./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3937041335 <...> Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. execve("./syz-executor3937041335", ["./syz-executor3937041335"], 0x7ffc11452e00 /* 10 vars */) = 0 brk(NULL) = 0x555556079000 brk(0x555556079d00) = 0x555556079d00 arch_prctl(ARCH_SET_FS, 0x555556079380) = 0 set_tid_address(0x555556079650) = 5060 set_robust_list(0x555556079660, 24) = 0 rseq(0x555556079ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3937041335", 4096) = 28 getrandom("\x1f\x4a\x10\xe6\x91\xdd\x49\xd9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556079d00 brk(0x55555609ad00) = 0x55555609ad00 brk(0x55555609b000) = 0x55555609b000 mprotect(0x7f69f289d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5060 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [ 74.853587][ T28] audit: type=1400 audit(1709198509.480:86): avc: denied { execmem } for pid=5060 comm="syz-executor393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 newfstatat(1, "", {st_mode=S_IFIFO|0600, st_size=0, ...}, AT_EMPTY_PATH) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "5060", 4) = 4 close(3) = 0 mkdir("./syzkaller.Cp6WAK", 0700) = 0 chmod("./syzkaller.Cp6WAK", 0777) = 0 chdir("./syzkaller.Cp6WAK") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached , child_tidptr=0x555556079650) = 5061 [pid 5061] set_robust_list(0x555556079660, 24) = 0 [pid 5061] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setsid() = 1 [pid 5061] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5061] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5061] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5061] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5061] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5061] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5061] unshare(CLONE_NEWNS) = 0 [pid 5061] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [ 75.133465][ T28] audit: type=1400 audit(1709198509.760:87): avc: denied { mounton } for pid=5061 comm="syz-executor393" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 75.157661][ T28] audit: type=1400 audit(1709198509.760:88): avc: denied { mount } for pid=5061 comm="syz-executor393" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [pid 5061] unshare(CLONE_NEWIPC) = 0 [pid 5061] unshare(CLONE_NEWCGROUP) = 0 [pid 5061] unshare(CLONE_NEWUTS) = 0 [pid 5061] unshare(CLONE_SYSVSEM) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "16777216", 8) = 8 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "536870912", 9) = 9 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1024", 4) = 4 [ 75.203910][ T28] audit: type=1400 audit(1709198509.830:89): avc: denied { mounton } for pid=5061 comm="syz-executor393" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "8192", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1024", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1024", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5061] close(3) = 0 [pid 5061] getpid() = 1 [pid 5061] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5061] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 83.497523][ C0] hrtimer: interrupt took 51595861 ns [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 3 entries */, 32768) = 80 [pid 5061] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./0/binderfs") = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [ 96.127494][ T782] cfg80211: failed to load regulatory.db [pid 5061] rmdir("./0"write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = 0 [pid 5061] mkdir("./1", 0777) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556079650) = 3 ./strace-static-x86_64: Process 5074 attached [pid 5074] set_robust_list(0x555556079660, 24) = 0 [pid 5074] chdir("./1") = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1000", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x01\x00\x00\x1a\x00\x13\x07\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00\x00\xe0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x32\x00\x00\x00\x7f\x00\x00\x01"..., iov_len=316}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5074] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5074] ioctl(3, SIOCGIFINDEX, {ifr_name="team0", ifr_ifindex=15}) = 0 [pid 5074] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5074] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xa4\x00\x00\x00\x24\x00\x0b\x04\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x74\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b"..., iov_len=164}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 164 [pid 5074] sendmsg(-1, NULL, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_BATCH) = -1 EBADF (Bad file descriptor) [pid 5074] close(3) = 0 [pid 5074] close(4) = 0 [pid 5074] close(5) = -1 EBADF (Bad file descriptor) [pid 5074] close(6) = -1 EBADF (Bad file descriptor) [pid 5074] close(7) = -1 EBADF (Bad file descriptor) [pid 5074] close(8) = -1 EBADF (Bad file descriptor) [pid 5074] close(9) = -1 EBADF (Bad file descriptor) [pid 5074] close(10) = -1 EBADF (Bad file descriptor) [pid 5074] close(11) = -1 EBADF (Bad file descriptor) [pid 5074] close(12) = -1 EBADF (Bad file descriptor) [pid 5074] close(13) = -1 EBADF (Bad file descriptor) [pid 5074] close(14) = -1 EBADF (Bad file descriptor) [pid 5074] close(15) = -1 EBADF (Bad file descriptor) [pid 5074] close(16) = -1 EBADF (Bad file descriptor) [pid 5074] close(17) = -1 EBADF (Bad file descriptor) [pid 5074] close(18) = -1 EBADF (Bad file descriptor) [pid 5074] close(19) = -1 EBADF (Bad file descriptor) [pid 5074] close(20) = -1 EBADF (Bad file descriptor) [pid 5074] close(21) = -1 EBADF (Bad file descriptor) [pid 5074] close(22) = -1 EBADF (Bad file descriptor) [pid 5074] close(23) = -1 EBADF (Bad file descriptor) [pid 5074] close(24) = -1 EBADF (Bad file descriptor) [pid 5074] close(25) = -1 EBADF (Bad file descriptor) [pid 5074] close(26) = -1 EBADF (Bad file descriptor) [pid 5074] close(27) = -1 EBADF (Bad file descriptor) [pid 5074] close(28) = -1 EBADF (Bad file descriptor) [pid 5074] close(29) = -1 EBADF (Bad file descriptor) [pid 5074] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5074] exit_group(0) = ? [pid 5074] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 3 entries */, 32768) = 80 [pid 5061] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./1/binderfs") = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./1") = 0 [pid 5061] mkdir("./2", 0777) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached , child_tidptr=0x555556079650) = 4 [pid 5075] set_robust_list(0x555556079660, 24) = 0 [pid 5075] chdir("./2") = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x01\x00\x00\x1a\x00\x13\x07\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00\x00\xe0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x32\x00\x00\x00\x7f\x00\x00\x01"..., iov_len=316}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5061] kill(-4, SIGKILL) = 0 [pid 5075] +++ killed by SIGKILL +++ [pid 5061] kill(4, SIGKILL) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5061] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 3 entries */, 32768) = 80 [pid 5061] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./2/binderfs") = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./2") = 0 [pid 5061] mkdir("./3", 0777) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5078 attached , child_tidptr=0x555556079650) = 5 [pid 5078] set_robust_list(0x555556079660, 24) = 0 [pid 5078] chdir("./3") = 0 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] setpgid(0, 0) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1000", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x01\x00\x00\x1a\x00\x13\x07\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00\x00\xe0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x32\x00\x00\x00\x7f\x00\x00\x01"..., iov_len=316}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5078] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5078] ioctl(3, SIOCGIFINDEX, {ifr_name="team0", ifr_ifindex=15}) = 0 [pid 5078] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5078] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xa4\x00\x00\x00\x24\x00\x0b\x04\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x12\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x0b\x00\x01\x00\x74\x61\x70\x72\x69\x6f\x00\x00\x74\x00\x02\x00\x56\x00\x01\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b"..., iov_len=164}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 164 [pid 5078] sendmsg(-1, NULL, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_BATCH) = -1 EBADF (Bad file descriptor) [pid 5078] close(3) = 0 [pid 5078] close(4) = 0 [pid 5078] close(5) = -1 EBADF (Bad file descriptor) [pid 5078] close(6) = -1 EBADF (Bad file descriptor) [pid 5078] close(7) = -1 EBADF (Bad file descriptor) [pid 5078] close(8) = -1 EBADF (Bad file descriptor) [pid 5078] close(9) = -1 EBADF (Bad file descriptor) [pid 5078] close(10) = -1 EBADF (Bad file descriptor) [pid 5078] close(11) = -1 EBADF (Bad file descriptor) [pid 5078] close(12) = -1 EBADF (Bad file descriptor) [pid 5078] close(13) = -1 EBADF (Bad file descriptor) [pid 5078] close(14) = -1 EBADF (Bad file descriptor) [pid 5078] close(15) = -1 EBADF (Bad file descriptor) [pid 5078] close(16) = -1 EBADF (Bad file descriptor) [pid 5078] close(17) = -1 EBADF (Bad file descriptor) [pid 5078] close(18) = -1 EBADF (Bad file descriptor) [pid 5078] close(19) = -1 EBADF (Bad file descriptor) [pid 5078] close(20) = -1 EBADF (Bad file descriptor) [pid 5078] close(21) = -1 EBADF (Bad file descriptor) [pid 5078] close(22) = -1 EBADF (Bad file descriptor) [pid 5078] close(23) = -1 EBADF (Bad file descriptor) [pid 5078] close(24) = -1 EBADF (Bad file descriptor) [pid 5078] close(25) = -1 EBADF (Bad file descriptor) [pid 5078] close(26) = -1 EBADF (Bad file descriptor) [pid 5078] close(27) = -1 EBADF (Bad file descriptor) [pid 5078] close(28) = -1 EBADF (Bad file descriptor) [pid 5078] close(29) = -1 EBADF (Bad file descriptor) [pid 5078] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = 156 [pid 5078] exit_group(0) = ? [pid 5078] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5061] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 3 entries */, 32768) = 80 [pid 5061] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./3/binderfs") = 0 [pid 5061] getdents64(3, 0x55555607b700 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./3") = 0 [pid 5061] mkdir("./4", 0777) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x555556079660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x555556079650) = 6 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5084] chdir("./4") = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4) = 4 [ 221.775498][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 221.782489][ C1] rcu: 0-...!: (2 ticks this GP) idle=d564/0/0x1 softirq=6987/6987 fqs=0 [ 221.791632][ C1] rcu: (detected by 1, t=10503 jiffies, g=8841, q=363 ncpus=2) [ 221.799274][ C1] Sending NMI from CPU 1 to CPUs 0: [ 221.804487][ C0] NMI backtrace for cpu 0 [ 221.804497][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.8.0-rc6-syzkaller-00024-ge326df53af00 #0 [ 221.804518][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 221.804528][ C0] RIP: 0010:lock_acquire+0x1df/0x520 [ 221.804573][ C0] Code: 48 83 c4 28 e8 d2 61 59 09 b8 ff ff ff ff 65 0f c1 05 fd c5 97 7e 83 f8 01 0f 85 b8 02 00 00 9c 58 f6 c4 02 0f 85 a3 02 00 00 <48> 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 [ 221.804591][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000046 [ 221.804607][ C0] RAX: 0000000000000046 RBX: 1ffff92000000f96 RCX: 00000000d439196c [ 221.804620][ C0] RDX: 0000000000000001 RSI: ffffffff8b0cb6c0 RDI: ffffffff8b6e9a00 [ 221.804632][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff27a97f8 [ 221.804644][ C0] R10: ffffffff93d4bfc7 R11: 0000000000000000 R12: 0000000000000000 [ 221.804656][ C0] R13: 0000000000000000 R14: ffffffff8d7ad220 R15: 0000000000000000 [ 221.804668][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 221.804687][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.804700][ C0] CR2: 0000555556079650 CR3: 0000000077c60000 CR4: 00000000003506f0 [ 221.804712][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.804723][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.804735][ C0] Call Trace: [ 221.804741][ C0] [ 221.804748][ C0] ? show_regs+0x8f/0xa0 [ 221.804775][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 221.804804][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 221.804829][ C0] ? nmi_handle+0x1a9/0x580 [ 221.804846][ C0] ? lock_acquire+0x1df/0x520 [ 221.804868][ C0] ? default_do_nmi+0x6a/0x160 [ 221.804896][ C0] ? exc_nmi+0x170/0x1e0 [ 221.804918][ C0] ? end_repeat_nmi+0xf/0x60 [ 221.804941][ C0] ? lock_acquire+0x1df/0x520 [ 221.804963][ C0] ? lock_acquire+0x1df/0x520 [ 221.804986][ C0] ? lock_acquire+0x1df/0x520 [ 221.805008][ C0] [ 221.805013][ C0] [ 221.805019][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 221.805046][ C0] ? __pfx_lock_release+0x10/0x10 [ 221.805068][ C0] ? do_raw_spin_lock+0x12e/0x2c0 [ 221.805094][ C0] ? taprio_set_budgets+0x1e2/0x310 [ 221.805116][ C0] advance_sched+0x67f/0xc60 [ 221.805137][ C0] ? advance_sched+0x679/0xc60 [ 221.805160][ C0] ? __pfx_advance_sched+0x10/0x10 [ 221.805180][ C0] __hrtimer_run_queues+0x203/0xc30 [ 221.805208][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 221.805233][ C0] ? ktime_get_update_offsets_now+0x3bd/0x620 [ 221.805257][ C0] hrtimer_interrupt+0x31b/0x800 [ 221.805285][ C0] __sysvec_apic_timer_interrupt+0x108/0x400 [ 221.805314][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 221.805343][ C0] [ 221.805348][ C0] [ 221.805354][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.805374][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x30 [ 221.805398][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 40 c2 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 67 ac b5 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 [ 221.805415][ C0] RSP: 0018:ffffffff8d407d68 EFLAGS: 00000246 [ 221.805429][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ac41e6b [ 221.805441][ C0] RDX: 0000000000000001 RSI: ffff888018aff000 RDI: ffff888018aff064 [ 221.805453][ C0] RBP: ffff888018aff064 R08: 0000000000000001 R09: ffffed1017286ded [ 221.805465][ C0] R10: ffff8880b9436f6b R11: 0000000000000000 R12: ffff888019b35800 [ 221.805478][ C0] R13: ffffffff8e311400 R14: 0000000000000000 R15: 0000000000000000 [ 221.805491][ C0] ? ct_kernel_exit+0x13b/0x190 [ 221.805513][ C0] acpi_idle_enter+0xc5/0x160 [ 221.805537][ C0] cpuidle_enter_state+0x85/0x510 [ 221.805558][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 221.805584][ C0] cpuidle_enter+0x4e/0xa0 [ 221.805610][ C0] do_idle+0x31d/0x400 [ 221.805636][ C0] ? __pfx_do_idle+0x10/0x10 [ 221.805663][ C0] cpu_startup_entry+0x50/0x60 [ 221.805690][ C0] rest_init+0x16f/0x2b0 [ 221.805712][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 221.805733][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 221.805768][ C0] arch_call_rest_init+0x13/0x40 [ 221.805789][ C0] start_kernel+0x39f/0x480 [ 221.805809][ C0] x86_64_start_reservations+0x18/0x30 [ 221.805830][ C0] x86_64_start_kernel+0xb2/0xc0 [ 221.805850][ C0] secondary_startup_64_no_verify+0x170/0x17b [ 221.805879][ C0] [ 221.806483][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g8841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 222.249652][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=4581 [ 222.257458][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g8841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 222.268752][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 222.278724][ C1] rcu: RCU grace-period kthread stack dump: [ 222.284615][ C1] task:rcu_preempt state:I stack:28736 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 222.294804][ C1] Call Trace: [ 222.298089][ C1] [ 222.301034][ C1] __schedule+0xf12/0x5c60 [ 222.305475][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 222.310700][ C1] ? __pfx___schedule+0x10/0x10 [ 222.315570][ C1] ? schedule+0x200/0x280 [ 222.319918][ C1] ? __pfx_lock_release+0x10/0x10 [ 222.324958][ C1] ? __pfx___mod_timer+0x10/0x10 [ 222.329911][ C1] ? lock_acquire+0x1ae/0x520 [ 222.334602][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 222.340088][ C1] schedule+0xe9/0x280 [ 222.344179][ C1] schedule_timeout+0x137/0x2a0 [ 222.349061][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 222.354448][ C1] ? __pfx_process_timeout+0x10/0x10 [ 222.359753][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 222.365577][ C1] ? prepare_to_swait_event+0xf4/0x470 [ 222.371054][ C1] rcu_gp_fqs_loop+0x1ec/0xb20 [ 222.375830][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 222.381127][ C1] ? __pfx_lock_release+0x10/0x10 [ 222.386170][ C1] rcu_gp_kthread+0x24b/0x380 [ 222.390861][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 222.396071][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.401280][ C1] ? __kthread_parkme+0x14b/0x220 [ 222.406319][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 222.411532][ C1] kthread+0x2c6/0x3b0 [ 222.415618][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.420834][ C1] ? __pfx_kthread+0x10/0x10 [ 222.425439][ C1] ret_from_fork+0x45/0x80 [ 222.429883][ C1] ? __pfx_kthread+0x10/0x10 [ 222.434487][ C1] ret_from_fork_asm+0x1b/0x30 [ 222.439538][ C1]