? netlink_ack+0x1380/0x1380 [ 132.039174][ T5100] ? down_read+0xc9/0x330 [ 132.044607][ T5100] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 132.051317][ T5100] ? netlink_deliver_tap+0x1a0/0xd00 [ 132.056878][ T5100] genl_rcv+0x28/0x40 [ 132.060901][ T5100] netlink_unicast+0x53b/0x810 [ 132.066432][ T5100] ? netlink_attachskb+0x880/0x880 [ 132.072064][ T5100] netlink_sendmsg+0x93c/0xe40 [ 132.077930][ T5100] ? netlink_unicast+0x810/0x810 [ 132.083442][ T5100] ? netlink_unicast+0x810/0x810 [ 132.090392][ T5100] __sock_sendmsg+0xd5/0x180 [ 132.095925][ T5100] ____sys_sendmsg+0x6ac/0x940 [ 132.101171][ T5100] ? copy_msghdr_from_user+0x10b/0x160 [ 132.107369][ T5100] ? kernel_sendmsg+0x50/0x50 [ 132.112856][ T5100] ? hlock_class+0x4e/0x130 [ 132.117982][ T5100] ___sys_sendmsg+0x135/0x1d0 [ 132.124491][ T5100] ? do_recvmmsg+0x740/0x740 [ 132.129582][ T5100] ? recalc_sigpending_tsk+0x187/0x1d0 [ 132.147529][ T5100] ? __fget_light+0x1fc/0x260 [ 132.155136][ T5100] __sys_sendmsg+0x117/0x1e0 [ 132.160401][ T5100] ? __sys_sendmsg_sock+0x30/0x30 [ 132.166928][ T5100] ? ptrace_notify+0xf4/0x130 [ 132.171749][ T5100] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 132.179380][ T5100] do_syscall_64+0x40/0x110 [ 132.184157][ T5100] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 132.191639][ T5100] RIP: 0033:0x7f95460762a9 [ 132.196548][ T5100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 132.218685][ T5100] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.228357][ T5100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5070] close(3 [pid 5099] close(23 [pid 5077] unlink("./2/cgroup.net" [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5077] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3./strace-static-x86_64: Process 5102 attached ) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 5 [pid 5077] rmdir("./2" [pid 5102] set_robust_list(0x5555574d3660, 24 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] unlink("./2/memory.events" [pid 5102] <... set_robust_list resumed>) = 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] chdir("./3" [pid 5075] <... unlink resumed>) = 0 [pid 5102] <... chdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] close(24 [pid 5102] setpgid(0, 0 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] <... setpgid resumed>) = 0 [pid 5099] close(25) = -1 EBADF (Bad file descriptor) [pid 5070] rmdir("./1" [pid 5102] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5099] close(26 [pid 5100] <... sendmsg resumed>) = 84 [pid 5102] <... symlink resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5102] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] <... symlink resumed>) = 0 [pid 5099] close(27 [pid 5102] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5100] close(3 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] mkdir("./3", 0777 [pid 5075] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5102] <... symlink resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5099] close(28 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5100] close(4 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5100] <... close resumed>) = 0 [pid 5099] close(29 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] mkdir("./2", 0777./strace-static-x86_64: Process 5103 attached [pid 5102] <... openat resumed>) = 3 [pid 5100] close(5 [pid 5099] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./2/cgroup.net" [pid 5070] <... mkdir resumed>) = 0 [pid 5102] write(3, "1000", 4 [pid 5100] <... close resumed>) = 0 [pid 5099] exit_group(0 [pid 5075] <... unlink resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5103] set_robust_list(0x5555574d3660, 24 [pid 5102] <... write resumed>) = 4 [pid 5100] close(6 [pid 5099] <... exit_group resumed>) = ? [pid 5077] <... clone resumed>, child_tidptr=0x5555574d3650) = 5 [pid 5103] <... set_robust_list resumed>) = 0 [pid 5102] close(3) = 0 [pid 5100] <... close resumed>) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs" [pid 5103] chdir("./3" [pid 5102] <... symlink resumed>) = 0 [pid 5100] close(7 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 4 ./strace-static-x86_64: Process 5104 attached [pid 5103] <... chdir resumed>) = 0 [ 132.237677][ T5100] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 132.246972][ T5100] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 132.256295][ T5100] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 132.265087][ T5100] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000002 [ 132.273367][ T5100] [pid 5102] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] getdents64(3, [pid 5104] set_robust_list(0x5555574d3660, 24 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5102] <... openat resumed>) = 3 [pid 5100] close(8 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5104] <... set_robust_list resumed>) = 0 [pid 5103] <... prctl resumed>) = 0 [pid 5102] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] close(3 [pid 5104] chdir("./2" [pid 5103] setpgid(0, 0 [pid 5100] close(9 [pid 5099] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5103] <... setpgid resumed>) = 0 [pid 5100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] rmdir("./2" [pid 5100] close(10 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] close(11 [pid 5075] <... rmdir resumed>) = 0 [pid 5103] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5100] close(12) = -1 EBADF (Bad file descriptor) [pid 5100] close(13) = -1 EBADF (Bad file descriptor) [pid 5100] close(14) = -1 EBADF (Bad file descriptor) [pid 5100] close(15) = -1 EBADF (Bad file descriptor) [pid 5100] close(16) = -1 EBADF (Bad file descriptor) [pid 5100] close(17 [pid 5104] <... prctl resumed>) = 0 [pid 5103] <... symlink resumed>) = 0 [pid 5100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] mkdir("./3", 0777 [pid 5100] close(18) = -1 EBADF (Bad file descriptor) [pid 5100] close(19) = -1 EBADF (Bad file descriptor) [pid 5100] close(20) = -1 EBADF (Bad file descriptor) [pid 5100] close(21) = -1 EBADF (Bad file descriptor) [pid 5100] close(22) = -1 EBADF (Bad file descriptor) [pid 5075] <... mkdir resumed>) = 0 [pid 5104] setpgid(0, 0 [pid 5100] close(23) = -1 EBADF (Bad file descriptor) [pid 5100] close(24) = -1 EBADF (Bad file descriptor) [pid 5100] close(25) = -1 EBADF (Bad file descriptor) [pid 5100] close(26) = -1 EBADF (Bad file descriptor) [pid 5100] close(27) = -1 EBADF (Bad file descriptor) [pid 5100] close(28) = -1 EBADF (Bad file descriptor) [pid 5100] close(29) = -1 EBADF (Bad file descriptor) [pid 5100] exit_group(0) = ? [pid 5104] <... setpgid resumed>) = 0 [pid 5103] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5100] +++ exited with 0 +++ [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- ./strace-static-x86_64: Process 5105 attached [pid 5074] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] set_robust_list(0x5555574d3660, 24 [pid 5076] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5105] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5105] chdir("./3" [pid 5076] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(3, [pid 5105] <... prctl resumed>) = 0 [pid 5105] setpgid(0, 0 [pid 5076] newfstatat(3, "", [pid 5105] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5105] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5076] getdents64(3, [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 5 [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5074] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5103] <... symlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5105] <... symlink resumed>) = 0 [pid 5104] <... symlink resumed>) = 0 [pid 5103] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5076] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./2/cgroup.cpu" [pid 5105] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5104] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5103] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5105] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... unlink resumed>) = 0 [pid 5076] unlink("./2/cgroup.cpu" [pid 5103] <... openat resumed>) = 3 [pid 5104] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5074] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5104] write(3, "1000", 4 [pid 5103] write(3, "1000", 4) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... write resumed>) = 4 [pid 5103] close(3 [pid 5074] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5104] close(3 [pid 5103] <... close resumed>) = 0 [pid 5105] <... openat resumed>) = 3 [pid 5104] <... close resumed>) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./2/binderfs" [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 5103] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5104] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] write(3, "1000", 4 [pid 5104] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5103] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5102] <... ioctl resumed>) = 0 [pid 5105] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] close(3 [pid 5102] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] unlink("./2/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5105] <... close resumed>) = 0 [pid 5102] <... socket resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5103] <... openat resumed>) = 3 [pid 5076] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] symlink("/dev/binderfs", "./binderfs" [pid 5104] <... openat resumed>) = 3 [pid 5103] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5102] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5102] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./2/cgroup" [pid 5076] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./2/cgroup" [pid 5105] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5104] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5103] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5102] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5074] <... unlink resumed>) = 0 [pid 5105] <... openat resumed>) = 3 [pid 5104] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5103] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5102] <... socket resumed>) = 5 [pid 5076] <... unlink resumed>) = 0 [pid 5074] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5104] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5103] <... socket resumed>) = 4 [pid 5102] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5104] <... socket resumed>) = 4 [pid 5103] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5102] <... socket resumed>) = 6 [pid 5076] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./2/memory.events", [pid 5102] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5105] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5104] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5103] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5102] <... sendto resumed>) = 32 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./2/memory.events" [pid 5105] <... socket resumed>) = 4 [pid 5104] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5103] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5102] recvfrom(6, [pid 5076] newfstatat(AT_FDCWD, "./2/memory.events", [pid 5074] <... unlink resumed>) = 0 [pid 5105] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5104] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5103] <... socket resumed>) = 5 [pid 5102] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5105] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5104] <... socket resumed>) = 5 [pid 5103] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5102] recvfrom(6, [pid 5076] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5104] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5102] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] unlink("./2/memory.events" [pid 5105] <... socket resumed>) = 5 [pid 5104] <... socket resumed>) = 6 [pid 5103] <... socket resumed>) = 6 [pid 5102] close(6 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5104] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5102] <... close resumed>) = 0 [pid 5105] <... socket resumed>) = 6 [pid 5103] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5102] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5105] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5104] <... sendto resumed>) = 32 [pid 5103] <... sendto resumed>) = 32 [pid 5102] <... openat resumed>) = 6 [pid 5102] write(6, "13", 2 [pid 5105] <... sendto resumed>) = 32 [pid 5103] recvfrom(6, [pid 5104] recvfrom(6, [pid 5103] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5105] recvfrom(6, [pid 5104] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5102] <... write resumed>) = 2 [pid 5076] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] recvfrom(6, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5105] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5104] recvfrom(6, [pid 5103] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5102] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5105] recvfrom(6, [ 132.501106][ T5102] FAULT_INJECTION: forcing a failure. [ 132.501106][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 132.514117][ T5102] CPU: 0 PID: 5102 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 132.525459][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 132.536261][ T5102] Call Trace: [ 132.540021][ T5102] [ 132.542969][ T5102] dump_stack_lvl+0x125/0x1b0 [ 132.547884][ T5102] should_fail_ex+0x496/0x5b0 [ 132.553517][ T5102] should_failslab+0x9/0x20 [ 132.558167][ T5102] kmem_cache_alloc_node+0x64/0x4a0 [ 132.563685][ T5102] __alloc_skb+0x287/0x330 [ 132.568239][ T5102] ? __napi_build_skb+0x50/0x50 [ 132.578736][ T5102] ? mark_held_locks+0x9f/0xe0 [ 132.586608][ T5102] ? do_raw_spin_lock+0x12e/0x2b0 [ 132.591778][ T5102] ? spin_bug+0x1d0/0x1d0 [ 132.596212][ T5102] skb_copy+0x12c/0x2e0 [ 132.600781][ T5102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.606729][ T5102] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 132.614146][ T5102] ? hwsim_virtio_rx_work+0x390/0x390 [ 132.620977][ T5102] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 132.627874][ T5102] mac80211_hwsim_tx+0x7a2/0x25d0 [ 132.634649][ T5102] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 132.643137][ T5102] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 132.651611][ T5102] ? __local_bh_enable_ip+0xa4/0x120 [ 132.658130][ T5102] ieee80211_queue_skb+0x1299/0x1fb0 [ 132.663889][ T5102] ieee80211_tx+0x2e2/0x420 [ 132.669060][ T5102] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 132.676381][ T5102] ? mutex_destroy+0x2a/0x100 [ 132.681385][ T5102] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 132.691960][ T5102] ? ieee80211_skb_resize+0x22a/0x620 [ 132.698693][ T5102] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 132.704970][ T5102] ieee80211_xmit+0x30e/0x3e0 [ 132.710574][ T5102] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 132.716693][ T5102] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 132.722853][ T5102] ieee80211_tx_control_port+0x616/0xe10 [ 132.728951][ T5102] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 132.735223][ T5102] ? netdev_run_todo+0x85b/0x12e0 [ 132.740368][ T5102] ? ref_tracker_alloc+0x2ef/0x5a0 [ 132.748465][ T5102] ? generic_xdp_install+0x4c0/0x4c0 [ 132.755873][ T5102] nl80211_tx_control_port+0x5ad/0xa20 [ 132.762846][ T5102] ? nl80211_put_regdom+0x9b0/0x9b0 [ 132.769665][ T5102] ? nl80211_pre_doit+0x1b0/0xb10 [ 132.775781][ T5102] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 132.782810][ T5102] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 132.791705][ T5102] ? ns_capable+0xd5/0x110 [ 132.797061][ T5102] genl_rcv_msg+0x561/0x800 [ 132.802323][ T5102] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 132.809987][ T5102] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 132.816483][ T5102] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 132.822607][ T5102] ? nl80211_put_regdom+0x9b0/0x9b0 [ 132.829334][ T5102] ? nl80211_get_power_save+0x480/0x480 [ 132.836704][ T5102] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 132.843663][ T5102] netlink_rcv_skb+0x16b/0x440 [ 132.856326][ T5102] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 132.864129][ T5102] ? netlink_ack+0x1380/0x1380 [ 132.870273][ T5102] ? down_read+0xc9/0x330 [ 132.875168][ T5102] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 132.881692][ T5102] ? netlink_deliver_tap+0x1a0/0xd00 [ 132.888090][ T5102] genl_rcv+0x28/0x40 [ 132.893603][ T5102] netlink_unicast+0x53b/0x810 [ 132.899738][ T5102] ? netlink_attachskb+0x880/0x880 [ 132.906654][ T5102] netlink_sendmsg+0x93c/0xe40 [ 132.912326][ T5102] ? netlink_unicast+0x810/0x810 [ 132.917568][ T5102] ? netlink_unicast+0x810/0x810 [ 132.923951][ T5102] __sock_sendmsg+0xd5/0x180 [ 132.928988][ T5102] ____sys_sendmsg+0x6ac/0x940 [ 132.935291][ T5102] ? copy_msghdr_from_user+0x10b/0x160 [ 132.941405][ T5102] ? kernel_sendmsg+0x50/0x50 [ 132.946347][ T5102] ? hlock_class+0x4e/0x130 [ 132.952191][ T5102] ___sys_sendmsg+0x135/0x1d0 [ 132.958088][ T5102] ? do_recvmmsg+0x740/0x740 [ 132.963882][ T5102] ? recalc_sigpending_tsk+0x187/0x1d0 [ 132.970474][ T5102] ? __fget_light+0x1fc/0x260 [ 132.977052][ T5102] __sys_sendmsg+0x117/0x1e0 [ 132.982019][ T5102] ? __sys_sendmsg_sock+0x30/0x30 [ 132.987408][ T5102] ? ptrace_notify+0xf4/0x130 [ 132.993513][ T5102] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 133.000077][ T5102] do_syscall_64+0x40/0x110 [ 133.005091][ T5102] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 133.012739][ T5102] RIP: 0033:0x7f95460762a9 [ 133.018170][ T5102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 133.039314][ T5102] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5104] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5103] close(6 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./2/cgroup.net" [pid 5105] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5105] close(6 [pid 5104] close(6 [pid 5103] <... close resumed>) = 0 [pid 5102] <... sendmsg resumed>) = 84 [pid 5076] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5074] <... unlink resumed>) = 0 [pid 5104] <... close resumed>) = 0 [pid 5102] close(3) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5102] close(4 [pid 5076] unlink("./2/cgroup.net" [pid 5105] <... close resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5102] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5102] close(5) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] close(3 [pid 5105] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5104] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5103] <... openat resumed>) = 6 [pid 5102] close(6 [pid 5076] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5105] <... openat resumed>) = 6 [pid 5103] write(6, "13", 2 [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./2" [pid 5105] write(6, "13", 2 [pid 5104] <... openat resumed>) = 6 [pid 5103] <... write resumed>) = 2 [pid 5102] <... close resumed>) = 0 [ 133.048023][ T5102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 133.056743][ T5102] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 133.065360][ T5102] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 133.074482][ T5102] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 133.084673][ T5102] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000003 [ 133.094757][ T5102] [pid 5076] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5105] <... write resumed>) = 2 [pid 5103] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5076] <... close resumed>) = 0 [pid 5105] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5104] write(6, "13", 2 [pid 5103] <... sendmsg resumed>) = 84 [pid 5102] close(7 [pid 5076] rmdir("./2" [pid 5074] mkdir("./3", 0777 [pid 5105] <... sendmsg resumed>) = 84 [pid 5104] <... write resumed>) = 2 [pid 5103] close(3 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 133.146236][ T5104] FAULT_INJECTION: forcing a failure. [ 133.146236][ T5104] name failslab, interval 1, probability 0, space 0, times 0 [ 133.161112][ T5104] CPU: 0 PID: 5104 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 133.173996][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 133.188994][ T5104] Call Trace: [ 133.194958][ T5104] [ 133.198705][ T5104] dump_stack_lvl+0x125/0x1b0 [ 133.203534][ T5104] should_fail_ex+0x496/0x5b0 [ 133.209135][ T5104] should_failslab+0x9/0x20 [ 133.214041][ T5104] kmem_cache_alloc_node+0x64/0x4a0 [ 133.219627][ T5104] __alloc_skb+0x287/0x330 [ 133.225048][ T5104] ? __napi_build_skb+0x50/0x50 [ 133.230628][ T5104] ? mark_held_locks+0x9f/0xe0 [ 133.235724][ T5104] ? do_raw_spin_lock+0x12e/0x2b0 [ 133.241853][ T5104] ? spin_bug+0x1d0/0x1d0 [ 133.248610][ T5104] skb_copy+0x12c/0x2e0 [ 133.253877][ T5104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.261745][ T5104] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 133.269173][ T5104] ? hwsim_virtio_rx_work+0x390/0x390 [ 133.277393][ T5104] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 133.284760][ T5104] mac80211_hwsim_tx+0x7a2/0x25d0 [ 133.289952][ T5104] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 133.296607][ T5104] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 133.308024][ T5104] ? __local_bh_enable_ip+0xa4/0x120 [ 133.315011][ T5104] ieee80211_queue_skb+0x1299/0x1fb0 [ 133.321158][ T5104] ieee80211_tx+0x2e2/0x420 [ 133.329558][ T5104] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 133.336147][ T5104] ? mutex_destroy+0x2a/0x100 [ 133.341949][ T5104] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 133.353167][ T5104] ? ieee80211_skb_resize+0x22a/0x620 [ 133.360499][ T5104] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 133.369128][ T5104] ieee80211_xmit+0x30e/0x3e0 [ 133.375643][ T5104] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 133.383044][ T5104] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 133.389790][ T5104] ieee80211_tx_control_port+0x616/0xe10 [ 133.395916][ T5104] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 133.403986][ T5104] ? netdev_run_todo+0x85b/0x12e0 [ 133.409243][ T5104] ? ref_tracker_alloc+0x2ef/0x5a0 [ 133.415669][ T5104] ? generic_xdp_install+0x4c0/0x4c0 [ 133.423251][ T5104] nl80211_tx_control_port+0x5ad/0xa20 [ 133.431976][ T5104] ? nl80211_put_regdom+0x9b0/0x9b0 [ 133.439652][ T5104] ? nl80211_pre_doit+0x1b0/0xb10 [ 133.445214][ T5104] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 133.451189][ T5104] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 133.463496][ T5104] ? ns_capable+0xd5/0x110 [ 133.468585][ T5104] genl_rcv_msg+0x561/0x800 [ 133.474976][ T5104] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 133.481522][ T5104] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 133.488500][ T5104] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 133.498788][ T5104] ? nl80211_put_regdom+0x9b0/0x9b0 [ 133.504305][ T5104] ? nl80211_get_power_save+0x480/0x480 [ 133.512151][ T5104] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 133.519159][ T5104] netlink_rcv_skb+0x16b/0x440 [ 133.525204][ T5104] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 133.535241][ T5104] ? netlink_ack+0x1380/0x1380 [ 133.541484][ T5104] ? down_read+0xc9/0x330 [ 133.549716][ T5104] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 133.557657][ T5104] ? netlink_deliver_tap+0x1a0/0xd00 [ 133.564037][ T5104] genl_rcv+0x28/0x40 [ 133.568232][ T5104] netlink_unicast+0x53b/0x810 [ 133.573677][ T5104] ? netlink_attachskb+0x880/0x880 [ 133.579365][ T5104] netlink_sendmsg+0x93c/0xe40 [ 133.586640][ T5104] ? netlink_unicast+0x810/0x810 [ 133.593724][ T5104] ? netlink_unicast+0x810/0x810 [ 133.598998][ T5104] __sock_sendmsg+0xd5/0x180 [ 133.603802][ T5104] ____sys_sendmsg+0x6ac/0x940 [ 133.610163][ T5104] ? copy_msghdr_from_user+0x10b/0x160 [ 133.616164][ T5104] ? kernel_sendmsg+0x50/0x50 [ 133.621403][ T5104] ? hlock_class+0x4e/0x130 [ 133.626129][ T5104] ___sys_sendmsg+0x135/0x1d0 [ 133.632538][ T5104] ? do_recvmmsg+0x740/0x740 [ 133.637709][ T5104] ? recalc_sigpending_tsk+0x187/0x1d0 [ 133.645081][ T5104] ? __fget_light+0x1fc/0x260 [ 133.652062][ T5104] __sys_sendmsg+0x117/0x1e0 [ 133.659583][ T5104] ? __sys_sendmsg_sock+0x30/0x30 [ 133.666582][ T5104] ? ptrace_notify+0xf4/0x130 [ 133.673212][ T5104] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 133.680026][ T5104] do_syscall_64+0x40/0x110 [ 133.685984][ T5104] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 133.693288][ T5104] RIP: 0033:0x7f95460762a9 [ 133.698828][ T5104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 133.722764][ T5104] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.735342][ T5104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5076] <... rmdir resumed>) = 0 [pid 5105] close(3 [pid 5104] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5103] <... close resumed>) = 0 [pid 5102] close(8 [pid 5076] mkdir("./3", 0777 [pid 5105] <... close resumed>) = 0 [pid 5103] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5105] close(4 [pid 5103] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5105] <... close resumed>) = 0 [pid 5103] close(5 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5105] close(5./strace-static-x86_64: Process 5106 attached ) = 0 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5076] <... clone resumed>, child_tidptr=0x5555574d3650) = 5 ./strace-static-x86_64: Process 5107 attached [pid 5105] close(6 [pid 5102] close(9 [pid 5074] <... clone resumed>, child_tidptr=0x5555574d3650) = 5 [pid 5106] set_robust_list(0x5555574d3660, 24 [pid 5105] <... close resumed>) = 0 [pid 5106] <... set_robust_list resumed>) = 0 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] set_robust_list(0x5555574d3660, 24 [pid 5105] close(7 [pid 5107] <... set_robust_list resumed>) = 0 [pid 5102] close(10 [pid 5106] chdir("./3") = 0 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] chdir("./3") = 0 [pid 5102] close(11 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5106] <... prctl resumed>) = 0 [pid 5105] close(8 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(12 [pid 5106] setpgid(0, 0 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... prctl resumed>) = 0 [pid 5107] setpgid(0, 0 [pid 5102] close(13 [pid 5106] <... setpgid resumed>) = 0 [pid 5105] close(9 [pid 5106] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... setpgid resumed>) = 0 [pid 5107] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(14 [pid 5106] <... symlink resumed>) = 0 [pid 5107] <... symlink resumed>) = 0 [pid 5106] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5105] close(10 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... symlink resumed>) = 0 [pid 5105] close(11 [pid 5102] close(15 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5106] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 133.744019][ T5104] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 133.756773][ T5104] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 133.770594][ T5104] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 133.779418][ T5104] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000002 [ 133.789543][ T5104] [pid 5105] close(12 [pid 5106] <... symlink resumed>) = 0 [pid 5102] close(16 [pid 5107] <... symlink resumed>) = 0 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5105] close(13 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... openat resumed>) = 3 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(17 [pid 5107] <... symlink resumed>) = 0 [pid 5106] write(3, "1000", 4 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5106] <... write resumed>) = 4 [pid 5105] close(14 [pid 5102] close(18 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(15 [pid 5107] <... openat resumed>) = 3 [pid 5106] close(3 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] write(3, "1000", 4 [pid 5106] <... close resumed>) = 0 [pid 5105] close(16 [pid 5102] close(19 [pid 5107] <... write resumed>) = 4 [pid 5106] symlink("/dev/binderfs", "./binderfs" [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... sendmsg resumed>) = 84 [pid 5103] <... close resumed>) = 0 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(3 [pid 5106] <... symlink resumed>) = 0 [pid 5105] close(17 [pid 5104] close(3 [pid 5103] close(6 [pid 5102] close(20 [pid 5107] <... close resumed>) = 0 [pid 5106] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] symlink("/dev/binderfs", "./binderfs" [pid 5106] <... openat resumed>) = 3 [pid 5105] close(18 [pid 5102] close(21 [pid 5107] <... symlink resumed>) = 0 [pid 5106] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] close(4 [pid 5103] close(7 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5104] <... close resumed>) = 0 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(22 [pid 5105] close(19 [pid 5103] close(8 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... openat resumed>) = 3 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] close(5 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(23 [pid 5107] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5105] close(20 [pid 5104] <... close resumed>) = 0 [pid 5103] close(9 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] close(6 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(24 [pid 5104] <... close resumed>) = 0 [pid 5103] close(10 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(21 [pid 5104] close(7 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(25 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(11 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(22 [pid 5104] close(8 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(26 [pid 5106] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(12 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5105] close(23 [pid 5104] close(9 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(27 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(13 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(24 [pid 5104] close(10 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(28 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(14 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... socket resumed>) = 4 [pid 5105] close(25 [pid 5104] close(11 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] close(29 [pid 5106] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(15 [pid 5102] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5106] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5105] close(26 [pid 5104] close(12 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5102] exit_group(0 [pid 5107] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5106] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(16 [pid 5102] <... exit_group resumed>) = ? [pid 5107] <... socket resumed>) = 4 [pid 5106] <... socket resumed>) = 5 [pid 5105] close(27 [pid 5104] close(13 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5106] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] close(17 [pid 5102] +++ exited with 0 +++ [pid 5107] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5106] <... socket resumed>) = 6 [pid 5105] close(28 [pid 5104] close(14 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5106] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... socket resumed>) = 5 [pid 5105] close(29 [pid 5103] close(18 [pid 5104] close(15 [pid 5107] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... socket resumed>) = 6 [pid 5106] <... sendto resumed>) = 32 [pid 5105] exit_group(0 [pid 5104] close(16 [pid 5103] close(19 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5107] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5106] recvfrom(6, [pid 5105] <... exit_group resumed>) = ? [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... sendto resumed>) = 32 [pid 5106] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5104] close(17 [pid 5071] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] close(20 [pid 5107] recvfrom(6, [pid 5106] recvfrom(6, [pid 5107] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5106] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5107] recvfrom(6, [pid 5105] +++ exited with 0 +++ [pid 5106] close(6 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5106] <... close resumed>) = 0 [pid 5104] close(18 [pid 5103] close(21 [pid 5071] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5104] close(19) = -1 EBADF (Bad file descriptor) [pid 5107] close(6 [pid 5106] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5104] close(20 [pid 5103] close(22 [pid 5071] <... openat resumed>) = 3 [pid 5107] <... close resumed>) = 0 [pid 5106] <... openat resumed>) = 6 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(3, "", [pid 5107] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5104] close(21 [pid 5106] write(6, "13", 2 [pid 5103] close(23 [pid 5075] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5107] <... openat resumed>) = 6 [pid 5106] <... write resumed>) = 2 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5107] write(6, "13", 2 [pid 5106] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5104] close(22 [pid 5103] close(24 [pid 5075] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] <... write resumed>) = 2 [ 133.952201][ T5106] FAULT_INJECTION: forcing a failure. [ 133.952201][ T5106] name failslab, interval 1, probability 0, space 0, times 0 [ 133.968818][ T5106] CPU: 1 PID: 5106 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 133.982947][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 133.996239][ T5106] Call Trace: [ 134.000458][ T5106] [ 134.003550][ T5106] dump_stack_lvl+0x125/0x1b0 [ 134.009045][ T5106] should_fail_ex+0x496/0x5b0 [ 134.014029][ T5106] should_failslab+0x9/0x20 [ 134.018952][ T5106] kmem_cache_alloc_node+0x64/0x4a0 [ 134.024680][ T5106] __alloc_skb+0x287/0x330 [ 134.032756][ T5106] ? __napi_build_skb+0x50/0x50 [ 134.039406][ T5106] ? mark_held_locks+0x9f/0xe0 [ 134.044417][ T5106] ? do_raw_spin_lock+0x12e/0x2b0 [ 134.051677][ T5106] ? spin_bug+0x1d0/0x1d0 [ 134.057109][ T5106] skb_copy+0x12c/0x2e0 [ 134.061616][ T5106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.069010][ T5106] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 134.076937][ T5106] ? hwsim_virtio_rx_work+0x390/0x390 [ 134.082963][ T5106] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 134.089178][ T5106] mac80211_hwsim_tx+0x7a2/0x25d0 [ 134.094596][ T5106] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 134.106439][ T5106] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 134.114226][ T5106] ? __local_bh_enable_ip+0xa4/0x120 [ 134.120873][ T5106] ieee80211_queue_skb+0x1299/0x1fb0 [ 134.127486][ T5106] ieee80211_tx+0x2e2/0x420 [ 134.133721][ T5106] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 134.140972][ T5106] ? mutex_destroy+0x2a/0x100 [ 134.149557][ T5106] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 134.156718][ T5106] ? ieee80211_skb_resize+0x22a/0x620 [ 134.163775][ T5106] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 134.170654][ T5106] ieee80211_xmit+0x30e/0x3e0 [ 134.176209][ T5106] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 134.183840][ T5106] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 134.190866][ T5106] ieee80211_tx_control_port+0x616/0xe10 [ 134.198289][ T5106] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 134.205942][ T5106] ? netdev_run_todo+0x85b/0x12e0 [ 134.213109][ T5106] ? ref_tracker_alloc+0x2ef/0x5a0 [ 134.220201][ T5106] ? generic_xdp_install+0x4c0/0x4c0 [ 134.225900][ T5106] nl80211_tx_control_port+0x5ad/0xa20 [ 134.233061][ T5106] ? nl80211_put_regdom+0x9b0/0x9b0 [ 134.239462][ T5106] ? nl80211_pre_doit+0x1b0/0xb10 [ 134.246295][ T5106] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 134.254973][ T5106] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 134.263623][ T5106] ? ns_capable+0xd5/0x110 [ 134.270511][ T5106] genl_rcv_msg+0x561/0x800 [ 134.276512][ T5106] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 134.283776][ T5106] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 134.291833][ T5106] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 134.298611][ T5106] ? nl80211_put_regdom+0x9b0/0x9b0 [ 134.304755][ T5106] ? nl80211_get_power_save+0x480/0x480 [ 134.312499][ T5106] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 134.319646][ T5106] netlink_rcv_skb+0x16b/0x440 [ 134.325443][ T5106] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 134.333470][ T5106] ? netlink_ack+0x1380/0x1380 [ 134.338470][ T5106] ? down_read+0xc9/0x330 [ 134.343824][ T5106] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 134.351375][ T5106] ? netlink_deliver_tap+0x1a0/0xd00 [ 134.358120][ T5106] genl_rcv+0x28/0x40 [ 134.363910][ T5106] netlink_unicast+0x53b/0x810 [ 134.369119][ T5106] ? netlink_attachskb+0x880/0x880 [ 134.377724][ T5106] netlink_sendmsg+0x93c/0xe40 [ 134.383883][ T5106] ? netlink_unicast+0x810/0x810 [ 134.392157][ T5106] ? netlink_unicast+0x810/0x810 [ 134.399626][ T5106] __sock_sendmsg+0xd5/0x180 [ 134.405043][ T5106] ____sys_sendmsg+0x6ac/0x940 [ 134.412927][ T5106] ? copy_msghdr_from_user+0x10b/0x160 [ 134.420244][ T5106] ? kernel_sendmsg+0x50/0x50 [ 134.425312][ T5106] ? hlock_class+0x4e/0x130 [ 134.433675][ T5106] ___sys_sendmsg+0x135/0x1d0 [ 134.438584][ T5106] ? do_recvmmsg+0x740/0x740 [ 134.443704][ T5106] ? recalc_sigpending_tsk+0x187/0x1d0 [ 134.452481][ T5106] ? __fget_light+0x1fc/0x260 [ 134.458377][ T5106] __sys_sendmsg+0x117/0x1e0 [ 134.465386][ T5106] ? __sys_sendmsg_sock+0x30/0x30 [ 134.472647][ T5106] ? ptrace_notify+0xf4/0x130 [ 134.478783][ T5106] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 134.485725][ T5106] do_syscall_64+0x40/0x110 [ 134.490731][ T5106] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 134.498426][ T5106] RIP: 0033:0x7f95460762a9 [ 134.503250][ T5106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 134.529167][ T5106] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.540769][ T5106] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5107] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5104] close(23 [pid 5103] close(25 [pid 5075] <... openat resumed>) = 3 [pid 5071] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] close(24 [pid 5103] close(26 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5104] close(25 [pid 5103] close(27 [pid 5071] unlink("./3/cgroup.cpu" [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... unlink resumed>) = 0 [pid 5103] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] close(26 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./3/binderfs") = 0 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5104] close(27) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5104] close(28 [pid 5075] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5103] close(28) = -1 EBADF (Bad file descriptor) [pid 5103] close(29) = -1 EBADF (Bad file descriptor) [pid 5103] exit_group(0) = ? [pid 5071] unlink("./3/cgroup") = 0 [pid 5071] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 134.555061][ T5106] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 134.566542][ T5106] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 134.577790][ T5106] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 134.587724][ T5106] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000003 [ 134.599255][ T5106] [pid 5071] newfstatat(AT_FDCWD, "./3/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5107] <... sendmsg resumed>) = 84 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5103] +++ exited with 0 +++ [pid 5075] unlink("./3/cgroup.cpu" [pid 5104] close(29 [pid 5075] <... unlink resumed>) = 0 [pid 5071] unlink("./3/memory.events" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=64 /* 0.64 s */} --- [pid 5106] <... sendmsg resumed>) = 84 [pid 5104] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5106] close(3 [pid 5104] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5106] <... close resumed>) = 0 [pid 5075] unlink("./3/binderfs") = 0 [pid 5075] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5106] close(4 [pid 5077] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./3/cgroup" [pid 5106] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5070] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] close(3 [pid 5106] close(5 [pid 5077] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] <... close resumed>) = 0 [pid 5106] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5107] close(4 [pid 5106] close(6 [pid 5077] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./3/memory.events", [pid 5071] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 3 [pid 5107] <... close resumed>) = 0 [pid 5106] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(3, "", [pid 5106] close(7 [pid 5077] getdents64(3, [pid 5075] unlink("./3/memory.events" [pid 5071] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5106] close(8 [pid 5077] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./3/cgroup.net" [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5070] getdents64(3, [pid 5106] close(9 [pid 5077] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5075] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5071] getdents64(3, [pid 5107] close(5 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5106] close(10 [pid 5077] unlink("./3/cgroup.cpu" [pid 5075] unlink("./3/cgroup.net" [pid 5071] close(3 [pid 5070] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... close resumed>) = 0 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5106] close(11 [pid 5077] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] close(6 [pid 5075] getdents64(3, [pid 5071] rmdir("./3" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] <... close resumed>) = 0 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5107] close(7 [pid 5106] close(12 [pid 5077] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5075] close(3 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5107] close(8 [pid 5106] close(13 [pid 5077] unlink("./3/binderfs" [pid 5075] rmdir("./3" [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] mkdir("./4", 0777 [pid 5107] close(9 [pid 5106] close(14 [pid 5077] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./4", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 5070] unlink("./2/cgroup.cpu" [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5107] close(10 [pid 5106] close(15 [pid 5077] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... unlink resumed>) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] close(11 [pid 5106] close(16 [pid 5077] unlink("./3/cgroup" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5107] close(12 [pid 5106] close(17./strace-static-x86_64: Process 5108 attached [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 6 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5109 attached [pid 5108] set_robust_list(0x5555574d3660, 24 [pid 5107] close(13 [pid 5106] close(18 [pid 5077] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] unlink("./2/binderfs" [pid 5109] set_robust_list(0x5555574d3660, 24 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... set_robust_list resumed>) = 0 [pid 5108] chdir("./4" [pid 5107] close(14 [pid 5106] close(19 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 6 [pid 5109] chdir("./4" [pid 5108] <... chdir resumed>) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./3/memory.events", [pid 5070] <... unlink resumed>) = 0 [pid 5109] <... chdir resumed>) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5107] close(15 [pid 5106] close(20 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5108] <... prctl resumed>) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./3/memory.events" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5109] <... prctl resumed>) = 0 [pid 5108] setpgid(0, 0 [pid 5107] close(16 [pid 5106] close(21 [pid 5070] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5109] setpgid(0, 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(17 [pid 5106] close(22 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(18 [pid 5106] close(23 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(19 [pid 5106] close(24 [pid 5070] unlink("./2/cgroup" [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5107] close(20 [pid 5106] close(25 [pid 5077] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(21 [pid 5106] close(26 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5107] close(22 [pid 5106] close(27 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(23 [pid 5106] close(28 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] <... unlink resumed>) = 0 [pid 5107] close(24 [pid 5109] <... setpgid resumed>) = 0 [pid 5108] <... setpgid resumed>) = 0 [pid 5106] close(29 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5108] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5107] close(25 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./3/cgroup.net" [pid 5109] <... symlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5106] exit_group(0 [pid 5109] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5108] <... symlink resumed>) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] <... exit_group resumed>) = ? [pid 5077] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./2/memory.events", [pid 5109] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5107] close(26 [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5108] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5109] <... symlink resumed>) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5108] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 5070] unlink("./2/memory.events" [pid 5109] <... openat resumed>) = 3 [pid 5108] <... symlink resumed>) = 0 [pid 5107] close(27 [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5070] <... unlink resumed>) = 0 [pid 5070] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] write(3, "1000", 4 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5109] <... write resumed>) = 4 [pid 5107] close(28 [pid 5108] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5109] close(3 [pid 5108] write(3, "1000", 4 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] rmdir("./3" [pid 5109] <... close resumed>) = 0 [pid 5108] <... write resumed>) = 4 [pid 5109] symlink("/dev/binderfs", "./binderfs" [pid 5108] close(3 [pid 5107] close(29 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5107] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5076] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] unlink("./2/cgroup.net" [pid 5109] <... symlink resumed>) = 0 [pid 5108] <... close resumed>) = 0 [pid 5107] exit_group(0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... unlink resumed>) = 0 [pid 5107] <... exit_group resumed>) = ? [pid 5109] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5108] symlink("/dev/binderfs", "./binderfs" [pid 5107] +++ exited with 0 +++ [pid 5077] mkdir("./4", 0777 [pid 5076] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] getdents64(3, [pid 5108] <... symlink resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5109] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=64 /* 0.64 s */} --- [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5109] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5108] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] close(3 [pid 5108] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 5070] rmdir("./2") = 0 [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5110 attached [pid 5108] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5074] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] mkdir("./3", 0777 [pid 5110] set_robust_list(0x5555574d3660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x5555574d3650) = 6 [pid 5110] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5070] <... mkdir resumed>) = 0 [pid 5110] chdir("./4" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5110] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5074] getdents64(3, [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5110] <... prctl resumed>) = 0 [pid 5076] unlink("./3/cgroup.cpu" [pid 5074] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5110] setpgid(0, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5111 attached [pid 5111] set_robust_list(0x5555574d3660, 24 [pid 5110] <... setpgid resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5110] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5076] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./3/cgroup.cpu") = 0 [pid 5076] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5111] <... set_robust_list resumed>) = 0 [pid 5110] <... symlink resumed>) = 0 [pid 5076] unlink("./3/binderfs" [pid 5074] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 5 [pid 5111] chdir("./3" [pid 5110] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] <... chdir resumed>) = 0 [pid 5110] <... symlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5110] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5076] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5111] <... prctl resumed>) = 0 [pid 5110] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./3/binderfs" [pid 5111] setpgid(0, 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5111] <... setpgid resumed>) = 0 [pid 5110] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5111] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5110] write(3, "1000", 4 [pid 5076] unlink("./3/cgroup" [pid 5074] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... symlink resumed>) = 0 [pid 5110] <... write resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] close(3 [pid 5074] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5110] <... close resumed>) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs" [pid 5111] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5076] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5111] <... symlink resumed>) = 0 [pid 5110] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5076] newfstatat(AT_FDCWD, "./3/memory.events", [pid 5110] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5074] unlink("./3/cgroup" [pid 5076] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5111] <... symlink resumed>) = 0 [pid 5076] unlink("./3/memory.events") = 0 [pid 5076] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5110] <... openat resumed>) = 3 [pid 5109] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5108] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5074] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5108] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] <... openat resumed>) = 3 [pid 5110] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5109] <... socket resumed>) = 4 [pid 5108] <... socket resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./3/memory.events", [pid 5111] write(3, "1000", 4 [pid 5110] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5109] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5111] <... write resumed>) = 4 [pid 5074] unlink("./3/memory.events" [pid 5111] close(3 [pid 5109] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5076] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5074] <... unlink resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5110] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5109] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5108] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5074] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] symlink("/dev/binderfs", "./binderfs" [pid 5110] <... socket resumed>) = 4 [pid 5109] <... socket resumed>) = 5 [pid 5108] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] <... symlink resumed>) = 0 [pid 5108] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5111] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5110] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5109] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5108] <... socket resumed>) = 5 [pid 5076] unlink("./3/cgroup.net" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5108] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5076] <... unlink resumed>) = 0 [pid 5074] unlink("./3/cgroup.net" [pid 5110] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5108] <... socket resumed>) = 6 [pid 5109] <... socket resumed>) = 6 [pid 5108] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5111] <... openat resumed>) = 3 [pid 5110] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5109] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 5111] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5110] <... socket resumed>) = 5 [pid 5109] <... sendto resumed>) = 32 [pid 5108] <... sendto resumed>) = 32 [pid 5076] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5111] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5110] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5108] recvfrom(6, [pid 5076] close(3 [pid 5111] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5109] recvfrom(6, [pid 5108] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5074] getdents64(3, [pid 5111] <... socket resumed>) = 4 [pid 5110] <... socket resumed>) = 6 [pid 5109] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5108] recvfrom(6, [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5111] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5110] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5109] recvfrom(6, [pid 5108] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5076] rmdir("./3" [pid 5074] close(3 [pid 5111] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5110] <... sendto resumed>) = 32 [pid 5109] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] <... close resumed>) = 0 [pid 5111] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5109] close(6 [pid 5108] close(6 [pid 5110] recvfrom(6, [pid 5076] <... rmdir resumed>) = 0 [pid 5111] <... socket resumed>) = 5 [pid 5109] <... close resumed>) = 0 [pid 5074] rmdir("./3" [pid 5110] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5109] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5108] <... close resumed>) = 0 [pid 5076] mkdir("./4", 0777 [pid 5111] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5110] recvfrom(6, [pid 5109] <... openat resumed>) = 6 [pid 5108] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5110] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5111] <... socket resumed>) = 6 [pid 5109] write(6, "13", 2 [pid 5108] <... openat resumed>) = 6 [pid 5074] mkdir("./4", 0777 [pid 5111] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5109] <... write resumed>) = 2 [pid 5111] <... sendto resumed>) = 32 [pid 5110] close(6 [ 134.961722][ T5108] FAULT_INJECTION: forcing a failure. [ 134.961722][ T5108] name failslab, interval 1, probability 0, space 0, times 0 [ 134.977671][ T5108] CPU: 1 PID: 5108 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 134.991019][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 135.003068][ T5108] Call Trace: [ 135.007952][ T5108] [ 135.011712][ T5108] dump_stack_lvl+0x125/0x1b0 [ 135.017416][ T5108] should_fail_ex+0x496/0x5b0 [ 135.023113][ T5108] should_failslab+0x9/0x20 [ 135.028574][ T5108] kmem_cache_alloc_node+0x64/0x4a0 [ 135.035651][ T5108] __alloc_skb+0x287/0x330 [ 135.041173][ T5108] ? __napi_build_skb+0x50/0x50 [ 135.046763][ T5108] ? mark_held_locks+0x9f/0xe0 [ 135.052027][ T5108] ? do_raw_spin_lock+0x12e/0x2b0 [ 135.058638][ T5108] ? spin_bug+0x1d0/0x1d0 [ 135.064430][ T5108] skb_copy+0x12c/0x2e0 [ 135.069635][ T5108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.076880][ T5108] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 135.085526][ T5108] ? hwsim_virtio_rx_work+0x390/0x390 [ 135.094630][ T5108] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 135.101022][ T5108] mac80211_hwsim_tx+0x7a2/0x25d0 [ 135.112428][ T5108] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 135.125237][ T5108] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 135.133088][ T5108] ? __local_bh_enable_ip+0xa4/0x120 [ 135.140348][ T5108] ieee80211_queue_skb+0x1299/0x1fb0 [ 135.148645][ T5108] ieee80211_tx+0x2e2/0x420 [ 135.153639][ T5108] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 135.161929][ T5108] ? mutex_destroy+0x2a/0x100 [ 135.171013][ T5108] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 135.179335][ T5108] ? ieee80211_skb_resize+0x22a/0x620 [ 135.186422][ T5108] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 135.193534][ T5108] ieee80211_xmit+0x30e/0x3e0 [ 135.199217][ T5108] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 135.207262][ T5108] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 135.215939][ T5108] ieee80211_tx_control_port+0x616/0xe10 [ 135.223022][ T5108] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 135.230184][ T5108] ? netdev_run_todo+0x85b/0x12e0 [ 135.236676][ T5108] ? ref_tracker_alloc+0x2ef/0x5a0 [ 135.246700][ T5108] ? generic_xdp_install+0x4c0/0x4c0 [ 135.254230][ T5108] nl80211_tx_control_port+0x5ad/0xa20 [ 135.262872][ T5108] ? nl80211_put_regdom+0x9b0/0x9b0 [ 135.268710][ T5108] ? nl80211_pre_doit+0x1b0/0xb10 [ 135.276332][ T5108] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 135.288372][ T5108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 135.302383][ T5108] ? ns_capable+0xd5/0x110 [ 135.307691][ T5108] genl_rcv_msg+0x561/0x800 [ 135.313324][ T5108] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 135.321804][ T5108] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 135.330460][ T5108] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 135.338901][ T5108] ? nl80211_put_regdom+0x9b0/0x9b0 [ 135.344704][ T5108] ? nl80211_get_power_save+0x480/0x480 [ 135.351629][ T5108] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 135.359843][ T5108] netlink_rcv_skb+0x16b/0x440 [ 135.365103][ T5108] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 135.371655][ T5108] ? netlink_ack+0x1380/0x1380 [ 135.376610][ T5108] ? down_read+0xc9/0x330 [ 135.383269][ T5108] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 135.392745][ T5108] ? netlink_deliver_tap+0x1a0/0xd00 [ 135.398469][ T5108] genl_rcv+0x28/0x40 [ 135.404335][ T5108] netlink_unicast+0x53b/0x810 [ 135.415310][ T5108] ? netlink_attachskb+0x880/0x880 [ 135.424921][ T5108] netlink_sendmsg+0x93c/0xe40 [ 135.435876][ T5108] ? netlink_unicast+0x810/0x810 [ 135.443434][ T5108] ? netlink_unicast+0x810/0x810 [ 135.449513][ T5108] __sock_sendmsg+0xd5/0x180 [ 135.457621][ T5108] ____sys_sendmsg+0x6ac/0x940 [ 135.464517][ T5108] ? copy_msghdr_from_user+0x10b/0x160 [ 135.473037][ T5108] ? kernel_sendmsg+0x50/0x50 [ 135.479360][ T5108] ? hlock_class+0x4e/0x130 [ 135.486097][ T5108] ___sys_sendmsg+0x135/0x1d0 [ 135.493817][ T5108] ? do_recvmmsg+0x740/0x740 [ 135.499481][ T5108] ? recalc_sigpending_tsk+0x187/0x1d0 [ 135.507472][ T5108] ? __fget_light+0x1fc/0x260 [ 135.514609][ T5108] __sys_sendmsg+0x117/0x1e0 [ 135.519369][ T5108] ? __sys_sendmsg_sock+0x30/0x30 [ 135.528350][ T5108] ? ptrace_notify+0xf4/0x130 [ 135.534495][ T5108] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 135.542384][ T5108] do_syscall_64+0x40/0x110 [ 135.550588][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 135.560969][ T5108] RIP: 0033:0x7f95460762a9 [ 135.566502][ T5108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 135.593094][ T5108] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.603298][ T5108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5109] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5108] write(6, "13", 2 [pid 5109] <... sendmsg resumed>) = 84 [pid 5108] <... write resumed>) = 2 [pid 5111] recvfrom(6, [pid 5110] <... close resumed>) = 0 [pid 5109] close(3 [pid 5108] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5111] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5109] <... close resumed>) = 0 [pid 5111] recvfrom(6, [pid 5110] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5111] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5111] close(6) = 0 [pid 5111] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5076] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [ 135.613628][ T5108] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 135.623727][ T5108] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 135.632883][ T5108] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 135.643348][ T5108] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000004 [ 135.654031][ T5108] [ 135.693728][ T5110] FAULT_INJECTION: forcing a failure. [ 135.693728][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 135.708900][ T5110] CPU: 1 PID: 5110 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 135.721116][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 135.733995][ T5110] Call Trace: [ 135.737580][ T5110] [ 135.741051][ T5110] dump_stack_lvl+0x125/0x1b0 [ 135.746744][ T5110] should_fail_ex+0x496/0x5b0 [ 135.752856][ T5110] should_failslab+0x9/0x20 [ 135.759318][ T5110] kmem_cache_alloc_node+0x64/0x4a0 [ 135.765236][ T5110] __alloc_skb+0x287/0x330 [ 135.771614][ T5110] ? __napi_build_skb+0x50/0x50 [ 135.781537][ T5110] ? mark_held_locks+0x9f/0xe0 [ 135.793803][ T5110] ? do_raw_spin_lock+0x12e/0x2b0 [ 135.803817][ T5110] ? spin_bug+0x1d0/0x1d0 [ 135.810552][ T5110] skb_copy+0x12c/0x2e0 [ 135.815906][ T5110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.823499][ T5110] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 135.832391][ T5110] ? hwsim_virtio_rx_work+0x390/0x390 [ 135.838105][ T5110] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 135.847710][ T5110] mac80211_hwsim_tx+0x7a2/0x25d0 [ 135.855804][ T5110] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 135.864119][ T5110] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 135.874534][ T5110] ? __local_bh_enable_ip+0xa4/0x120 [ 135.882309][ T5110] ieee80211_queue_skb+0x1299/0x1fb0 [ 135.889519][ T5110] ieee80211_tx+0x2e2/0x420 [ 135.894754][ T5110] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 135.900881][ T5110] ? mutex_destroy+0x2a/0x100 [ 135.907897][ T5110] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 135.918593][ T5110] ? ieee80211_skb_resize+0x22a/0x620 [ 135.925138][ T5110] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 135.934291][ T5110] ieee80211_xmit+0x30e/0x3e0 [ 135.939972][ T5110] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 135.946344][ T5110] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 135.954553][ T5110] ieee80211_tx_control_port+0x616/0xe10 [ 135.961432][ T5110] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 135.969122][ T5110] ? netdev_run_todo+0x85b/0x12e0 [ 135.975065][ T5110] ? ref_tracker_alloc+0x2ef/0x5a0 [ 135.980723][ T5110] ? generic_xdp_install+0x4c0/0x4c0 [ 135.989384][ T5110] nl80211_tx_control_port+0x5ad/0xa20 [ 135.995768][ T5110] ? nl80211_put_regdom+0x9b0/0x9b0 [ 136.002421][ T5110] ? nl80211_pre_doit+0x1b0/0xb10 [ 136.008616][ T5110] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 136.016083][ T5110] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 136.027065][ T5110] ? ns_capable+0xd5/0x110 [ 136.035243][ T5110] genl_rcv_msg+0x561/0x800 [ 136.042905][ T5110] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 136.052850][ T5110] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 136.065926][ T5110] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 136.073560][ T5110] ? nl80211_put_regdom+0x9b0/0x9b0 [ 136.080605][ T5110] ? nl80211_get_power_save+0x480/0x480 [ 136.086225][ T5110] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 136.093275][ T5110] netlink_rcv_skb+0x16b/0x440 [ 136.099338][ T5110] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 136.106222][ T5110] ? netlink_ack+0x1380/0x1380 [ 136.115646][ T5110] ? down_read+0xc9/0x330 [ 136.120038][ T5110] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 136.126169][ T5110] ? netlink_deliver_tap+0x1a0/0xd00 [ 136.132551][ T5110] genl_rcv+0x28/0x40 [ 136.138151][ T5110] netlink_unicast+0x53b/0x810 [ 136.145151][ T5110] ? netlink_attachskb+0x880/0x880 [ 136.150919][ T5110] netlink_sendmsg+0x93c/0xe40 [ 136.157544][ T5110] ? netlink_unicast+0x810/0x810 [ 136.164895][ T5110] ? netlink_unicast+0x810/0x810 [ 136.171979][ T5110] __sock_sendmsg+0xd5/0x180 [ 136.178702][ T5110] ____sys_sendmsg+0x6ac/0x940 [ 136.185549][ T5110] ? copy_msghdr_from_user+0x10b/0x160 [ 136.192185][ T5110] ? kernel_sendmsg+0x50/0x50 [ 136.197683][ T5110] ? hlock_class+0x4e/0x130 [ 136.207460][ T5110] ___sys_sendmsg+0x135/0x1d0 [ 136.215519][ T5110] ? do_recvmmsg+0x740/0x740 [ 136.220870][ T5110] ? recalc_sigpending_tsk+0x187/0x1d0 [ 136.229155][ T5110] ? __fget_light+0x1fc/0x260 [ 136.236142][ T5110] __sys_sendmsg+0x117/0x1e0 [ 136.242055][ T5110] ? __sys_sendmsg_sock+0x30/0x30 [ 136.247847][ T5110] ? ptrace_notify+0xf4/0x130 [ 136.256651][ T5110] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 136.264311][ T5110] do_syscall_64+0x40/0x110 [ 136.269665][ T5110] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 136.279957][ T5110] RIP: 0033:0x7f95460762a9 [ 136.285313][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 136.311509][ T5110] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.323680][ T5110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 136.334406][ T5110] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [pid 5111] write(6, "13", 2 [pid 5110] <... openat resumed>) = 6 [pid 5109] close(4 [pid 5108] <... sendmsg resumed>) = 84 [pid 5076] exit_group(1 [pid 5074] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 5110] write(6, "13", 2 [pid 5076] <... exit_group resumed>) = ? [pid 5110] <... write resumed>) = 2 [pid 5111] <... write resumed>) = 2 [pid 5108] close(3 [pid 5111] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5110] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5109] <... close resumed>) = 0 [pid 5111] <... sendmsg resumed>) = 84 [pid 5109] close(5 [pid 5108] <... close resumed>) = 0 [pid 5108] close(4 [pid 5111] close(3 [pid 5108] <... close resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5108] close(5 [pid 5111] close(4 [pid 5108] <... close resumed>) = 0 [pid 5076] +++ exited with 1 +++ [pid 5074] exit_group(1 [pid 5111] <... close resumed>) = 0 [pid 5108] close(6 [pid 5111] close(5 [pid 5110] <... sendmsg resumed>) = 84 [pid 5108] <... close resumed>) = 0 [pid 5109] <... close resumed>) = 0 [pid 5074] <... exit_group resumed>) = ? [pid 5111] <... close resumed>) = 0 [pid 5108] close(7 [pid 5111] close(6 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = 0 [pid 5108] close(8 [pid 5111] close(7 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(9 [pid 5111] close(8 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(10 [pid 5111] close(9 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(11 [pid 5111] close(10 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 136.344295][ T5110] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 136.356488][ T5110] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 136.368028][ T5110] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000004 [ 136.380101][ T5110] [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(12 [pid 5111] close(11 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=1, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(13 [pid 5111] close(12 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(14 [pid 5111] close(13 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(15 [pid 5111] close(14 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5111] close(15 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(17 [pid 5111] close(16 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(18 [pid 5111] close(17 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(19 [pid 5111] close(18 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(20 [pid 5111] close(19 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(21 [pid 5111] close(20 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(22 [pid 5111] close(21 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(23 [pid 5111] close(22 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(24 [pid 5111] close(23 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(25 [pid 5111] close(24 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(26 [pid 5069] <... clone resumed>, child_tidptr=0x5555574d3650) = -1 ENOMEM (Cannot allocate memory) [pid 5111] close(25 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(27 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5111] close(26 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] +++ exited with 1 +++ [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(28 [pid 5111] close(27 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(29 [pid 5111] close(28 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5069] <... clone resumed>, child_tidptr=0x5555574d3650) = -1 ENOMEM (Cannot allocate memory) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] exit_group(0 [pid 5111] close(29 [pid 5108] <... exit_group resumed>) = ? [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] close(3 [pid 5109] close(6 [pid 5108] +++ exited with 0 +++ [pid 5111] exit_group(0) = ? [pid 5110] <... close resumed>) = 0 [pid 5109] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=1, si_utime=0, si_stime=44 /* 0.44 s */} --- [pid 5111] +++ exited with 0 +++ [pid 5110] close(4 [pid 5109] close(7) = -1 EBADF (Bad file descriptor) [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5110] <... close resumed>) = 0 [pid 5109] close(8 [pid 5110] close(5 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] <... close resumed>) = 0 [pid 5109] close(9 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5110] close(6 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5110] <... close resumed>) = 0 [pid 5109] close(10 [pid 5110] close(7 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(11) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555574d3650) = -1 ENOMEM (Cannot allocate memory) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5109] close(12 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5110] close(8 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(13 [pid 5068] <... clone resumed>, child_tidptr=0x5555574d3650) = -1 ENOMEM (Cannot allocate memory) [pid 5110] close(9 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(14 [pid 5070] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5110] close(10 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555574d3650) = -1 ENOMEM (Cannot allocate memory) [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(15 [pid 5071] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(3, "", [pid 5110] close(11 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(16 [pid 5071] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5110] close(12 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] getdents64(3, [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(17 [pid 5071] unlink("./4/cgroup.cpu" [pid 5110] close(13 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(18 [pid 5071] <... unlink resumed>) = 0 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] close(14 [pid 5109] close(19 [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] close(15 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(20 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] close(16 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5109] close(21 [pid 5071] unlink("./4/binderfs" [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5110] close(17 [pid 5109] close(22 [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5110] close(18 [pid 5109] close(23 [pid 5071] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] unlink("./3/cgroup.cpu" [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] close(19 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(25 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./4/cgroup" [pid 5110] close(20 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(26 [pid 5071] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] close(21 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(27 [pid 5110] close(22 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./4/memory.events", [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(28 [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5110] close(23 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] unlink("./4/memory.events" [pid 5070] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(29 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] close(24 [pid 5109] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] unlink("./3/binderfs" [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./4/cgroup.net") = 0 [pid 5071] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5109] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=75 /* 0.75 s */} --- [pid 5071] rmdir("./4" [pid 5110] close(25 [pid 5071] <... rmdir resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] close(26 [pid 5070] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./5", 0777 [pid 5110] close(27 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] close(28) = -1 EBADF (Bad file descriptor) [pid 5110] close(29) = -1 EBADF (Bad file descriptor) [pid 5110] exit_group(0) = ? [pid 5075] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... mkdir resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5075] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5117 attached [pid 5110] +++ exited with 0 +++ [pid 5075] newfstatat(3, "", [pid 5070] unlink("./3/cgroup" [pid 5117] set_robust_list(0x5555574d3660, 24 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 7 [pid 5070] <... unlink resumed>) = 0 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(3, [pid 5070] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./3/memory.events", [pid 5117] chdir("./5" [pid 5077] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./3/memory.events" [pid 5117] <... prctl resumed>) = 0 [pid 5117] setpgid(0, 0 [pid 5075] unlink("./4/cgroup.cpu" [pid 5117] <... setpgid resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5070] <... unlink resumed>) = 0 [pid 5117] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5075] <... unlink resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5070] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] <... symlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5075] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5077] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5117] <... symlink resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./4/binderfs" [pid 5070] unlink("./3/cgroup.net" [pid 5117] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] getdents64(3, [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5075] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5117] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] close(3 [pid 5077] unlink("./4/cgroup.cpu" [pid 5075] unlink("./4/cgroup" [pid 5070] <... close resumed>) = 0 [pid 5117] write(3, "1000", 4) = 4 [pid 5117] close(3) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5070] rmdir("./3" [pid 5117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5117] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5077] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... rmdir resumed>) = 0 [pid 5070] mkdir("./4", 0777 [pid 5117] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./4/memory.events", [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5117] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5077] unlink("./4/binderfs" [pid 5075] unlink("./4/memory.events"./strace-static-x86_64: Process 5118 attached [pid 5077] <... unlink resumed>) = 0 [pid 5118] set_robust_list(0x5555574d3660, 24 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 6 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5077] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5118] chdir("./4" [pid 5077] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5118] <... chdir resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5077] unlink("./4/cgroup" [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] setpgid(0, 0) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5077] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5118] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./4/memory.events", [pid 5075] unlink("./4/cgroup.net" [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5118] <... symlink resumed>) = 0 [pid 5077] unlink("./4/memory.events" [pid 5118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5118] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5077] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] <... symlink resumed>) = 0 [pid 5117] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5117] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5117] <... socket resumed>) = 4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5118] <... openat resumed>) = 3 [pid 5117] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0 [pid 5077] unlink("./4/cgroup.net" [pid 5075] <... close resumed>) = 0 [pid 5117] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5118] write(3, "1000", 4 [pid 5117] <... socket resumed>) = 5 [pid 5118] <... write resumed>) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5117] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5075] rmdir("./4" [pid 5117] <... socket resumed>) = 6 [pid 5077] <... unlink resumed>) = 0 [pid 5118] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5077] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 5118] <... openat resumed>) = 3 [pid 5117] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5118] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5117] <... sendto resumed>) = 32 [pid 5077] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] mkdir("./5", 0777 [pid 5077] close(3 [pid 5117] recvfrom(6, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=7}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5077] <... close resumed>) = 0 [pid 5117] recvfrom(6, [pid 5075] <... mkdir resumed>) = 0 [pid 5117] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=7}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5117] close(6) = 0 [pid 5117] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5077] rmdir("./4" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5117] <... openat resumed>) = 6 [pid 5077] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5119 attached [pid 5077] mkdir("./5", 0777 [pid 5119] set_robust_list(0x5555574d3660, 24) = 0 [pid 5119] chdir("./5" [pid 5118] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5117] write(6, "13", 2 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 7 [pid 5117] <... write resumed>) = 2 [pid 5119] <... chdir resumed>) = 0 [pid 5117] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5118] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5117] <... sendmsg resumed>) = 84 [pid 5119] <... prctl resumed>) = 0 [pid 5119] setpgid(0, 0 [pid 5118] <... socket resumed>) = 4 [pid 5118] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5119] <... setpgid resumed>) = 0 [pid 5119] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5118] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5117] close(3 [pid 5119] <... symlink resumed>) = 0 [pid 5118] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5117] <... close resumed>) = 0 [pid 5119] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5118] <... socket resumed>) = 5 [pid 5117] close(4 [pid 5077] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 5118] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5117] <... close resumed>) = 0 [pid 5077] exit_group(1 [pid 5117] close(5) = 0 [pid 5077] <... exit_group resumed>) = ? [pid 5119] <... symlink resumed>) = 0 [pid 5119] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5118] <... socket resumed>) = 6 [pid 5117] close(6 [pid 5118] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5117] <... close resumed>) = 0 [pid 5119] <... symlink resumed>) = 0 [pid 5117] close(7 [pid 5118] <... sendto resumed>) = 32 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(8) = -1 EBADF (Bad file descriptor) [pid 5117] close(9) = -1 EBADF (Bad file descriptor) [pid 5117] close(10) = -1 EBADF (Bad file descriptor) [pid 5117] close(11) = -1 EBADF (Bad file descriptor) [pid 5117] close(12) = -1 EBADF (Bad file descriptor) [pid 5117] close(13) = -1 EBADF (Bad file descriptor) [pid 5117] close(14) = -1 EBADF (Bad file descriptor) [pid 5117] close(15) = -1 EBADF (Bad file descriptor) [pid 5117] close(16) = -1 EBADF (Bad file descriptor) [pid 5117] close(17) = -1 EBADF (Bad file descriptor) [pid 5117] close(18) = -1 EBADF (Bad file descriptor) [pid 5117] close(19) = -1 EBADF (Bad file descriptor) [pid 5117] close(20) = -1 EBADF (Bad file descriptor) [pid 5117] close(21) = -1 EBADF (Bad file descriptor) [pid 5117] close(22) = -1 EBADF (Bad file descriptor) [pid 5117] close(23) = -1 EBADF (Bad file descriptor) [pid 5117] close(24) = -1 EBADF (Bad file descriptor) [pid 5117] close(25) = -1 EBADF (Bad file descriptor) [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5118] recvfrom(6, [pid 5117] close(26) = -1 EBADF (Bad file descriptor) [pid 5117] close(27 [pid 5119] <... openat resumed>) = 3 [pid 5118] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] +++ exited with 1 +++ [pid 5119] write(3, "1000", 4 [pid 5118] recvfrom(6, [pid 5119] <... write resumed>) = 4 [pid 5118] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5119] close(3 [pid 5118] close(6 [pid 5117] close(28 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=1, si_utime=0, si_stime=56 /* 0.56 s */} --- [pid 5119] <... close resumed>) = 0 [pid 5118] <... close resumed>) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5118] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] <... symlink resumed>) = 0 [pid 5119] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5117] close(29) = -1 EBADF (Bad file descriptor) [pid 5118] <... openat resumed>) = 6 [pid 5117] exit_group(0 [pid 5118] write(6, "13", 2) = 2 [pid 5118] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5117] <... exit_group resumed>) = ? [pid 5119] <... openat resumed>) = 3 [pid 5118] <... sendmsg resumed>) = 84 [pid 5119] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5118] close(3 [pid 5119] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5118] <... close resumed>) = 0 [pid 5117] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5118] close(4) = 0 [pid 5119] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5118] close(5 [pid 5119] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5118] <... close resumed>) = 0 [pid 5119] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5118] close(6 [pid 5119] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5118] <... close resumed>) = 0 [pid 5118] close(7 [pid 5071] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5119] <... socket resumed>) = 5 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5119] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5118] close(8 [pid 5071] <... openat resumed>) = 3 [pid 5119] <... socket resumed>) = 6 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(3, "", [pid 5119] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5118] close(9) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5118] close(10 [pid 5119] <... sendto resumed>) = 32 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] getdents64(3, 0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5119] recvfrom(6, [pid 5118] close(11 [pid 5119] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=7}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] recvfrom(6, [pid 5118] close(12 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=7}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(6 [pid 5118] close(13 [pid 5071] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5119] <... close resumed>) = 0 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(14 [pid 5119] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] <... openat resumed>) = 6 [pid 5118] close(15 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] unlink("./5/cgroup.cpu" [pid 5118] close(16) = -1 EBADF (Bad file descriptor) [pid 5118] close(17) = -1 EBADF (Bad file descriptor) [pid 5119] write(6, "13", 2 [pid 5118] close(18 [pid 5071] <... unlink resumed>) = 0 [pid 5119] <... write resumed>) = 2 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5118] close(19 [pid 5071] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] close(20 [pid 5071] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5118] close(21) = -1 EBADF (Bad file descriptor) [pid 5118] close(22) = -1 EBADF (Bad file descriptor) [pid 5071] unlink("./5/binderfs" [pid 5118] close(23 [pid 5071] <... unlink resumed>) = 0 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(24) = -1 EBADF (Bad file descriptor) [pid 5118] close(25 [pid 5071] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] close(26) = -1 EBADF (Bad file descriptor) [pid 5118] close(27) = -1 EBADF (Bad file descriptor) [pid 5118] close(28) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5118] close(29) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5118] exit_group(0 [pid 5071] unlink("./5/cgroup") = 0 [pid 5118] <... exit_group resumed>) = ? [pid 5071] umount2("./5/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./5/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./5/memory.events" [pid 5118] +++ exited with 0 +++ [ 136.945690][ T5119] FAULT_INJECTION: forcing a failure. [ 136.945690][ T5119] name failslab, interval 1, probability 0, space 0, times 0 [ 136.962139][ T5119] CPU: 0 PID: 5119 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 136.975364][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 136.988623][ T5119] Call Trace: [ 136.992109][ T5119] [ 136.996073][ T5119] dump_stack_lvl+0x125/0x1b0 [ 137.002888][ T5119] should_fail_ex+0x496/0x5b0 [ 137.009599][ T5119] should_failslab+0x9/0x20 [ 137.015706][ T5119] kmem_cache_alloc_node+0x64/0x4a0 [ 137.022372][ T5119] __alloc_skb+0x287/0x330 [ 137.032054][ T5119] ? __napi_build_skb+0x50/0x50 [ 137.039671][ T5119] ? mark_held_locks+0x9f/0xe0 [ 137.045291][ T5119] ? do_raw_spin_lock+0x12e/0x2b0 [ 137.051175][ T5119] ? spin_bug+0x1d0/0x1d0 [ 137.056812][ T5119] skb_copy+0x12c/0x2e0 [ 137.061082][ T5119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.068253][ T5119] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 137.076072][ T5119] ? hwsim_virtio_rx_work+0x390/0x390 [ 137.082344][ T5119] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 137.090810][ T5119] mac80211_hwsim_tx+0x7a2/0x25d0 [ 137.097377][ T5119] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 137.105087][ T5119] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 137.115288][ T5119] ? __local_bh_enable_ip+0xa4/0x120 [ 137.122373][ T5119] ieee80211_queue_skb+0x1299/0x1fb0 [ 137.129975][ T5119] ieee80211_tx+0x2e2/0x420 [ 137.134599][ T5119] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 137.141582][ T5119] ? mutex_destroy+0x2a/0x100 [ 137.148057][ T5119] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 137.154997][ T5119] ? ieee80211_skb_resize+0x22a/0x620 [ 137.162627][ T5119] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 137.170366][ T5119] ieee80211_xmit+0x30e/0x3e0 [ 137.176601][ T5119] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 137.186798][ T5119] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 137.195676][ T5119] ieee80211_tx_control_port+0x616/0xe10 [ 137.202274][ T5119] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 137.210580][ T5119] ? netdev_run_todo+0x85b/0x12e0 [ 137.217224][ T5119] ? ref_tracker_alloc+0x2ef/0x5a0 [ 137.227238][ T5119] ? generic_xdp_install+0x4c0/0x4c0 [ 137.235504][ T5119] nl80211_tx_control_port+0x5ad/0xa20 [ 137.242212][ T5119] ? nl80211_put_regdom+0x9b0/0x9b0 [ 137.251751][ T5119] ? nl80211_pre_doit+0x1b0/0xb10 [ 137.260212][ T5119] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 137.266690][ T5119] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 137.276211][ T5119] ? ns_capable+0xd5/0x110 [ 137.282247][ T5119] genl_rcv_msg+0x561/0x800 [ 137.288570][ T5119] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 137.295877][ T5119] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 137.305073][ T5119] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 137.313376][ T5119] ? nl80211_put_regdom+0x9b0/0x9b0 [ 137.325601][ T5119] ? nl80211_get_power_save+0x480/0x480 [ 137.334320][ T5119] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 137.341031][ T5119] netlink_rcv_skb+0x16b/0x440 [ 137.347794][ T5119] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 137.362839][ T5119] ? netlink_ack+0x1380/0x1380 [ 137.369397][ T5119] ? down_read+0xc9/0x330 [ 137.376589][ T5119] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 137.383238][ T5119] ? netlink_deliver_tap+0x1a0/0xd00 [ 137.391238][ T5119] genl_rcv+0x28/0x40 [ 137.396387][ T5119] netlink_unicast+0x53b/0x810 [ 137.403666][ T5119] ? netlink_attachskb+0x880/0x880 [ 137.409748][ T5119] netlink_sendmsg+0x93c/0xe40 [ 137.415357][ T5119] ? netlink_unicast+0x810/0x810 [ 137.423428][ T5119] ? netlink_unicast+0x810/0x810 [ 137.430671][ T5119] __sock_sendmsg+0xd5/0x180 [ 137.437171][ T5119] ____sys_sendmsg+0x6ac/0x940 [ 137.444805][ T5119] ? copy_msghdr_from_user+0x10b/0x160 [ 137.455277][ T5119] ? kernel_sendmsg+0x50/0x50 [ 137.461925][ T5119] ? hlock_class+0x4e/0x130 [ 137.470480][ T5119] ___sys_sendmsg+0x135/0x1d0 [ 137.478253][ T5119] ? do_recvmmsg+0x740/0x740 [ 137.487323][ T5119] ? recalc_sigpending_tsk+0x187/0x1d0 [ 137.496351][ T5119] ? __fget_light+0x1fc/0x260 [ 137.501626][ T5119] __sys_sendmsg+0x117/0x1e0 [ 137.508765][ T5119] ? __sys_sendmsg_sock+0x30/0x30 [ 137.514916][ T5119] ? ptrace_notify+0xf4/0x130 [ 137.522887][ T5119] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 137.531291][ T5119] do_syscall_64+0x40/0x110 [ 137.537494][ T5119] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 137.544874][ T5119] RIP: 0033:0x7f95460762a9 [ 137.551399][ T5119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 137.583681][ T5119] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.598403][ T5119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 137.608286][ T5119] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 137.618068][ T5119] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 137.628241][ T5119] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5070] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./5/cgroup.net" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5119] <... sendmsg resumed>) = 84 [pid 5070] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5119] close(3 [pid 5071] getdents64(3, [pid 5119] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5119] close(4 [pid 5070] newfstatat(3, "", [pid 5119] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x5555574d46f0 /* 7 entries */, 32768) = 216 [ 137.639266][ T5119] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000005 [ 137.651622][ T5119] [pid 5070] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] close(5 [pid 5071] close(3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5119] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./4/cgroup.cpu") = 0 [pid 5070] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./4/binderfs") = 0 [pid 5070] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5119] close(6 [pid 5071] rmdir("./5" [pid 5119] <... close resumed>) = 0 [pid 5070] unlink("./4/cgroup") = 0 [pid 5070] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./4/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./4/memory.events") = 0 [pid 5119] close(7 [pid 5071] <... rmdir resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./4/cgroup.net" [pid 5119] close(8 [pid 5071] mkdir("./6", 0777 [pid 5070] <... unlink resumed>) = 0 [pid 5070] getdents64(3, [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... mkdir resumed>) = 0 [pid 5119] close(9 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(10 [pid 5070] close(3 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(11 [pid 5070] <... close resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] rmdir("./4" [pid 5119] close(12) = -1 EBADF (Bad file descriptor) [pid 5119] close(13 [pid 5070] <... rmdir resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(14) = -1 EBADF (Bad file descriptor) [pid 5119] close(15) = -1 EBADF (Bad file descriptor) [pid 5119] close(16) = -1 EBADF (Bad file descriptor) [pid 5119] close(17 [pid 5070] mkdir("./5", 0777 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(18 [pid 5070] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5120 attached [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] set_robust_list(0x5555574d3660, 24 [pid 5119] close(19 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 8 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(20 [pid 5120] chdir("./6" [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... chdir resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5119] close(21./strace-static-x86_64: Process 5121 attached [pid 5120] <... prctl resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] setpgid(0, 0 [pid 5121] set_robust_list(0x5555574d3660, 24 [pid 5119] close(22 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 7 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(23) = -1 EBADF (Bad file descriptor) [pid 5120] <... setpgid resumed>) = 0 [pid 5119] close(24 [pid 5120] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(25 [pid 5121] <... set_robust_list resumed>) = 0 [pid 5120] <... symlink resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] chdir("./5" [pid 5119] close(26 [pid 5120] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5121] <... chdir resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5120] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5119] close(27 [pid 5121] <... prctl resumed>) = 0 [pid 5120] <... symlink resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] setpgid(0, 0 [pid 5119] close(28 [pid 5121] <... setpgid resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5121] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5120] <... openat resumed>) = 3 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(29 [pid 5120] write(3, "1000", 4 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... symlink resumed>) = 0 [pid 5120] <... write resumed>) = 4 [pid 5119] exit_group(0 [pid 5120] close(3 [pid 5119] <... exit_group resumed>) = ? [pid 5121] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5120] <... close resumed>) = 0 [pid 5121] <... symlink resumed>) = 0 [pid 5120] symlink("/dev/binderfs", "./binderfs" [pid 5119] +++ exited with 0 +++ [pid 5121] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5120] <... symlink resumed>) = 0 [pid 5121] <... symlink resumed>) = 0 [pid 5120] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5120] <... openat resumed>) = 3 [pid 5075] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5120] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5075] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] newfstatat(3, "", [pid 5121] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5121] <... openat resumed>) = 3 [pid 5075] getdents64(3, 0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5121] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5075] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./5/cgroup.cpu") = 0 [pid 5075] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./5/binderfs") = 0 [pid 5075] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./5/cgroup") = 0 [pid 5075] umount2("./5/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./5/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./5/memory.events") = 0 [pid 5075] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5121] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5120] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5075] unlink("./5/cgroup.net" [pid 5121] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5120] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5121] <... socket resumed>) = 4 [pid 5121] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5120] <... socket resumed>) = 4 [pid 5075] <... unlink resumed>) = 0 [pid 5121] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] getdents64(3, [pid 5121] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5121] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5120] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5075] close(3 [pid 5121] <... socket resumed>) = 6 [pid 5120] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] <... close resumed>) = 0 [pid 5120] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5121] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5120] <... socket resumed>) = 5 [pid 5075] rmdir("./5" [pid 5121] recvfrom(6, [pid 5120] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5075] <... rmdir resumed>) = 0 [pid 5121] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=7}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5120] <... socket resumed>) = 6 [pid 5121] recvfrom(6, [pid 5120] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] mkdir("./6", 0777 [pid 5121] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=7}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] <... mkdir resumed>) = 0 [pid 5121] close(6 [pid 5120] <... sendto resumed>) = 32 [pid 5121] <... close resumed>) = 0 [pid 5120] recvfrom(6, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5121] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5120] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=8}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 ./strace-static-x86_64: Process 5123 attached [pid 5121] <... openat resumed>) = 6 [pid 5120] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=8}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5123] set_robust_list(0x5555574d3660, 24 [pid 5120] close(6 [pid 5121] write(6, "13", 2 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 8 [pid 5121] <... write resumed>) = 2 [pid 5120] <... close resumed>) = 0 [ 138.062666][ T5121] FAULT_INJECTION: forcing a failure. [ 138.062666][ T5121] name failslab, interval 1, probability 0, space 0, times 0 [ 138.079893][ T5121] CPU: 1 PID: 5121 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 138.091469][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 138.107376][ T5121] Call Trace: [ 138.110727][ T5121] [ 138.114841][ T5121] dump_stack_lvl+0x125/0x1b0 [ 138.120814][ T5121] should_fail_ex+0x496/0x5b0 [ 138.127317][ T5121] should_failslab+0x9/0x20 [ 138.133353][ T5121] kmem_cache_alloc_node+0x64/0x4a0 [ 138.140270][ T5121] __alloc_skb+0x287/0x330 [ 138.147199][ T5121] ? __napi_build_skb+0x50/0x50 [ 138.154059][ T5121] ? mark_held_locks+0x9f/0xe0 [ 138.161695][ T5121] ? do_raw_spin_lock+0x12e/0x2b0 [ 138.168605][ T5121] ? spin_bug+0x1d0/0x1d0 [ 138.175673][ T5121] skb_copy+0x12c/0x2e0 [ 138.181222][ T5121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.191895][ T5121] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 138.200028][ T5121] ? hwsim_virtio_rx_work+0x390/0x390 [ 138.210016][ T5121] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 138.220368][ T5121] mac80211_hwsim_tx+0x7a2/0x25d0 [ 138.227538][ T5121] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 138.236665][ T5121] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 138.244541][ T5121] ? __local_bh_enable_ip+0xa4/0x120 [ 138.253099][ T5121] ieee80211_queue_skb+0x1299/0x1fb0 [ 138.261142][ T5121] ieee80211_tx+0x2e2/0x420 [ 138.266741][ T5121] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 138.272787][ T5121] ? mutex_destroy+0x2a/0x100 [ 138.279786][ T5121] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 138.288495][ T5121] ? ieee80211_skb_resize+0x22a/0x620 [ 138.296593][ T5121] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 138.302919][ T5121] ieee80211_xmit+0x30e/0x3e0 [ 138.307720][ T5121] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 138.315673][ T5121] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 138.326132][ T5121] ieee80211_tx_control_port+0x616/0xe10 [ 138.333460][ T5121] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 138.343321][ T5121] ? netdev_run_todo+0x85b/0x12e0 [ 138.349927][ T5121] ? ref_tracker_alloc+0x2ef/0x5a0 [ 138.355869][ T5121] ? generic_xdp_install+0x4c0/0x4c0 [ 138.364244][ T5121] nl80211_tx_control_port+0x5ad/0xa20 [ 138.373716][ T5121] ? nl80211_put_regdom+0x9b0/0x9b0 [ 138.381285][ T5121] ? nl80211_pre_doit+0x1b0/0xb10 [ 138.389851][ T5121] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 138.398525][ T5121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 138.409145][ T5121] ? ns_capable+0xd5/0x110 [ 138.415223][ T5121] genl_rcv_msg+0x561/0x800 [ 138.420828][ T5121] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 138.427722][ T5121] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 138.436463][ T5121] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 138.444144][ T5121] ? nl80211_put_regdom+0x9b0/0x9b0 [ 138.451597][ T5121] ? nl80211_get_power_save+0x480/0x480 [ 138.460429][ T5121] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 138.470113][ T5121] netlink_rcv_skb+0x16b/0x440 [ 138.479974][ T5121] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 138.494705][ T5121] ? netlink_ack+0x1380/0x1380 [ 138.500872][ T5121] ? down_read+0xc9/0x330 [ 138.505336][ T5121] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 138.511542][ T5121] ? netlink_deliver_tap+0x1a0/0xd00 [ 138.519764][ T5121] genl_rcv+0x28/0x40 [ 138.525117][ T5121] netlink_unicast+0x53b/0x810 [ 138.533306][ T5121] ? netlink_attachskb+0x880/0x880 [ 138.542914][ T5121] netlink_sendmsg+0x93c/0xe40 [ 138.548664][ T5121] ? netlink_unicast+0x810/0x810 [ 138.557681][ T5121] ? netlink_unicast+0x810/0x810 [ 138.563663][ T5121] __sock_sendmsg+0xd5/0x180 [ 138.569643][ T5121] ____sys_sendmsg+0x6ac/0x940 [ 138.576440][ T5121] ? copy_msghdr_from_user+0x10b/0x160 [ 138.585646][ T5121] ? kernel_sendmsg+0x50/0x50 [ 138.592910][ T5121] ? hlock_class+0x4e/0x130 [ 138.599937][ T5121] ___sys_sendmsg+0x135/0x1d0 [ 138.607219][ T5121] ? do_recvmmsg+0x740/0x740 [ 138.613581][ T5121] ? recalc_sigpending_tsk+0x187/0x1d0 [ 138.620410][ T5121] ? __fget_light+0x1fc/0x260 [ 138.625462][ T5121] __sys_sendmsg+0x117/0x1e0 [ 138.632510][ T5121] ? __sys_sendmsg_sock+0x30/0x30 [ 138.638455][ T5121] ? ptrace_notify+0xf4/0x130 [ 138.644291][ T5121] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 138.651325][ T5121] do_syscall_64+0x40/0x110 [ 138.656744][ T5121] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 138.666109][ T5121] RIP: 0033:0x7f95460762a9 [ 138.672110][ T5121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 138.696482][ T5121] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.706507][ T5121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 138.718337][ T5121] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 138.729924][ T5121] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 138.740779][ T5121] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 138.753055][ T5121] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000005 [pid 5121] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5120] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5123] <... set_robust_list resumed>) = 0 [pid 5123] chdir("./6") = 0 [pid 5120] <... openat resumed>) = 6 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5120] write(6, "13", 2 [pid 5123] <... prctl resumed>) = 0 [pid 5120] <... write resumed>) = 2 [ 138.763774][ T5121] [ 138.784971][ T5120] FAULT_INJECTION: forcing a failure. [ 138.784971][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 138.802242][ T5120] CPU: 0 PID: 5120 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 138.820569][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 138.833912][ T5120] Call Trace: [ 138.837652][ T5120] [ 138.841851][ T5120] dump_stack_lvl+0x125/0x1b0 [ 138.847778][ T5120] should_fail_ex+0x496/0x5b0 [ 138.855144][ T5120] should_failslab+0x9/0x20 [ 138.863849][ T5120] kmem_cache_alloc_node+0x64/0x4a0 [ 138.870302][ T5120] __alloc_skb+0x287/0x330 [ 138.876640][ T5120] ? __napi_build_skb+0x50/0x50 [ 138.883643][ T5120] ? mark_held_locks+0x9f/0xe0 [ 138.892660][ T5120] ? do_raw_spin_lock+0x12e/0x2b0 [ 138.900007][ T5120] ? spin_bug+0x1d0/0x1d0 [ 138.906193][ T5120] skb_copy+0x12c/0x2e0 [ 138.911519][ T5120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.920980][ T5120] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 138.931587][ T5120] ? hwsim_virtio_rx_work+0x390/0x390 [ 138.938677][ T5120] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 138.946710][ T5120] mac80211_hwsim_tx+0x7a2/0x25d0 [ 138.954793][ T5120] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 138.962852][ T5120] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 138.970228][ T5120] ? __local_bh_enable_ip+0xa4/0x120 [ 138.977912][ T5120] ieee80211_queue_skb+0x1299/0x1fb0 [ 138.983862][ T5120] ieee80211_tx+0x2e2/0x420 [ 138.989860][ T5120] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 138.996386][ T5120] ? mutex_destroy+0x2a/0x100 [ 139.005821][ T5120] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 139.013192][ T5120] ? ieee80211_skb_resize+0x22a/0x620 [ 139.021417][ T5120] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 139.029914][ T5120] ieee80211_xmit+0x30e/0x3e0 [ 139.036459][ T5120] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 139.043933][ T5120] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 139.051643][ T5120] ieee80211_tx_control_port+0x616/0xe10 [ 139.059189][ T5120] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 139.066281][ T5120] ? netdev_run_todo+0x85b/0x12e0 [ 139.073811][ T5120] ? ref_tracker_alloc+0x2ef/0x5a0 [ 139.082163][ T5120] ? generic_xdp_install+0x4c0/0x4c0 [ 139.089008][ T5120] nl80211_tx_control_port+0x5ad/0xa20 [ 139.096753][ T5120] ? nl80211_put_regdom+0x9b0/0x9b0 [ 139.108585][ T5120] ? nl80211_pre_doit+0x1b0/0xb10 [ 139.116420][ T5120] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 139.124937][ T5120] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 139.135259][ T5120] ? ns_capable+0xd5/0x110 [ 139.139843][ T5120] genl_rcv_msg+0x561/0x800 [ 139.148329][ T5120] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 139.156408][ T5120] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 139.163571][ T5120] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 139.172170][ T5120] ? nl80211_put_regdom+0x9b0/0x9b0 [ 139.179913][ T5120] ? nl80211_get_power_save+0x480/0x480 [ 139.190330][ T5120] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 139.198032][ T5120] netlink_rcv_skb+0x16b/0x440 [ 139.202935][ T5120] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 139.214269][ T5120] ? netlink_ack+0x1380/0x1380 [ 139.220890][ T5120] ? down_read+0xc9/0x330 [ 139.228092][ T5120] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 139.235026][ T5120] ? netlink_deliver_tap+0x1a0/0xd00 [ 139.242012][ T5120] genl_rcv+0x28/0x40 [ 139.246612][ T5120] netlink_unicast+0x53b/0x810 [ 139.254570][ T5120] ? netlink_attachskb+0x880/0x880 [ 139.261031][ T5120] netlink_sendmsg+0x93c/0xe40 [ 139.268177][ T5120] ? netlink_unicast+0x810/0x810 [ 139.274904][ T5120] ? netlink_unicast+0x810/0x810 [ 139.281562][ T5120] __sock_sendmsg+0xd5/0x180 [ 139.287406][ T5120] ____sys_sendmsg+0x6ac/0x940 [ 139.295240][ T5120] ? copy_msghdr_from_user+0x10b/0x160 [ 139.301981][ T5120] ? kernel_sendmsg+0x50/0x50 [ 139.307758][ T5120] ? hlock_class+0x4e/0x130 [ 139.314288][ T5120] ___sys_sendmsg+0x135/0x1d0 [ 139.322071][ T5120] ? do_recvmmsg+0x740/0x740 [ 139.327675][ T5120] ? recalc_sigpending_tsk+0x187/0x1d0 [ 139.334372][ T5120] ? __fget_light+0x1fc/0x260 [ 139.341747][ T5120] __sys_sendmsg+0x117/0x1e0 [ 139.347303][ T5120] ? __sys_sendmsg_sock+0x30/0x30 [ 139.354067][ T5120] ? ptrace_notify+0xf4/0x130 [ 139.359220][ T5120] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 139.366462][ T5120] do_syscall_64+0x40/0x110 [ 139.371354][ T5120] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 139.386026][ T5120] RIP: 0033:0x7f95460762a9 [ 139.391772][ T5120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 139.416357][ T5120] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.428646][ T5120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 139.438020][ T5120] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 139.450798][ T5120] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [pid 5123] setpgid(0, 0 [pid 5120] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5123] <... setpgid resumed>) = 0 [pid 5121] <... sendmsg resumed>) = 84 [ 139.462588][ T5120] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 139.473173][ T5120] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000006 [ 139.483417][ T5120] [pid 5121] close(3) = 0 [pid 5121] close(4) = 0 [pid 5121] close(5) = 0 [pid 5121] close(6) = 0 [pid 5121] close(7) = -1 EBADF (Bad file descriptor) [pid 5121] close(8) = -1 EBADF (Bad file descriptor) [pid 5121] close(9) = -1 EBADF (Bad file descriptor) [pid 5121] close(10) = -1 EBADF (Bad file descriptor) [pid 5121] close(11) = -1 EBADF (Bad file descriptor) [pid 5121] close(12) = -1 EBADF (Bad file descriptor) [pid 5121] close(13) = -1 EBADF (Bad file descriptor) [pid 5121] close(14) = -1 EBADF (Bad file descriptor) [pid 5121] close(15) = -1 EBADF (Bad file descriptor) [pid 5121] close(16) = -1 EBADF (Bad file descriptor) [pid 5121] close(17) = -1 EBADF (Bad file descriptor) [pid 5121] close(18) = -1 EBADF (Bad file descriptor) [pid 5121] close(19) = -1 EBADF (Bad file descriptor) [pid 5121] close(20) = -1 EBADF (Bad file descriptor) [pid 5123] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5121] close(21 [pid 5120] <... sendmsg resumed>) = 84 [pid 5123] <... symlink resumed>) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(3) = 0 [pid 5121] close(22) = -1 EBADF (Bad file descriptor) [pid 5120] close(4 [pid 5121] close(23 [pid 5120] <... close resumed>) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(24 [pid 5120] close(5) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(6 [pid 5121] close(25 [pid 5120] <... close resumed>) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(7) = -1 EBADF (Bad file descriptor) [pid 5121] close(26) = -1 EBADF (Bad file descriptor) [pid 5120] close(8 [pid 5121] close(27 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(9 [pid 5123] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5121] close(28 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(10 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(29 [pid 5120] close(11 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(12 [pid 5121] exit_group(0 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... exit_group resumed>) = ? [pid 5123] <... symlink resumed>) = 0 [pid 5120] close(13 [pid 5121] +++ exited with 0 +++ [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(14 [pid 5123] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5120] close(15 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(16 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5123] <... symlink resumed>) = 0 [pid 5120] close(17) = -1 EBADF (Bad file descriptor) [pid 5120] close(18) = -1 EBADF (Bad file descriptor) [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] close(19 [pid 5123] write(3, "1000", 4 [pid 5070] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5123] <... write resumed>) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5123] close(3 [pid 5120] close(20 [pid 5123] <... close resumed>) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5123] <... symlink resumed>) = 0 [pid 5120] close(21 [pid 5123] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5123] <... openat resumed>) = 3 [pid 5120] close(22 [pid 5070] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5123] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(23) = -1 EBADF (Bad file descriptor) [pid 5120] close(24) = -1 EBADF (Bad file descriptor) [pid 5120] close(25) = -1 EBADF (Bad file descriptor) [pid 5120] close(26 [pid 5070] <... openat resumed>) = 3 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] newfstatat(3, "", [pid 5120] close(27 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(28) = -1 EBADF (Bad file descriptor) [pid 5120] close(29) = -1 EBADF (Bad file descriptor) [pid 5120] exit_group(0) = ? [pid 5120] +++ exited with 0 +++ [pid 5070] getdents64(3, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] unlink("./5/cgroup.cpu") = 0 [pid 5071] <... openat resumed>) = 3 [pid 5123] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5071] newfstatat(3, "", [pid 5070] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5070] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5123] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5123] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5070] unlink("./5/binderfs" [pid 5123] <... socket resumed>) = 5 [pid 5123] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5123] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5071] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] <... sendto resumed>) = 32 [pid 5070] <... unlink resumed>) = 0 [pid 5123] recvfrom(6, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=8}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5123] recvfrom(6, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=8}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5123] close(6 [pid 5071] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5123] <... close resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5123] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5071] unlink("./6/cgroup.cpu" [pid 5123] <... openat resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./5/cgroup" [pid 5071] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./6/binderfs") = 0 [pid 5123] write(6, "13", 2 [pid 5071] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] <... write resumed>) = 2 [ 139.781847][ T5123] FAULT_INJECTION: forcing a failure. [ 139.781847][ T5123] name failslab, interval 1, probability 0, space 0, times 0 [ 139.797240][ T5123] CPU: 0 PID: 5123 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 139.807887][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 139.820343][ T5123] Call Trace: [ 139.827149][ T5123] [ 139.831697][ T5123] dump_stack_lvl+0x125/0x1b0 [ 139.837539][ T5123] should_fail_ex+0x496/0x5b0 [ 139.844924][ T5123] should_failslab+0x9/0x20 [ 139.852726][ T5123] kmem_cache_alloc_node+0x64/0x4a0 [ 139.858673][ T5123] __alloc_skb+0x287/0x330 [ 139.863503][ T5123] ? __napi_build_skb+0x50/0x50 [ 139.869557][ T5123] ? mark_held_locks+0x9f/0xe0 [ 139.876675][ T5123] ? do_raw_spin_lock+0x12e/0x2b0 [ 139.883738][ T5123] ? spin_bug+0x1d0/0x1d0 [ 139.889712][ T5123] skb_copy+0x12c/0x2e0 [ 139.894531][ T5123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.901525][ T5123] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 139.910527][ T5123] ? hwsim_virtio_rx_work+0x390/0x390 [ 139.917092][ T5123] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 139.924813][ T5123] mac80211_hwsim_tx+0x7a2/0x25d0 [ 139.931171][ T5123] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 139.939669][ T5123] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 139.949304][ T5123] ? __local_bh_enable_ip+0xa4/0x120 [ 139.958724][ T5123] ieee80211_queue_skb+0x1299/0x1fb0 [ 139.964668][ T5123] ieee80211_tx+0x2e2/0x420 [ 139.972195][ T5123] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 139.983147][ T5123] ? mutex_destroy+0x2a/0x100 [ 139.990574][ T5123] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 139.998592][ T5123] ? ieee80211_skb_resize+0x22a/0x620 [ 140.004016][ T5123] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 140.015174][ T5123] ieee80211_xmit+0x30e/0x3e0 [ 140.021937][ T5123] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 140.029958][ T5123] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 140.041092][ T5123] ieee80211_tx_control_port+0x616/0xe10 [ 140.048911][ T5123] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 140.056787][ T5123] ? netdev_run_todo+0x85b/0x12e0 [ 140.062675][ T5123] ? ref_tracker_alloc+0x2ef/0x5a0 [ 140.071990][ T5123] ? generic_xdp_install+0x4c0/0x4c0 [ 140.081362][ T5123] nl80211_tx_control_port+0x5ad/0xa20 [ 140.090133][ T5123] ? nl80211_put_regdom+0x9b0/0x9b0 [ 140.097292][ T5123] ? nl80211_pre_doit+0x1b0/0xb10 [ 140.106383][ T5123] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 140.114087][ T5123] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 140.123461][ T5123] ? ns_capable+0xd5/0x110 [ 140.129274][ T5123] genl_rcv_msg+0x561/0x800 [ 140.136653][ T5123] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 140.143473][ T5123] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 140.152425][ T5123] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 140.160530][ T5123] ? nl80211_put_regdom+0x9b0/0x9b0 [ 140.167247][ T5123] ? nl80211_get_power_save+0x480/0x480 [ 140.174538][ T5123] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 140.182000][ T5123] netlink_rcv_skb+0x16b/0x440 [ 140.188189][ T5123] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 140.200611][ T5123] ? netlink_ack+0x1380/0x1380 [ 140.208099][ T5123] ? down_read+0xc9/0x330 [ 140.214793][ T5123] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 140.224213][ T5123] ? netlink_deliver_tap+0x1a0/0xd00 [ 140.233674][ T5123] genl_rcv+0x28/0x40 [ 140.239204][ T5123] netlink_unicast+0x53b/0x810 [ 140.245982][ T5123] ? netlink_attachskb+0x880/0x880 [ 140.253291][ T5123] netlink_sendmsg+0x93c/0xe40 [ 140.260847][ T5123] ? netlink_unicast+0x810/0x810 [ 140.268332][ T5123] ? netlink_unicast+0x810/0x810 [ 140.276283][ T5123] __sock_sendmsg+0xd5/0x180 [ 140.283197][ T5123] ____sys_sendmsg+0x6ac/0x940 [ 140.290986][ T5123] ? copy_msghdr_from_user+0x10b/0x160 [ 140.298573][ T5123] ? kernel_sendmsg+0x50/0x50 [ 140.305880][ T5123] ? hlock_class+0x4e/0x130 [ 140.312768][ T5123] ___sys_sendmsg+0x135/0x1d0 [ 140.320980][ T5123] ? do_recvmmsg+0x740/0x740 [ 140.327415][ T5123] ? recalc_sigpending_tsk+0x187/0x1d0 [ 140.336015][ T5123] ? __fget_light+0x1fc/0x260 [ 140.343022][ T5123] __sys_sendmsg+0x117/0x1e0 [ 140.349069][ T5123] ? __sys_sendmsg_sock+0x30/0x30 [ 140.355658][ T5123] ? ptrace_notify+0xf4/0x130 [ 140.361294][ T5123] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 140.370661][ T5123] do_syscall_64+0x40/0x110 [ 140.377044][ T5123] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 140.386236][ T5123] RIP: 0033:0x7f95460762a9 [ 140.393215][ T5123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 140.422006][ T5123] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.433240][ T5123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 140.445012][ T5123] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 140.457889][ T5123] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 140.468956][ T5123] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [pid 5123] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5070] umount2("./5/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./6/cgroup" [ 140.482762][ T5123] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000006 [ 140.492963][ T5123] [pid 5070] newfstatat(AT_FDCWD, "./5/memory.events", [pid 5123] <... sendmsg resumed>) = 84 [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5123] close(3 [pid 5071] umount2("./6/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] unlink("./5/memory.events" [pid 5123] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5123] close(4) = 0 [pid 5071] newfstatat(AT_FDCWD, "./6/memory.events", [pid 5123] close(5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5123] <... close resumed>) = 0 [pid 5123] close(6 [pid 5071] unlink("./6/memory.events" [pid 5123] <... close resumed>) = 0 [pid 5123] close(7) = -1 EBADF (Bad file descriptor) [pid 5123] close(8) = -1 EBADF (Bad file descriptor) [pid 5123] close(9) = -1 EBADF (Bad file descriptor) [pid 5123] close(10) = -1 EBADF (Bad file descriptor) [pid 5123] close(11) = -1 EBADF (Bad file descriptor) [pid 5123] close(12) = -1 EBADF (Bad file descriptor) [pid 5123] close(13) = -1 EBADF (Bad file descriptor) [pid 5123] close(14) = -1 EBADF (Bad file descriptor) [pid 5123] close(15) = -1 EBADF (Bad file descriptor) [pid 5123] close(16) = -1 EBADF (Bad file descriptor) [pid 5123] close(17) = -1 EBADF (Bad file descriptor) [pid 5123] close(18) = -1 EBADF (Bad file descriptor) [pid 5123] close(19) = -1 EBADF (Bad file descriptor) [pid 5123] close(20) = -1 EBADF (Bad file descriptor) [pid 5123] close(21) = -1 EBADF (Bad file descriptor) [pid 5123] close(22) = -1 EBADF (Bad file descriptor) [pid 5123] close(23) = -1 EBADF (Bad file descriptor) [pid 5123] close(24) = -1 EBADF (Bad file descriptor) [pid 5123] close(25) = -1 EBADF (Bad file descriptor) [pid 5123] close(26) = -1 EBADF (Bad file descriptor) [pid 5123] close(27) = -1 EBADF (Bad file descriptor) [pid 5123] close(28) = -1 EBADF (Bad file descriptor) [pid 5123] close(29) = -1 EBADF (Bad file descriptor) [pid 5123] exit_group(0) = ? [pid 5123] +++ exited with 0 +++ [pid 5070] <... unlink resumed>) = 0 [pid 5070] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5075] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./5/cgroup.net" [pid 5075] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5075] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] unlink("./6/cgroup.net" [pid 5070] getdents64(3, [pid 5075] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] close(3 [pid 5075] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5070] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] rmdir("./5" [pid 5075] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5071] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5075] unlink("./6/cgroup.cpu" [pid 5070] mkdir("./6", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5071] rmdir("./6") = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5075] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] mkdir("./7", 0777 [pid 5075] unlink("./6/binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5124 attached [pid 5075] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5124] set_robust_list(0x5555574d3660, 24 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 8 [pid 5075] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./6/cgroup") = 0 [pid 5075] umount2("./6/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./6/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./6/memory.events") = 0 [pid 5075] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5125 attached [pid 5124] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 9 [pid 5125] set_robust_list(0x5555574d3660, 24 [pid 5124] chdir("./6" [pid 5075] unlink("./6/cgroup.net" [pid 5124] <... chdir resumed>) = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5125] <... set_robust_list resumed>) = 0 [pid 5124] <... prctl resumed>) = 0 [pid 5125] chdir("./7" [pid 5124] setpgid(0, 0) = 0 [pid 5125] <... chdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5124] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] getdents64(3, [pid 5125] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5125] setpgid(0, 0 [pid 5075] close(3 [pid 5125] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5125] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5075] rmdir("./6" [pid 5125] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5125] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5124] <... symlink resumed>) = 0 [pid 5075] mkdir("./7", 0777 [pid 5125] <... symlink resumed>) = 0 [pid 5124] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5124] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5125] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5124] <... symlink resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5124] <... openat resumed>) = 3 [pid 5125] <... openat resumed>) = 3 [pid 5125] write(3, "1000", 4 [pid 5124] write(3, "1000", 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5125] <... write resumed>) = 4 [pid 5125] close(3 [pid 5124] <... write resumed>) = 4 [pid 5125] <... close resumed>) = 0 [pid 5124] close(3 [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5124] <... close resumed>) = 0 [pid 5125] <... symlink resumed>) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5125] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5124] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5125] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0./strace-static-x86_64: Process 5126 attached [pid 5124] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 9 [pid 5126] set_robust_list(0x5555574d3660, 24) = 0 [pid 5126] chdir("./7") = 0 [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5126] setpgid(0, 0) = 0 [pid 5126] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5126] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5126] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5126] write(3, "1000", 4) = 4 [pid 5126] close(3) = 0 [pid 5126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5126] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5125] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5124] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5126] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5124] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5125] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5126] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5124] <... socket resumed>) = 4 [pid 5126] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5125] <... socket resumed>) = 4 [pid 5124] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5126] <... socket resumed>) = 4 [pid 5125] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5124] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5126] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5125] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5124] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5126] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5125] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5126] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5125] <... socket resumed>) = 5 [pid 5124] <... socket resumed>) = 5 [pid 5126] <... socket resumed>) = 5 [pid 5125] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5124] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5126] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5125] <... socket resumed>) = 6 [pid 5124] <... socket resumed>) = 6 [pid 5124] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5126] <... socket resumed>) = 6 [pid 5125] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5124] <... sendto resumed>) = 32 [pid 5126] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5125] <... sendto resumed>) = 32 [pid 5124] recvfrom(6, [pid 5126] <... sendto resumed>) = 32 [pid 5125] recvfrom(6, [pid 5124] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=8}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5126] recvfrom(6, [pid 5125] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=9}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5124] recvfrom(6, [pid 5126] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=9}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5125] recvfrom(6, [pid 5124] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=8}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5126] recvfrom(6, [pid 5125] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=9}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5124] close(6 [pid 5126] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=9}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5125] close(6 [pid 5124] <... close resumed>) = 0 [pid 5126] close(6 [pid 5125] <... close resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5126] <... close resumed>) = 0 [pid 5125] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5126] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5125] <... openat resumed>) = 6 [pid 5124] <... openat resumed>) = 6 [pid 5125] write(6, "13", 2 [pid 5126] <... openat resumed>) = 6 [pid 5125] <... write resumed>) = 2 [pid 5124] write(6, "13", 2 [pid 5126] write(6, "13", 2 [pid 5125] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5124] <... write resumed>) = 2 [pid 5126] <... write resumed>) = 2 [pid 5125] <... sendmsg resumed>) = 84 [pid 5124] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5126] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5125] close(3) = 0 [pid 5124] <... sendmsg resumed>) = 84 [pid 5125] close(4 [pid 5126] <... sendmsg resumed>) = 84 [pid 5125] <... close resumed>) = 0 [pid 5124] close(3 [pid 5126] close(3 [pid 5125] close(5 [pid 5126] <... close resumed>) = 0 [pid 5125] <... close resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5126] close(4 [pid 5125] close(6 [pid 5124] close(4 [pid 5126] <... close resumed>) = 0 [pid 5125] <... close resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5126] close(5 [pid 5125] close(7 [pid 5124] close(5 [pid 5126] <... close resumed>) = 0 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = 0 [pid 5126] close(6 [pid 5125] close(8 [pid 5124] close(6 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] <... close resumed>) = 0 [pid 5125] close(9 [pid 5124] <... close resumed>) = 0 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(10) = -1 EBADF (Bad file descriptor) [pid 5125] close(11) = -1 EBADF (Bad file descriptor) [pid 5125] close(12) = -1 EBADF (Bad file descriptor) [pid 5126] close(7 [pid 5124] close(7 [pid 5125] close(13 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(8 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(8 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(14 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(9 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(9 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(15 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(10 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(10 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(16 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(11 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(11 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(17 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(12 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(12 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(18 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(13 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(13 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(19 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(14 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(14 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(20 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(15 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(15 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(21 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(16 [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] close(16 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] close(22 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(17 [pid 5124] close(17 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(18 [pid 5125] close(23 [pid 5124] close(18 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(19 [pid 5125] close(24 [pid 5124] close(19 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(20 [pid 5125] close(25 [pid 5124] close(20 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(21 [pid 5125] close(26 [pid 5124] close(21 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(22 [pid 5125] close(27 [pid 5124] close(22 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(23 [pid 5124] close(23 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(24 [pid 5124] close(24 [pid 5125] close(28 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(25 [pid 5125] close(29 [pid 5124] close(25 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(26 [pid 5124] close(26 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5125] exit_group(0 [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(27 [pid 5125] <... exit_group resumed>) = ? [pid 5124] close(27 [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(28 [pid 5124] close(28) = -1 EBADF (Bad file descriptor) [pid 5124] close(29) = -1 EBADF (Bad file descriptor) [pid 5124] exit_group(0) = ? [pid 5124] +++ exited with 0 +++ [pid 5126] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5126] close(29) = -1 EBADF (Bad file descriptor) [pid 5126] exit_group(0) = ? [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5126] +++ exited with 0 +++ [pid 5125] +++ exited with 0 +++ [pid 5070] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5070] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5070] newfstatat(3, "", [pid 5075] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] getdents64(3, [pid 5075] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5075] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5071] getdents64(3, [pid 5070] unlink("./6/cgroup.cpu" [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] <... unlink resumed>) = 0 [pid 5075] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5071] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5075] unlink("./7/cgroup.cpu" [pid 5071] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5071] unlink("./7/cgroup.cpu") = 0 [pid 5070] unlink("./6/binderfs" [pid 5075] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5070] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./7/binderfs" [pid 5075] unlink("./7/binderfs" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5075] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5070] unlink("./6/cgroup" [pid 5071] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./7/cgroup" [pid 5070] <... unlink resumed>) = 0 [pid 5071] unlink("./7/cgroup") = 0 [pid 5070] umount2("./6/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5071] umount2("./7/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./7/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./6/memory.events", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./7/memory.events", [pid 5070] unlink("./6/memory.events" [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./7/memory.events", [pid 5070] <... unlink resumed>) = 0 [pid 5075] unlink("./7/memory.events" [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./7/cgroup.net") = 0 [pid 5075] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5071] unlink("./7/memory.events" [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./7" [pid 5071] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./8", 0777) = 0 [pid 5070] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./6/cgroup.net" [pid 5071] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5070] <... unlink resumed>) = 0 [pid 5070] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... close resumed>) = 0 [pid 5071] unlink("./7/cgroup.net" [pid 5070] rmdir("./6" [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5070] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5128 attached [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5128] set_robust_list(0x5555574d3660, 24 [pid 5071] close(3 [pid 5128] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5128] chdir("./8" [pid 5070] mkdir("./7", 0777 [pid 5128] <... chdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 10 [pid 5071] rmdir("./7" [pid 5070] <... mkdir resumed>) = 0 [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5128] setpgid(0, 0) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5128] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5129 attached [pid 5128] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5071] mkdir("./8", 0777 [pid 5129] set_robust_list(0x5555574d3660, 24 [pid 5128] <... symlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5128] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5129] <... set_robust_list resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 9 [pid 5129] chdir("./7" [pid 5128] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5129] <... chdir resumed>) = 0 [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5129] setpgid(0, 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5129] <... setpgid resumed>) = 0 [pid 5128] <... openat resumed>) = 3 [pid 5129] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5128] write(3, "1000", 4) = 4 [pid 5128] close(3) = 0 [pid 5128] symlink("/dev/binderfs", "./binderfs" [pid 5129] <... symlink resumed>) = 0 [pid 5128] <... symlink resumed>) = 0 [pid 5129] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 ./strace-static-x86_64: Process 5130 attached [pid 5128] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 10 [pid 5130] set_robust_list(0x5555574d3660, 24 [pid 5129] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5128] <... openat resumed>) = 3 [pid 5129] <... symlink resumed>) = 0 [pid 5130] <... set_robust_list resumed>) = 0 [pid 5130] chdir("./8") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5128] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5129] <... openat resumed>) = 3 [pid 5130] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5129] write(3, "1000", 4 [pid 5130] <... symlink resumed>) = 0 [pid 5129] <... write resumed>) = 4 [pid 5129] close(3) = 0 [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5130] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5129] <... symlink resumed>) = 0 [pid 5130] <... symlink resumed>) = 0 [pid 5129] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5129] <... openat resumed>) = 3 [pid 5130] write(3, "1000", 4) = 4 [pid 5130] close(3 [pid 5129] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5130] <... close resumed>) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5130] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5130] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0) = -1 ENOSPC (No space left on device) [pid 5129] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5128] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5128] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5129] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5130] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5129] <... socket resumed>) = 4 [pid 5128] <... socket resumed>) = 4 [pid 5130] <... socket resumed>) = 4 [pid 5129] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5128] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5129] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5130] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5129] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5128] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5130] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5129] <... socket resumed>) = 5 [pid 5128] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5130] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5128] <... socket resumed>) = 5 [pid 5130] <... socket resumed>) = 5 [pid 5129] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5128] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5130] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5129] <... socket resumed>) = 6 [pid 5128] <... socket resumed>) = 6 [pid 5128] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5130] <... socket resumed>) = 6 [pid 5129] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5128] <... sendto resumed>) = 32 [pid 5130] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5129] <... sendto resumed>) = 32 [pid 5130] <... sendto resumed>) = 32 [pid 5129] recvfrom(6, [pid 5128] recvfrom(6, [pid 5130] recvfrom(6, [pid 5129] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=9}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5130] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=10}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5129] recvfrom(6, [pid 5128] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=10}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5130] recvfrom(6, [pid 5129] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=9}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5128] recvfrom(6, [pid 5130] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=10}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5129] close(6 [pid 5128] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=10}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5130] close(6 [pid 5129] <... close resumed>) = 0 [pid 5128] close(6 [pid 5130] <... close resumed>) = 0 [pid 5129] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5130] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5129] <... openat resumed>) = 6 [pid 5128] <... close resumed>) = 0 [pid 5128] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5130] <... openat resumed>) = 6 [pid 5129] write(6, "13", 2 [pid 5128] <... openat resumed>) = 6 [pid 5129] <... write resumed>) = 2 [ 141.373877][ T5129] FAULT_INJECTION: forcing a failure. [ 141.373877][ T5129] name failslab, interval 1, probability 0, space 0, times 0 [ 141.389729][ T5129] CPU: 1 PID: 5129 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 141.402136][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 141.416507][ T5129] Call Trace: [ 141.420066][ T5129] [ 141.424074][ T5129] dump_stack_lvl+0x125/0x1b0 [ 141.431032][ T5129] should_fail_ex+0x496/0x5b0 [ 141.437667][ T5129] should_failslab+0x9/0x20 [ 141.443951][ T5129] kmem_cache_alloc_node+0x64/0x4a0 [ 141.451636][ T5129] __alloc_skb+0x287/0x330 [ 141.456384][ T5129] ? __napi_build_skb+0x50/0x50 [ 141.465677][ T5129] ? mark_held_locks+0x9f/0xe0 [ 141.471686][ T5129] ? do_raw_spin_lock+0x12e/0x2b0 [ 141.477975][ T5129] ? spin_bug+0x1d0/0x1d0 [ 141.484274][ T5129] skb_copy+0x12c/0x2e0 [ 141.488997][ T5129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.498346][ T5129] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 141.508649][ T5129] ? hwsim_virtio_rx_work+0x390/0x390 [ 141.515475][ T5129] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 141.524230][ T5129] mac80211_hwsim_tx+0x7a2/0x25d0 [ 141.532678][ T5129] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 141.540371][ T5129] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 141.549507][ T5129] ? __local_bh_enable_ip+0xa4/0x120 [ 141.556417][ T5129] ieee80211_queue_skb+0x1299/0x1fb0 [ 141.562727][ T5129] ieee80211_tx+0x2e2/0x420 [ 141.570120][ T5129] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 141.579231][ T5129] ? mutex_destroy+0x2a/0x100 [ 141.584666][ T5129] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 141.591842][ T5129] ? ieee80211_skb_resize+0x22a/0x620 [ 141.602767][ T5129] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 141.613573][ T5129] ieee80211_xmit+0x30e/0x3e0 [ 141.619427][ T5129] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 141.628172][ T5129] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 141.635955][ T5129] ieee80211_tx_control_port+0x616/0xe10 [ 141.644516][ T5129] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 141.651952][ T5129] ? netdev_run_todo+0x85b/0x12e0 [ 141.658244][ T5129] ? ref_tracker_alloc+0x2ef/0x5a0 [ 141.663750][ T5129] ? generic_xdp_install+0x4c0/0x4c0 [ 141.670052][ T5129] nl80211_tx_control_port+0x5ad/0xa20 [ 141.680469][ T5129] ? nl80211_put_regdom+0x9b0/0x9b0 [ 141.686554][ T5129] ? nl80211_pre_doit+0x1b0/0xb10 [ 141.693980][ T5129] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 141.699984][ T5129] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 141.711211][ T5129] ? ns_capable+0xd5/0x110 [ 141.716126][ T5129] genl_rcv_msg+0x561/0x800 [ 141.723198][ T5129] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 141.731942][ T5129] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 141.738425][ T5129] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 141.747082][ T5129] ? nl80211_put_regdom+0x9b0/0x9b0 [ 141.753501][ T5129] ? nl80211_get_power_save+0x480/0x480 [ 141.760569][ T5129] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 141.768245][ T5129] netlink_rcv_skb+0x16b/0x440 [ 141.776979][ T5129] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 141.785311][ T5129] ? netlink_ack+0x1380/0x1380 [ 141.794161][ T5129] ? down_read+0xc9/0x330 [ 141.799690][ T5129] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 141.808170][ T5129] ? netlink_deliver_tap+0x1a0/0xd00 [ 141.814952][ T5129] genl_rcv+0x28/0x40 [ 141.820970][ T5129] netlink_unicast+0x53b/0x810 [ 141.829947][ T5129] ? netlink_attachskb+0x880/0x880 [ 141.836026][ T5129] netlink_sendmsg+0x93c/0xe40 [ 141.844689][ T5129] ? netlink_unicast+0x810/0x810 [ 141.853127][ T5129] ? netlink_unicast+0x810/0x810 [ 141.860570][ T5129] __sock_sendmsg+0xd5/0x180 [ 141.869161][ T5129] ____sys_sendmsg+0x6ac/0x940 [ 141.874881][ T5129] ? copy_msghdr_from_user+0x10b/0x160 [ 141.885980][ T5129] ? kernel_sendmsg+0x50/0x50 [ 141.894490][ T5129] ? hlock_class+0x4e/0x130 [ 141.900169][ T5129] ___sys_sendmsg+0x135/0x1d0 [ 141.912080][ T5129] ? do_recvmmsg+0x740/0x740 [ 141.919252][ T5129] ? recalc_sigpending_tsk+0x187/0x1d0 [ 141.925205][ T5129] ? __fget_light+0x1fc/0x260 [ 141.933010][ T5129] __sys_sendmsg+0x117/0x1e0 [ 141.938085][ T5129] ? __sys_sendmsg_sock+0x30/0x30 [ 141.945672][ T5129] ? ptrace_notify+0xf4/0x130 [ 141.953781][ T5129] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 141.962440][ T5129] do_syscall_64+0x40/0x110 [ 141.972118][ T5129] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 141.979609][ T5129] RIP: 0033:0x7f95460762a9 [ 141.987683][ T5129] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 142.011409][ T5129] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.023869][ T5129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 142.035107][ T5129] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 142.046096][ T5129] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 142.062470][ T5129] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 142.074860][ T5129] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000007 [ 142.088650][ T5129] [ 142.137187][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 142.137209][ T27] audit: type=1400 audit(1701383560.486:105): avc: denied { rename } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 5128] write(6, "13", 2 [pid 5130] write(6, "13", 2 [pid 5129] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5128] <... write resumed>) = 2 [pid 5128] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5130] <... write resumed>) = 2 [pid 5129] <... sendmsg resumed>) = 84 [pid 5128] <... sendmsg resumed>) = 84 [ 142.186238][ T5130] FAULT_INJECTION: forcing a failure. [ 142.186238][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 142.202427][ T5130] CPU: 1 PID: 5130 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 142.204009][ T27] audit: type=1400 audit(1701383560.486:106): avc: denied { unlink } for pid=4493 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.218704][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 142.218773][ T5130] Call Trace: [ 142.218787][ T5130] [ 142.218799][ T5130] dump_stack_lvl+0x125/0x1b0 [pid 5130] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5128] close(3) = 0 [pid 5128] close(4) = 0 [pid 5128] close(5) = 0 [pid 5128] close(6) = 0 [pid 5128] close(7) = -1 EBADF (Bad file descriptor) [pid 5128] close(8) = -1 EBADF (Bad file descriptor) [pid 5128] close(9) = -1 EBADF (Bad file descriptor) [pid 5128] close(10) = -1 EBADF (Bad file descriptor) [pid 5128] close(11) = -1 EBADF (Bad file descriptor) [pid 5128] close(12) = -1 EBADF (Bad file descriptor) [pid 5128] close(13) = -1 EBADF (Bad file descriptor) [pid 5128] close(14) = -1 EBADF (Bad file descriptor) [pid 5128] close(15) = -1 EBADF (Bad file descriptor) [pid 5128] close(16) = -1 EBADF (Bad file descriptor) [pid 5128] close(17) = -1 EBADF (Bad file descriptor) [pid 5128] close(18) = -1 EBADF (Bad file descriptor) [pid 5128] close(19) = -1 EBADF (Bad file descriptor) [pid 5128] close(20) = -1 EBADF (Bad file descriptor) [pid 5128] close(21) = -1 EBADF (Bad file descriptor) [pid 5128] close(22) = -1 EBADF (Bad file descriptor) [pid 5128] close(23) = -1 EBADF (Bad file descriptor) [pid 5128] close(24) = -1 EBADF (Bad file descriptor) [pid 5128] close(25) = -1 EBADF (Bad file descriptor) [pid 5128] close(26) = -1 EBADF (Bad file descriptor) [pid 5128] close(27) = -1 EBADF (Bad file descriptor) [pid 5128] close(28) = -1 EBADF (Bad file descriptor) [pid 5128] close(29) = -1 EBADF (Bad file descriptor) [pid 5128] exit_group(0) = ? [pid 5128] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=74 /* 0.74 s */} --- [pid 5075] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5129] close(3) = 0 [pid 5075] getdents64(3, [pid 5129] close(4) = 0 [pid 5129] close(5) = 0 [pid 5129] close(6 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5129] <... close resumed>) = 0 [pid 5075] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] close(7 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5129] close(8 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5129] close(9 [pid 5075] unlink("./8/cgroup.cpu" [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5129] close(10 [pid 5130] <... sendmsg resumed>) = 84 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] close(3 [pid 5129] close(11 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... close resumed>) = 0 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5130] close(4 [pid 5129] close(12 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] <... close resumed>) = 0 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./8/binderfs" [pid 5130] close(5 [pid 5129] close(13) = -1 EBADF (Bad file descriptor) [pid 5129] close(14) = -1 EBADF (Bad file descriptor) [pid 5129] close(15) = -1 EBADF (Bad file descriptor) [pid 5129] close(16 [pid 5130] <... close resumed>) = 0 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5129] close(17 [pid 5130] close(6 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5129] close(18) = -1 EBADF (Bad file descriptor) [pid 5129] close(19) = -1 EBADF (Bad file descriptor) [pid 5129] close(20) = -1 EBADF (Bad file descriptor) [pid 5129] close(21) = -1 EBADF (Bad file descriptor) [pid 5130] <... close resumed>) = 0 [pid 5129] close(22 [pid 5130] close(7 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5129] close(23 [pid 5130] close(8 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5129] close(24) = -1 EBADF (Bad file descriptor) [pid 5129] close(25) = -1 EBADF (Bad file descriptor) [pid 5129] close(26) = -1 EBADF (Bad file descriptor) [pid 5129] close(27) = -1 EBADF (Bad file descriptor) [pid 5129] close(28 [pid 5130] close(9) = -1 EBADF (Bad file descriptor) [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] close(10 [pid 5129] close(29 [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] close(11 [pid 5129] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] close(12) = -1 EBADF (Bad file descriptor) [ 142.218840][ T5130] should_fail_ex+0x496/0x5b0 [ 142.218890][ T5130] should_failslab+0x9/0x20 [ 142.218924][ T5130] kmem_cache_alloc_node+0x64/0x4a0 [ 142.218973][ T5130] __alloc_skb+0x287/0x330 [ 142.219014][ T5130] ? __napi_build_skb+0x50/0x50 [ 142.219053][ T5130] ? mark_held_locks+0x9f/0xe0 [ 142.219099][ T5130] ? do_raw_spin_lock+0x12e/0x2b0 [ 142.219146][ T5130] ? spin_bug+0x1d0/0x1d0 [pid 5130] close(13 [pid 5075] <... unlink resumed>) = 0 [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] close(14) = -1 EBADF (Bad file descriptor) [pid 5130] close(15) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] close(16 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5130] close(17 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5130] close(18 [pid 5075] unlink("./8/cgroup" [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5130] close(19) = -1 EBADF (Bad file descriptor) [pid 5130] close(20) = -1 EBADF (Bad file descriptor) [pid 5130] close(21) = -1 EBADF (Bad file descriptor) [pid 5130] close(22 [pid 5075] umount2("./8/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] close(23 [pid 5075] newfstatat(AT_FDCWD, "./8/memory.events", [pid 5130] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] close(24) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./8/memory.events" [pid 5130] close(25) = -1 EBADF (Bad file descriptor) [pid 5130] close(26) = -1 EBADF (Bad file descriptor) [pid 5130] close(27) = -1 EBADF (Bad file descriptor) [pid 5130] close(28) = -1 EBADF (Bad file descriptor) [pid 5130] close(29) = -1 EBADF (Bad file descriptor) [pid 5130] exit_group(0) = ? [ 142.219193][ T5130] skb_copy+0x12c/0x2e0 [ 142.219235][ T5130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.219272][ T5130] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 142.219331][ T5130] ? hwsim_virtio_rx_work+0x390/0x390 [ 142.219381][ T5130] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 142.219428][ T5130] mac80211_hwsim_tx+0x7a2/0x25d0 [pid 5075] <... unlink resumed>) = 0 [pid 5130] +++ exited with 0 +++ [pid 5075] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./8/cgroup.net") = 0 [pid 5075] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5071] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./8" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] mkdir("./9", 0777 [ 142.219480][ T5130] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 142.219524][ T5130] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 142.219563][ T5130] ? __local_bh_enable_ip+0xa4/0x120 [ 142.219593][ T5130] ieee80211_queue_skb+0x1299/0x1fb0 [ 142.219627][ T5130] ieee80211_tx+0x2e2/0x420 [ 142.219657][ T5130] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 142.219688][ T5130] ? mutex_destroy+0x2a/0x100 [pid 5071] getdents64(3, 0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5129] exit_group(0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] +++ exited with 0 +++ [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5131 attached [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 11 [pid 5071] unlink("./8/cgroup.cpu" [pid 5131] set_robust_list(0x5555574d3660, 24 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5131] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5131] chdir("./9" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5131] <... chdir resumed>) = 0 [pid 5071] unlink("./8/binderfs" [pid 5070] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... prctl resumed>) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... openat resumed>) = 3 [pid 5131] <... symlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./8/cgroup", [ 142.219723][ T5130] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 142.219748][ T5130] ? ieee80211_skb_resize+0x22a/0x620 [ 142.219775][ T5130] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 142.219800][ T5130] ieee80211_xmit+0x30e/0x3e0 [ 142.219833][ T5130] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 142.219869][ T5130] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 142.219904][ T5130] ieee80211_tx_control_port+0x616/0xe10 [pid 5070] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5131] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5131] <... symlink resumed>) = 0 [pid 5071] unlink("./8/cgroup" [pid 5070] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5131] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5070] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... symlink resumed>) = 0 [pid 5071] umount2("./8/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./8/memory.events", [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./7/cgroup.cpu" [pid 5131] <... openat resumed>) = 3 [pid 5070] <... unlink resumed>) = 0 [pid 5131] write(3, "1000", 4 [pid 5071] unlink("./8/memory.events" [pid 5070] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... write resumed>) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 142.219938][ T5130] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 142.219968][ T5130] ? netdev_run_todo+0x85b/0x12e0 [ 142.220003][ T5130] ? ref_tracker_alloc+0x2ef/0x5a0 [ 142.220033][ T5130] ? generic_xdp_install+0x4c0/0x4c0 [ 142.220069][ T5130] nl80211_tx_control_port+0x5ad/0xa20 [ 142.220108][ T5130] ? nl80211_put_regdom+0x9b0/0x9b0 [pid 5071] <... unlink resumed>) = 0 [pid 5131] close(3 [pid 5071] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5131] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5070] unlink("./7/binderfs" [pid 5131] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5131] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5071] unlink("./8/cgroup.net" [pid 5070] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5131] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [ 142.220143][ T5130] ? nl80211_pre_doit+0x1b0/0xb10 [ 142.220184][ T5130] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 142.220211][ T5130] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 142.220244][ T5130] ? ns_capable+0xd5/0x110 [ 142.220279][ T5130] genl_rcv_msg+0x561/0x800 [ 142.220304][ T5130] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 142.220335][ T5130] ? lockdep_hardirqs_on_prepare+0x420/0x420 [pid 5071] getdents64(3, [pid 5070] unlink("./7/cgroup" [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5070] umount2("./7/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./7/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./7/memory.events") = 0 [pid 5071] close(3 [pid 5070] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./8" [pid 5070] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5071] <... rmdir resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] mkdir("./9", 0777 [pid 5070] unlink("./7/cgroup.net") = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5070] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [ 142.220374][ T5130] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 142.220414][ T5130] ? nl80211_put_regdom+0x9b0/0x9b0 [ 142.220447][ T5130] ? nl80211_get_power_save+0x480/0x480 [ 142.220478][ T5130] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 142.220519][ T5130] netlink_rcv_skb+0x16b/0x440 [ 142.220559][ T5130] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [pid 5070] rmdir("./7" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x5555574d3660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 11 [pid 5070] mkdir("./8", 0777 [pid 5132] <... set_robust_list resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5132] chdir("./9") = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5132] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5132] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5132] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 142.220585][ T5130] ? netlink_ack+0x1380/0x1380 [ 142.220627][ T5130] ? down_read+0xc9/0x330 [ 142.220664][ T5130] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 142.220704][ T5130] ? netlink_deliver_tap+0x1a0/0xd00 [ 142.220743][ T5130] genl_rcv+0x28/0x40 [ 142.220781][ T5130] netlink_unicast+0x53b/0x810 [ 142.220822][ T5130] ? netlink_attachskb+0x880/0x880 [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5132] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5132] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 10 ./strace-static-x86_64: Process 5133 attached [ 142.220865][ T5130] netlink_sendmsg+0x93c/0xe40 [ 142.220905][ T5130] ? netlink_unicast+0x810/0x810 [ 142.220946][ T5130] ? netlink_unicast+0x810/0x810 [ 142.220985][ T5130] __sock_sendmsg+0xd5/0x180 [ 142.221017][ T5130] ____sys_sendmsg+0x6ac/0x940 [ 142.221049][ T5130] ? copy_msghdr_from_user+0x10b/0x160 [ 142.221086][ T5130] ? kernel_sendmsg+0x50/0x50 [pid 5131] <... ioctl resumed>) = 0 [pid 5133] set_robust_list(0x5555574d3660, 24) = 0 [pid 5132] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5132] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5132] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5133] chdir("./8" [pid 5132] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5133] <... chdir resumed>) = 0 [pid 5132] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5132] <... socket resumed>) = 5 [pid 5133] <... prctl resumed>) = 0 [pid 5133] setpgid(0, 0 [pid 5132] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5133] <... setpgid resumed>) = 0 [pid 5132] <... socket resumed>) = 6 [pid 5133] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5132] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5133] <... symlink resumed>) = 0 [pid 5132] <... sendto resumed>) = 32 [pid 5131] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5132] recvfrom(6, [pid 5131] <... socket resumed>) = 4 [pid 5132] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=11}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5131] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5133] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5132] recvfrom(6, [pid 5131] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5133] <... symlink resumed>) = 0 [pid 5132] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=11}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5131] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5133] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5132] close(6 [pid 5131] <... socket resumed>) = 5 [pid 5133] <... symlink resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5131] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5132] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5131] <... socket resumed>) = 6 [pid 5132] <... openat resumed>) = 6 [ 142.221116][ T5130] ? hlock_class+0x4e/0x130 [ 142.221152][ T5130] ___sys_sendmsg+0x135/0x1d0 [ 142.221191][ T5130] ? do_recvmmsg+0x740/0x740 [ 142.221245][ T5130] ? recalc_sigpending_tsk+0x187/0x1d0 [ 142.221285][ T5130] ? __fget_light+0x1fc/0x260 [ 142.221315][ T5130] __sys_sendmsg+0x117/0x1e0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5131] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5133] <... openat resumed>) = 3 [pid 5132] write(6, "13", 2 [pid 5131] <... sendto resumed>) = 32 [pid 5133] write(3, "1000", 4 [pid 5132] <... write resumed>) = 2 [pid 5133] <... write resumed>) = 4 [pid 5132] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [ 142.221358][ T5130] ? __sys_sendmsg_sock+0x30/0x30 [ 142.221399][ T5130] ? ptrace_notify+0xf4/0x130 [ 142.221424][ T5130] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 142.221456][ T5130] do_syscall_64+0x40/0x110 [ 142.221484][ T5130] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 142.221530][ T5130] RIP: 0033:0x7f95460762a9 [ 142.221548][ T5130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 142.221576][ T5130] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.221600][ T5130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [pid 5131] recvfrom(6, [pid 5133] close(3 [pid 5132] <... sendmsg resumed>) = 84 [pid 5131] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=11}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5132] close(3 [pid 5131] recvfrom(6, [pid 5132] <... close resumed>) = 0 [pid 5131] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=11}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5132] close(4 [pid 5131] close(6 [pid 5132] <... close resumed>) = 0 [pid 5131] <... close resumed>) = 0 [pid 5132] close(5 [pid 5131] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5132] <... close resumed>) = 0 [pid 5131] <... openat resumed>) = 6 [pid 5131] write(6, "13", 2) = 2 [pid 5132] close(6 [pid 5131] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5133] <... close resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs" [pid 5132] close(7 [pid 5133] <... symlink resumed>) = 0 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5132] close(8 [pid 5133] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... openat resumed>) = 3 [pid 5132] close(9) = -1 EBADF (Bad file descriptor) [pid 5132] close(10) = -1 EBADF (Bad file descriptor) [pid 5132] close(11) = -1 EBADF (Bad file descriptor) [pid 5132] close(12) = -1 EBADF (Bad file descriptor) [pid 5132] close(13 [pid 5133] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5132] close(14) = -1 EBADF (Bad file descriptor) [pid 5132] close(15 [pid 5133] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... socket resumed>) = 4 [pid 5132] close(16 [pid 5133] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 142.221617][ T5130] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 142.221632][ T5130] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 142.221647][ T5130] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [pid 5133] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5132] close(17 [pid 5133] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... socket resumed>) = 5 [pid 5132] close(18 [pid 5133] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... socket resumed>) = 6 [pid 5132] close(19 [pid 5133] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... sendto resumed>) = 32 [pid 5132] close(20 [pid 5133] recvfrom(6, [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=10}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5132] close(21 [pid 5133] recvfrom(6, [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=10}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5132] close(22 [pid 5133] close(6 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... close resumed>) = 0 [pid 5132] close(23 [pid 5133] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... openat resumed>) = 6 [pid 5132] close(24) = -1 EBADF (Bad file descriptor) [pid 5132] close(25) = -1 EBADF (Bad file descriptor) [pid 5133] write(6, "13", 2 [pid 5132] close(26 [pid 5133] <... write resumed>) = 2 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5132] close(27) = -1 EBADF (Bad file descriptor) [ 142.221662][ T5130] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000008 [ 142.221690][ T5130] [ 142.803455][ T5132] FAULT_INJECTION: forcing a failure. [ 142.803455][ T5132] name failslab, interval 1, probability 0, space 0, times 0 [ 142.829545][ T27] audit: type=1400 audit(1701383560.496:107): avc: denied { create } for pid=4493 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.834619][ T5132] CPU: 1 PID: 5132 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 142.834656][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 142.834674][ T5132] Call Trace: [ 142.834685][ T5132] [ 142.834696][ T5132] dump_stack_lvl+0x125/0x1b0 [ 142.834737][ T5132] should_fail_ex+0x496/0x5b0 [ 142.834782][ T5132] should_failslab+0x9/0x20 [ 142.834812][ T5132] kmem_cache_alloc_node+0x64/0x4a0 [ 142.834856][ T5132] __alloc_skb+0x287/0x330 [ 142.834892][ T5132] ? __napi_build_skb+0x50/0x50 [ 142.834925][ T5132] ? mark_held_locks+0x9f/0xe0 [ 142.834962][ T5132] ? do_raw_spin_lock+0x12e/0x2b0 [ 142.835002][ T5132] ? spin_bug+0x1d0/0x1d0 [ 142.835041][ T5132] skb_copy+0x12c/0x2e0 [ 142.835075][ T5132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.835106][ T5132] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 142.835153][ T5132] ? hwsim_virtio_rx_work+0x390/0x390 [ 142.835193][ T5132] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 142.835230][ T5132] mac80211_hwsim_tx+0x7a2/0x25d0 [ 142.835273][ T5132] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 142.835313][ T5132] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 142.835352][ T5132] ? __local_bh_enable_ip+0xa4/0x120 [ 142.835388][ T5132] ieee80211_queue_skb+0x1299/0x1fb0 [ 142.835422][ T5132] ieee80211_tx+0x2e2/0x420 [ 142.835451][ T5132] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 142.835482][ T5132] ? mutex_destroy+0x2a/0x100 [ 142.835518][ T5132] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 142.835542][ T5132] ? ieee80211_skb_resize+0x22a/0x620 [ 142.835569][ T5132] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 142.835595][ T5132] ieee80211_xmit+0x30e/0x3e0 [ 142.835625][ T5132] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 142.835662][ T5132] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 142.835696][ T5132] ieee80211_tx_control_port+0x616/0xe10 [ 142.835731][ T5132] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 142.835761][ T5132] ? netdev_run_todo+0x85b/0x12e0 [ 142.835795][ T5132] ? ref_tracker_alloc+0x2ef/0x5a0 [ 142.835825][ T5132] ? generic_xdp_install+0x4c0/0x4c0 [ 142.835863][ T5132] nl80211_tx_control_port+0x5ad/0xa20 [ 142.835902][ T5132] ? nl80211_put_regdom+0x9b0/0x9b0 [ 142.835937][ T5132] ? nl80211_pre_doit+0x1b0/0xb10 [ 142.835977][ T5132] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 142.836004][ T5132] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 142.836039][ T5132] ? ns_capable+0xd5/0x110 [ 142.836075][ T5132] genl_rcv_msg+0x561/0x800 [ 142.836099][ T5132] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 142.836125][ T5132] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 142.836164][ T5132] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 142.836204][ T5132] ? nl80211_put_regdom+0x9b0/0x9b0 [ 142.836237][ T5132] ? nl80211_get_power_save+0x480/0x480 [ 142.836269][ T5132] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 142.836310][ T5132] netlink_rcv_skb+0x16b/0x440 [ 142.836349][ T5132] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 142.836382][ T5132] ? netlink_ack+0x1380/0x1380 [ 142.836423][ T5132] ? down_read+0xc9/0x330 [ 142.836460][ T5132] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 142.836500][ T5132] ? netlink_deliver_tap+0x1a0/0xd00 [ 142.836539][ T5132] genl_rcv+0x28/0x40 [ 142.836577][ T5132] netlink_unicast+0x53b/0x810 [ 142.836617][ T5132] ? netlink_attachskb+0x880/0x880 [ 142.836661][ T5132] netlink_sendmsg+0x93c/0xe40 [ 142.836698][ T5132] ? netlink_unicast+0x810/0x810 [ 142.836735][ T5132] ? netlink_unicast+0x810/0x810 [ 142.836771][ T5132] __sock_sendmsg+0xd5/0x180 [ 142.836801][ T5132] ____sys_sendmsg+0x6ac/0x940 [ 142.836830][ T5132] ? copy_msghdr_from_user+0x10b/0x160 [ 142.836864][ T5132] ? kernel_sendmsg+0x50/0x50 [ 142.836892][ T5132] ? hlock_class+0x4e/0x130 [ 142.836925][ T5132] ___sys_sendmsg+0x135/0x1d0 [ 142.836960][ T5132] ? do_recvmmsg+0x740/0x740 [ 142.836999][ T5132] ? recalc_sigpending_tsk+0x187/0x1d0 [ 142.837036][ T5132] ? __fget_light+0x1fc/0x260 [ 142.837071][ T5132] __sys_sendmsg+0x117/0x1e0 [ 142.837113][ T5132] ? __sys_sendmsg_sock+0x30/0x30 [ 142.837150][ T5132] ? ptrace_notify+0xf4/0x130 [ 142.837174][ T5132] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 142.837205][ T5132] do_syscall_64+0x40/0x110 [ 142.837248][ T5132] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 142.837286][ T5132] RIP: 0033:0x7f95460762a9 [ 142.837304][ T5132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 142.837327][ T5132] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.837416][ T5132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 142.837449][ T5132] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 142.837466][ T5132] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 142.837481][ T5132] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 142.837498][ T5132] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000009 [ 142.837520][ T5132] [ 142.934584][ T5131] FAULT_INJECTION: forcing a failure. [ 142.934584][ T5131] name failslab, interval 1, probability 0, space 0, times 0 [ 143.044016][ T5131] CPU: 1 PID: 5131 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 143.788115][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 143.802726][ T5131] Call Trace: [ 143.807972][ T5131] [ 143.811007][ T5131] dump_stack_lvl+0x125/0x1b0 [ 143.818526][ T5131] should_fail_ex+0x496/0x5b0 [ 143.830135][ T5131] should_failslab+0x9/0x20 [ 143.834698][ T5131] kmem_cache_alloc_node+0x64/0x4a0 [ 143.841278][ T5131] ? genl_family_rcv_msg_doit+0x24b/0x2e0 [ 143.848809][ T5131] __alloc_skb+0x287/0x330 [ 143.855029][ T5131] ? __napi_build_skb+0x50/0x50 [ 143.864442][ T5131] ? ns_capable+0xd5/0x110 [ 143.870682][ T5131] netlink_ack+0x3bb/0x1380 [ 143.880760][ T5131] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 143.887059][ T5131] ? netlink_sendmsg+0xe40/0xe40 [ 143.894414][ T5131] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 143.903723][ T5131] netlink_rcv_skb+0x345/0x440 [ 143.909357][ T5131] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 143.919591][ T5131] ? netlink_ack+0x1380/0x1380 [ 143.926847][ T5131] ? down_read+0xc9/0x330 [ 143.932734][ T5131] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 143.941386][ T5131] ? netlink_deliver_tap+0x1a0/0xd00 [ 143.949377][ T5131] genl_rcv+0x28/0x40 [ 143.955074][ T5131] netlink_unicast+0x53b/0x810 [ 143.961817][ T5131] ? netlink_attachskb+0x880/0x880 [ 143.971186][ T5131] netlink_sendmsg+0x93c/0xe40 [ 143.978346][ T5131] ? netlink_unicast+0x810/0x810 [ 143.985803][ T5131] ? netlink_unicast+0x810/0x810 [ 143.993778][ T5131] __sock_sendmsg+0xd5/0x180 [ 144.000776][ T5131] ____sys_sendmsg+0x6ac/0x940 [ 144.006926][ T5131] ? copy_msghdr_from_user+0x10b/0x160 [ 144.016450][ T5131] ? kernel_sendmsg+0x50/0x50 [ 144.023674][ T5131] ? hlock_class+0x4e/0x130 [ 144.030340][ T5131] ___sys_sendmsg+0x135/0x1d0 [ 144.037619][ T5131] ? do_recvmmsg+0x740/0x740 [ 144.045179][ T5131] ? recalc_sigpending_tsk+0x187/0x1d0 [ 144.054627][ T5131] ? __fget_light+0x1fc/0x260 [ 144.062621][ T5131] __sys_sendmsg+0x117/0x1e0 [ 144.069243][ T5131] ? __sys_sendmsg_sock+0x30/0x30 [ 144.077016][ T5131] ? ptrace_notify+0xf4/0x130 [ 144.082617][ T5131] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 144.090384][ T5131] do_syscall_64+0x40/0x110 [ 144.099183][ T5131] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 144.109170][ T5131] RIP: 0033:0x7f95460762a9 [ 144.114406][ T5131] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 144.143928][ T5131] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.155505][ T5131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 144.164923][ T5131] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 144.175632][ T5131] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 144.187327][ T5131] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [pid 5132] close(28 [pid 5133] <... sendmsg resumed>) = 84 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(3 [pid 5132] close(29 [pid 5131] <... sendmsg resumed>) = 84 [pid 5133] <... close resumed>) = 0 [pid 5132] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] close(3 [pid 5133] close(4 [pid 5132] exit_group(0 [pid 5133] <... close resumed>) = 0 [pid 5132] <... exit_group resumed>) = ? [pid 5131] <... close resumed>) = 0 [ 144.197462][ T5131] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 0000000000000009 [ 144.210191][ T5131] [pid 5133] close(5 [pid 5132] +++ exited with 0 +++ [pid 5131] close(4 [pid 5133] <... close resumed>) = 0 [pid 5131] <... close resumed>) = 0 [pid 5133] close(6 [pid 5131] close(5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5131] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5133] <... close resumed>) = 0 [pid 5133] close(7 [pid 5131] close(6 [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... close resumed>) = 0 [pid 5133] close(8) = -1 EBADF (Bad file descriptor) [pid 5131] close(7 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] close(9 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(10) = -1 EBADF (Bad file descriptor) [pid 5133] close(11) = -1 EBADF (Bad file descriptor) [pid 5133] close(12) = -1 EBADF (Bad file descriptor) [pid 5133] close(13) = -1 EBADF (Bad file descriptor) [pid 5133] close(14 [pid 5131] close(8 [pid 5071] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(15 [pid 5131] close(9 [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... openat resumed>) = 3 [pid 5133] close(16 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(17 [pid 5131] close(10 [pid 5071] newfstatat(3, "", [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5133] close(18 [pid 5131] close(11 [pid 5071] getdents64(3, [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5133] close(19) = -1 EBADF (Bad file descriptor) [pid 5131] close(12 [pid 5071] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] close(20 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] close(13 [pid 5133] close(21 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] close(14 [pid 5133] close(22 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(23 [pid 5131] close(15 [pid 5071] unlink("./9/cgroup.cpu" [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(24) = -1 EBADF (Bad file descriptor) [pid 5131] close(16 [pid 5071] <... unlink resumed>) = 0 [pid 5133] close(25) = -1 EBADF (Bad file descriptor) [pid 5133] close(26) = -1 EBADF (Bad file descriptor) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(27 [pid 5131] close(17 [pid 5071] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5131] close(18 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5133] close(28 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] unlink("./9/binderfs" [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] close(19 [pid 5071] <... unlink resumed>) = 0 [pid 5133] close(29 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] close(20 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5133] exit_group(0 [pid 5131] close(21 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] <... exit_group resumed>) = ? [pid 5131] close(22) = -1 EBADF (Bad file descriptor) [pid 5071] unlink("./9/cgroup") = 0 [pid 5133] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5131] close(23) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./9/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] close(24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] newfstatat(AT_FDCWD, "./9/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] close(25 [pid 5071] unlink("./9/memory.events" [pid 5070] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5071] <... unlink resumed>) = 0 [pid 5131] close(26) = -1 EBADF (Bad file descriptor) [pid 5071] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 3 [pid 5131] close(27 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5131] close(28) = -1 EBADF (Bad file descriptor) [pid 5070] newfstatat(3, "", [pid 5131] close(29 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5131] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5070] getdents64(3, [pid 5131] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5131] <... exit_group resumed>) = ? [pid 5131] +++ exited with 0 +++ [pid 5071] unlink("./9/cgroup.net" [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5071] <... unlink resumed>) = 0 [pid 5070] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5075] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5075] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./9" [pid 5075] newfstatat(3, "", [pid 5070] unlink("./8/cgroup.cpu" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5071] mkdir("./10", 0777 [pid 5070] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./8/binderfs") = 0 [pid 5070] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./8/cgroup" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5134 attached [pid 5075] unlink("./9/cgroup.cpu" [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 12 [pid 5070] <... unlink resumed>) = 0 [pid 5134] set_robust_list(0x5555574d3660, 24 [pid 5075] <... unlink resumed>) = 0 [pid 5070] umount2("./8/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] chdir("./10" [pid 5070] newfstatat(AT_FDCWD, "./8/memory.events", [pid 5075] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5134] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./8/memory.events" [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5134] <... prctl resumed>) = 0 [pid 5134] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5134] <... setpgid resumed>) = 0 [pid 5075] unlink("./9/binderfs" [pid 5070] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5134] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5070] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5070] unlink("./8/cgroup.net") = 0 [pid 5070] getdents64(3, 0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5134] <... symlink resumed>) = 0 [pid 5075] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5070] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... close resumed>) = 0 [pid 5075] unlink("./9/cgroup" [pid 5070] rmdir("./8" [pid 5075] <... unlink resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5070] mkdir("./9", 0777 [pid 5134] <... symlink resumed>) = 0 [pid 5075] umount2("./9/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5134] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5075] newfstatat(AT_FDCWD, "./9/memory.events", [pid 5070] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] unlink("./9/memory.events" [pid 5134] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5135 attached [pid 5075] <... unlink resumed>) = 0 [pid 5135] set_robust_list(0x5555574d3660, 24 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 11 [pid 5135] <... set_robust_list resumed>) = 0 [pid 5134] <... openat resumed>) = 3 [pid 5135] chdir("./9" [pid 5134] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] <... write resumed>) = 4 [pid 5135] <... chdir resumed>) = 0 [pid 5134] close(3 [pid 5075] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] <... close resumed>) = 0 [pid 5135] <... prctl resumed>) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5135] setpgid(0, 0 [pid 5134] <... symlink resumed>) = 0 [pid 5075] unlink("./9/cgroup.net" [pid 5135] <... setpgid resumed>) = 0 [pid 5135] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5075] <... unlink resumed>) = 0 [pid 5134] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5075] getdents64(3, [pid 5135] <... symlink resumed>) = 0 [pid 5134] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5135] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5135] <... symlink resumed>) = 0 [pid 5135] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5075] rmdir("./9" [pid 5135] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] mkdir("./10", 0777 [pid 5135] write(3, "1000", 4) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5135] close(3) = 0 [pid 5135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5135] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 ./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x5555574d3660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 12 [pid 5136] <... set_robust_list resumed>) = 0 [pid 5135] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5136] chdir("./10") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5134] <... ioctl resumed>) = 0 [pid 5134] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5134] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5136] <... symlink resumed>) = 0 [pid 5134] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5136] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5134] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5136] <... symlink resumed>) = 0 [pid 5136] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5134] <... socket resumed>) = 5 [pid 5136] <... symlink resumed>) = 0 [pid 5135] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5134] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5136] <... openat resumed>) = 3 [pid 5134] <... socket resumed>) = 6 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5134] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5136] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5135] <... socket resumed>) = 4 [pid 5136] <... openat resumed>) = 3 [pid 5134] <... sendto resumed>) = 32 [pid 5136] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5135] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5134] recvfrom(6, [pid 5136] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5134] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=12}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5135] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5136] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5135] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5134] recvfrom(6, [pid 5136] <... socket resumed>) = 4 [pid 5135] <... socket resumed>) = 5 [pid 5134] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=12}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5136] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0" [pid 5135] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5134] close(6 [pid 5136] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5135] <... socket resumed>) = 6 [pid 5134] <... close resumed>) = 0 [pid 5136] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5135] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5134] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5136] <... socket resumed>) = 5 [pid 5135] <... sendto resumed>) = 32 [pid 5136] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5135] recvfrom(6, [pid 5134] <... openat resumed>) = 6 [pid 5136] <... socket resumed>) = 6 [pid 5135] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=11}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5134] write(6, "13", 2 [pid 5136] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5135] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=11}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5134] <... write resumed>) = 2 [pid 5136] <... sendto resumed>) = 32 [pid 5135] close(6) = 0 [pid 5135] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5136] recvfrom(6, [pid 5134] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5136] <... recvfrom resumed>[{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=12}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 5135] <... openat resumed>) = 6 [pid 5136] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=12}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5136] close(6 [pid 5135] write(6, "13", 2 [pid 5136] <... close resumed>) = 0 [pid 5135] <... write resumed>) = 2 [pid 5135] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5136] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5136] write(6, "13", 2 [pid 5135] <... sendmsg resumed>) = 84 [pid 5134] <... sendmsg resumed>) = 84 [pid 5136] <... write resumed>) = 2 [pid 5135] close(3 [pid 5134] close(3 [ 144.713044][ T5136] FAULT_INJECTION: forcing a failure. [ 144.713044][ T5136] name failslab, interval 1, probability 0, space 0, times 0 [ 144.732032][ T5136] CPU: 0 PID: 5136 Comm: syz-executor600 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 144.745411][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 144.761765][ T5136] Call Trace: [ 144.767620][ T5136] [ 144.771259][ T5136] dump_stack_lvl+0x125/0x1b0 [ 144.778119][ T5136] should_fail_ex+0x496/0x5b0 [ 144.785295][ T5136] should_failslab+0x9/0x20 [ 144.790659][ T5136] kmem_cache_alloc_node+0x64/0x4a0 [ 144.798490][ T5136] __alloc_skb+0x287/0x330 [ 144.807315][ T5136] ? __napi_build_skb+0x50/0x50 [ 144.816399][ T5136] ? mark_held_locks+0x9f/0xe0 [ 144.823373][ T5136] ? do_raw_spin_lock+0x12e/0x2b0 [ 144.833622][ T5136] ? spin_bug+0x1d0/0x1d0 [ 144.838821][ T5136] skb_copy+0x12c/0x2e0 [ 144.850599][ T5136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.857597][ T5136] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 144.868238][ T5136] ? hwsim_virtio_rx_work+0x390/0x390 [ 144.876494][ T5136] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 144.883881][ T5136] mac80211_hwsim_tx+0x7a2/0x25d0 [ 144.891341][ T5136] ieee80211_handle_wake_tx_queue+0x187/0x260 [ 144.898164][ T5136] ? ieee80211_handle_reconfig_failure+0x330/0x330 [ 144.911437][ T5136] ? __local_bh_enable_ip+0xa4/0x120 [ 144.917819][ T5136] ieee80211_queue_skb+0x1299/0x1fb0 [ 144.930368][ T5136] ieee80211_tx+0x2e2/0x420 [ 144.937599][ T5136] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 144.944857][ T5136] ? mutex_destroy+0x2a/0x100 [ 144.951831][ T5136] ? ieee80211_downgrade_queue+0x32b/0x4a0 [ 144.959052][ T5136] ? ieee80211_skb_resize+0x22a/0x620 [ 144.969940][ T5136] ? ieee80211_set_qos_hdr+0x27c/0x3e0 [ 144.979142][ T5136] ieee80211_xmit+0x30e/0x3e0 [ 144.990946][ T5136] __ieee80211_subif_start_xmit+0xa62/0x1400 [ 144.998472][ T5136] ? __ieee80211_xmit_fast+0x2b90/0x2b90 [ 145.007310][ T5136] ieee80211_tx_control_port+0x616/0xe10 [ 145.014635][ T5136] ? ieee80211_tx_skb_tid+0x4f0/0x4f0 [ 145.025065][ T5136] ? netdev_run_todo+0x85b/0x12e0 [ 145.033731][ T5136] ? ref_tracker_alloc+0x2ef/0x5a0 [ 145.041331][ T5136] ? generic_xdp_install+0x4c0/0x4c0 [ 145.048316][ T5136] nl80211_tx_control_port+0x5ad/0xa20 [ 145.055635][ T5136] ? nl80211_put_regdom+0x9b0/0x9b0 [ 145.062204][ T5136] ? nl80211_pre_doit+0x1b0/0xb10 [ 145.069314][ T5136] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 145.076627][ T5136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 145.086909][ T5136] ? ns_capable+0xd5/0x110 [ 145.092546][ T5136] genl_rcv_msg+0x561/0x800 [ 145.102423][ T5136] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 145.108971][ T5136] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 145.115870][ T5136] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 145.123912][ T5136] ? nl80211_put_regdom+0x9b0/0x9b0 [ 145.131008][ T5136] ? nl80211_get_power_save+0x480/0x480 [ 145.138645][ T5136] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 145.148746][ T5136] netlink_rcv_skb+0x16b/0x440 [ 145.159727][ T5136] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 145.170083][ T5136] ? netlink_ack+0x1380/0x1380 [ 145.178976][ T5136] ? down_read+0xc9/0x330 [ 145.184113][ T5136] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 145.195326][ T5136] ? netlink_deliver_tap+0x1a0/0xd00 [ 145.203323][ T5136] genl_rcv+0x28/0x40 [ 145.209174][ T5136] netlink_unicast+0x53b/0x810 [ 145.217143][ T5136] ? netlink_attachskb+0x880/0x880 [ 145.223179][ T5136] netlink_sendmsg+0x93c/0xe40 [ 145.228154][ T5136] ? netlink_unicast+0x810/0x810 [ 145.234189][ T5136] ? netlink_unicast+0x810/0x810 [ 145.241235][ T5136] __sock_sendmsg+0xd5/0x180 [ 145.245866][ T5136] ____sys_sendmsg+0x6ac/0x940 [ 145.253273][ T5136] ? copy_msghdr_from_user+0x10b/0x160 [ 145.259901][ T5136] ? kernel_sendmsg+0x50/0x50 [ 145.265719][ T5136] ? hlock_class+0x4e/0x130 [ 145.272406][ T5136] ___sys_sendmsg+0x135/0x1d0 [ 145.278522][ T5136] ? do_recvmmsg+0x740/0x740 [ 145.285522][ T5136] ? recalc_sigpending_tsk+0x187/0x1d0 [ 145.292536][ T5136] ? __fget_light+0x1fc/0x260 [ 145.298196][ T5136] __sys_sendmsg+0x117/0x1e0 [ 145.302840][ T5136] ? __sys_sendmsg_sock+0x30/0x30 [ 145.310880][ T5136] ? ptrace_notify+0xf4/0x130 [ 145.324383][ T5136] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 145.332059][ T5136] do_syscall_64+0x40/0x110 [ 145.341927][ T5136] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 145.348999][ T5136] RIP: 0033:0x7f95460762a9 [ 145.353675][ T5136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 145.382705][ T5136] RSP: 002b:00007ffe61ec24f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.396074][ T5136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95460762a9 [ 145.408314][ T5136] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [pid 5136] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x66\x00\x8e\x88\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x01\x00\x00\x22\x00\x33\x00\x94\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x01\x06\x00\x00\x00\x00\x00\x4c\x76\xc6\x91\xa2\x93\x76\x25\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5135] <... close resumed>) = 0 [pid 5134] <... close resumed>) = 0 [pid 5135] close(4 [pid 5134] close(4 [pid 5135] <... close resumed>) = 0 [pid 5134] <... close resumed>) = 0 [pid 5134] close(5 [pid 5135] close(5 [pid 5134] <... close resumed>) = 0 [pid 5135] <... close resumed>) = 0 [pid 5134] close(6) = 0 [pid 5134] close(7 [pid 5136] <... sendmsg resumed>) = 84 [pid 5136] close(3 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] <... close resumed>) = 0 [pid 5136] close(4 [pid 5134] close(8 [pid 5136] <... close resumed>) = 0 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(5 [pid 5134] close(9 [pid 5136] <... close resumed>) = 0 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(6 [pid 5134] close(10 [pid 5136] <... close resumed>) = 0 [ 145.418558][ T5136] RBP: 0000000000000002 R08: 00007ffe61ec2296 R09: 0000000000000000 [ 145.428925][ T5136] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffe61ec251c [ 145.439781][ T5136] R13: 00007ffe61ec2540 R14: 00007ffe61ec2580 R15: 000000000000000a [ 145.447958][ T5136] [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(7) = -1 EBADF (Bad file descriptor) [pid 5136] close(8) = -1 EBADF (Bad file descriptor) [pid 5136] close(9) = -1 EBADF (Bad file descriptor) [pid 5136] close(10) = -1 EBADF (Bad file descriptor) [pid 5136] close(11) = -1 EBADF (Bad file descriptor) [pid 5136] close(12) = -1 EBADF (Bad file descriptor) [pid 5136] close(13) = -1 EBADF (Bad file descriptor) [pid 5134] close(11 [pid 5136] close(14 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(12) = -1 EBADF (Bad file descriptor) [pid 5134] close(13) = -1 EBADF (Bad file descriptor) [pid 5134] close(14 [pid 5136] close(15 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(15) = -1 EBADF (Bad file descriptor) [pid 5134] close(16 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(16 [pid 5134] close(17) = -1 EBADF (Bad file descriptor) [pid 5134] close(18) = -1 EBADF (Bad file descriptor) [pid 5135] close(6 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(19 [pid 5136] close(17 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(20 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(18 [pid 5134] close(21 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(19 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(22 [pid 5135] <... close resumed>) = 0 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(20 [pid 5135] close(7 [pid 5134] close(23 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(21 [pid 5135] close(8 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(24 [pid 5136] close(22 [pid 5135] close(9 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(25 [pid 5136] close(23 [pid 5135] close(10 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(24 [pid 5135] close(11 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(25 [pid 5135] close(12 [pid 5134] close(26 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(26 [pid 5135] close(13 [pid 5134] close(27 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(27 [pid 5135] close(14 [pid 5134] close(28 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] close(28 [pid 5135] close(15 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] close(29 [pid 5136] close(29 [pid 5135] close(16 [pid 5136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5136] exit_group(0 [pid 5135] close(17 [pid 5134] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] close(18 [pid 5136] <... exit_group resumed>) = ? [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5135] close(19 [pid 5134] exit_group(0 [pid 5135] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... exit_group resumed>) = ? [pid 5135] close(20) = -1 EBADF (Bad file descriptor) [pid 5135] close(21) = -1 EBADF (Bad file descriptor) [pid 5135] close(22) = -1 EBADF (Bad file descriptor) [pid 5135] close(23) = -1 EBADF (Bad file descriptor) [pid 5135] close(24) = -1 EBADF (Bad file descriptor) [pid 5135] close(25) = -1 EBADF (Bad file descriptor) [pid 5135] close(26) = -1 EBADF (Bad file descriptor) [pid 5135] close(27) = -1 EBADF (Bad file descriptor) [pid 5136] +++ exited with 0 +++ [pid 5135] close(28) = -1 EBADF (Bad file descriptor) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5135] close(29) = -1 EBADF (Bad file descriptor) [pid 5135] exit_group(0) = ? [pid 5135] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5075] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=76 /* 0.76 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 5071] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5070] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 5070] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] getdents64(3, [pid 5075] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5071] unlink("./10/cgroup.cpu" [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(3, "", [pid 5070] unlink("./9/cgroup.cpu" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5070] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./9/binderfs" [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 7 entries */, 32768) = 216 [pid 5070] <... unlink resumed>) = 0 [pid 5075] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5075] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./9/cgroup") = 0 [pid 5070] umount2("./9/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./10/cgroup.cpu") = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./9/memory.events", [pid 5075] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./10/binderfs") = 0 [pid 5075] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./9/memory.events" [pid 5071] unlink("./10/binderfs" [pid 5070] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5070] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5071] newfstatat(AT_FDCWD, "./10/cgroup", [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./9/cgroup.net") = 0 [pid 5071] unlink("./10/cgroup" [pid 5070] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./9" [pid 5071] umount2("./10/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./10/cgroup", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./10/memory.events", [pid 5075] unlink("./10/cgroup" [pid 5070] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] mkdir("./10", 0777) = 0 [pid 5075] umount2("./10/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./10/memory.events" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] newfstatat(AT_FDCWD, "./10/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5137 attached [pid 5075] unlink("./10/memory.events" [pid 5070] <... clone resumed>, child_tidptr=0x5555574d3650) = 12 [pid 5137] set_robust_list(0x5555574d3660, 24 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5137] chdir("./10" [pid 5075] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 5137] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5137] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./10/cgroup.net" [pid 5137] <... setpgid resumed>) = 0 [pid 5137] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5071] <... unlink resumed>) = 0 [pid 5075] unlink("./10/cgroup.net") = 0 [pid 5075] getdents64(3, [pid 5137] <... symlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5075] close(3 [pid 5071] <... getdents64 resumed>0x5555574d46f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./10") = 0 [pid 5071] close(3 [pid 5075] mkdir("./11", 0777 [pid 5137] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./10" [pid 5137] <... symlink resumed>) = 0 [pid 5137] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] mkdir("./11", 0777 [pid 5137] <... symlink resumed>) = 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5138 attached [pid 5071] <... mkdir resumed>) = 0 [pid 5138] set_robust_list(0x5555574d3660, 24 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5137] <... openat resumed>) = 3 [pid 5138] <... set_robust_list resumed>) = 0 [pid 5137] write(3, "1000", 4 [pid 5075] <... clone resumed>, child_tidptr=0x5555574d3650) = 13 [pid 5138] chdir("./11" [pid 5137] <... write resumed>) = 4 [pid 5138] <... chdir resumed>) = 0 [pid 5137] close(3) = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5138] setpgid(0, 0 [pid 5137] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5139 attached [pid 5138] <... setpgid resumed>) = 0 [pid 5139] set_robust_list(0x5555574d3660, 24 [pid 5138] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5137] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555574d3650) = 13 [pid 5139] <... set_robust_list resumed>) = 0 [pid 5138] <... symlink resumed>) = 0 [pid 5137] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5139] chdir("./11" [pid 5138] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5137] <... openat resumed>) = 3 [pid 5139] <... chdir resumed>) = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0 [pid 5138] <... symlink resumed>) = 0 [pid 5137] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [ 145.789058][ T11] ------------[ cut here ]------------ [ 145.799137][ T11] Have pending ack frames! [ 145.810454][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/main.c:1525 ieee80211_free_ack_frame+0x54/0x60 [ 145.824329][ T11] Modules linked in: [pid 5138] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5139] <... setpgid resumed>) = 0 [pid 5138] <... symlink resumed>) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5138] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5138] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 5139] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5139] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5139] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 145.829939][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 145.843235][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 145.855312][ T11] Workqueue: netns cleanup_net [ 145.864282][ T11] RIP: 0010:ieee80211_free_ack_frame+0x54/0x60 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5139] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [ 145.872798][ T11] Code: df be 02 00 00 00 e8 1b 47 7b fe 31 c0 5b 5d c3 e8 21 c2 98 f7 c6 05 0a d8 14 05 01 90 48 c7 c7 20 9c 0b 8c e8 ad e7 5e f7 90 <0f> 0b 90 90 eb c9 66 0f 1f 44 00 00 f3 0f 1e fa 41 57 41 56 41 55 [ 145.904686][ T11] RSP: 0018:ffffc9000031fa00 EFLAGS: 00010282 [ 145.914725][ T11] RAX: 0000000000000000 RBX: ffff888025d48e80 RCX: ffffffff814ca799 [ 145.928537][ T11] RDX: ffff88801a66e080 RSI: ffffffff814ca7a6 RDI: 0000000000000001 [ 145.939888][ T11] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 145.951786][ T11] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 145.960347][ T11] R13: ffffffff89edbe00 R14: 0000000080000000 R15: 0000000000000000 [ 145.973254][ T11] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 145.989377][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.000249][ T11] CR2: 00007f95460a1de0 CR3: 000000002049c000 CR4: 00000000003506f0 [ 146.013290][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.025440][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 146.035495][ T11] Call Trace: [ 146.040740][ T11] [ 146.044340][ T11] ? show_regs+0x8f/0xa0 [ 146.050594][ T11] ? __warn+0xe6/0x390 [ 146.055068][ T11] ? ieee80211_free_ack_frame+0x54/0x60 [ 146.061668][ T11] ? report_bug+0x3bc/0x580 [ 146.067968][ T11] ? handle_bug+0x3d/0x70 [ 146.075175][ T11] ? exc_invalid_op+0x17/0x40 [ 146.081221][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 146.089274][ T11] ? ieee80211_free_hw+0x2f0/0x2f0 [ 146.097045][ T11] ? __warn_printk+0x199/0x350 [ 146.105766][ T11] ? __warn_printk+0x1a6/0x350 [ 146.115332][ T11] ? ieee80211_free_ack_frame+0x54/0x60 [ 146.125015][ T11] idr_for_each+0x141/0x270 [ 146.131549][ T11] ? idr_find+0x50/0x50 [ 146.140285][ T11] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.153089][ T11] ? __phys_addr+0xc6/0x140 [ 146.162434][ T11] ieee80211_free_hw+0xa6/0x2f0 [ 146.170267][ T11] ? kobject_put+0x1f6/0x440 [ 146.180120][ T11] hwsim_exit_net+0x3fe/0x7d0 [ 146.185598][ T11] ? __rhashtable_remove_fast.constprop.0.isra.0+0xcf0/0xcf0 [ 146.197590][ T11] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 146.204185][ T11] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 146.214645][ T11] ? __rhashtable_remove_fast.constprop.0.isra.0+0xcf0/0xcf0 [ 146.225803][ T11] ops_exit_list+0xb0/0x170 [ 146.230737][ T11] cleanup_net+0x505/0xb20 [ 146.238502][ T11] ? unregister_pernet_device+0x80/0x80 [ 146.245452][ T11] process_one_work+0x886/0x15d0 [ 146.251367][ T11] ? wiphy_new_nm+0x2150/0x2150 [ 146.258003][ T11] ? workqueue_congested+0x300/0x300 [ 146.266356][ T11] ? assign_work+0x1a0/0x250 [ 146.272647][ T11] worker_thread+0x8b9/0x1290 [ 146.281628][ T11] ? __kthread_parkme+0x14b/0x220 [ 146.290423][ T11] ? process_one_work+0x15d0/0x15d0 [ 146.298294][ T11] kthread+0x2c6/0x3a0 [ 146.304867][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.310845][ T11] ? kthread_complete_and_exit+0x40/0x40 [ 146.320063][ T11] ret_from_fork+0x45/0x80 [ 146.325551][ T11] ? kthread_complete_and_exit+0x40/0x40 [ 146.333399][ T11] ret_from_fork_asm+0x11/0x20 [ 146.340672][ T11] [ 146.346480][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.359682][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 [ 146.374115][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 146.386900][ T11] Workqueue: netns cleanup_net [ 146.394846][ T11] Call Trace: [ 146.398376][ T11] [ 146.402372][ T11] dump_stack_lvl+0xd9/0x1b0 [ 146.410683][ T11] panic+0x6dc/0x790 [ 146.415699][ T11] ? panic_smp_self_stop+0xa0/0xa0 [ 146.421474][ T11] ? show_trace_log_lvl+0x363/0x4f0 [ 146.428027][ T11] ? check_panic_on_warn+0x1f/0xb0 [ 146.436476][ T11] ? ieee80211_free_ack_frame+0x54/0x60 [ 146.442291][ T11] check_panic_on_warn+0xab/0xb0 [ 146.450707][ T11] __warn+0xf2/0x390 [ 146.455780][ T11] ? ieee80211_free_ack_frame+0x54/0x60 [ 146.464412][ T11] report_bug+0x3bc/0x580 [ 146.471744][ T11] handle_bug+0x3d/0x70 [ 146.476657][ T11] exc_invalid_op+0x17/0x40 [ 146.482860][ T11] asm_exc_invalid_op+0x1a/0x20 [ 146.491267][ T11] RIP: 0010:ieee80211_free_ack_frame+0x54/0x60 [ 146.502947][ T11] Code: df be 02 00 00 00 e8 1b 47 7b fe 31 c0 5b 5d c3 e8 21 c2 98 f7 c6 05 0a d8 14 05 01 90 48 c7 c7 20 9c 0b 8c e8 ad e7 5e f7 90 <0f> 0b 90 90 eb c9 66 0f 1f 44 00 00 f3 0f 1e fa 41 57 41 56 41 55 [ 146.533210][ T11] RSP: 0018:ffffc9000031fa00 EFLAGS: 00010282 [ 146.541613][ T11] RAX: 0000000000000000 RBX: ffff888025d48e80 RCX: ffffffff814ca799 [ 146.551313][ T11] RDX: ffff88801a66e080 RSI: ffffffff814ca7a6 RDI: 0000000000000001 [ 146.564089][ T11] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 146.575943][ T11] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 146.589170][ T11] R13: ffffffff89edbe00 R14: 0000000080000000 R15: 0000000000000000 [ 146.600263][ T11] ? ieee80211_free_hw+0x2f0/0x2f0 [ 146.607879][ T11] ? __warn_printk+0x199/0x350 [ 146.615202][ T11] ? __warn_printk+0x1a6/0x350 [ 146.621626][ T11] idr_for_each+0x141/0x270 [ 146.629489][ T11] ? idr_find+0x50/0x50 [ 146.635734][ T11] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.646646][ T11] ? __phys_addr+0xc6/0x140 [ 146.652623][ T11] ieee80211_free_hw+0xa6/0x2f0 [ 146.659222][ T11] ? kobject_put+0x1f6/0x440 [ 146.664831][ T11] hwsim_exit_net+0x3fe/0x7d0 [ 146.671013][ T11] ? __rhashtable_remove_fast.constprop.0.isra.0+0xcf0/0xcf0 [ 146.687142][ T11] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 146.693609][ T11] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 146.701829][ T11] ? __rhashtable_remove_fast.constprop.0.isra.0+0xcf0/0xcf0 [ 146.712768][ T11] ops_exit_list+0xb0/0x170 [ 146.718400][ T11] cleanup_net+0x505/0xb20 [ 146.724125][ T11] ? unregister_pernet_device+0x80/0x80 [ 146.731927][ T11] process_one_work+0x886/0x15d0 [ 146.738668][ T11] ? wiphy_new_nm+0x2150/0x2150 [ 146.745913][ T11] ? workqueue_congested+0x300/0x300 [ 146.752314][ T11] ? assign_work+0x1a0/0x250 [ 146.758679][ T11] worker_thread+0x8b9/0x1290 [ 146.767191][ T11] ? __kthread_parkme+0x14b/0x220 [ 146.772448][ T11] ? process_one_work+0x15d0/0x15d0 [ 146.778238][ T11] kthread+0x2c6/0x3a0 [ 146.783853][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.791057][ T11] ? kthread_complete_and_exit+0x40/0x40 [ 146.797654][ T11] ret_from_fork+0x45/0x80 [ 146.803691][ T11] ? kthread_complete_and_exit+0x40/0x40 [ 146.812226][ T11] ret_from_fork_asm+0x11/0x20 [ 146.820089][ T11] [ 146.824830][ T11] Kernel Offset: disabled [ 146.831481][ T11] Rebooting in 86400 seconds..