./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3687094643 <...> Warning: Permanently added '10.128.1.204' (ECDSA) to the list of known hosts. execve("./syz-executor3687094643", ["./syz-executor3687094643"], 0x7ffcf14d3e00 /* 10 vars */) = 0 brk(NULL) = 0x555556688000 brk(0x555556688d40) = 0x555556688d40 arch_prctl(ARCH_SET_FS, 0x555556688400) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555566886d0) = 5091 set_robust_list(0x5555566886e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fefcfcfad30, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fefcfcfa280}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fefcfcfadd0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fefcfcfa280}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3687094643", 4096) = 28 brk(0x5555566a9d40) = 0x5555566a9d40 brk(0x5555566aa000) = 0x5555566aa000 mprotect(0x7fefcfdbd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fefcfcf4460, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fefcfcfa280}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fefcfcf4460, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fefcfcfa280}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5092 attached , child_tidptr=0x5555566886d0) = 5092 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] set_robust_list(0x5555566886e0, 24) = 0 [pid 5092] getpid(./strace-static-x86_64: Process 5093 attached [pid 5091] <... clone resumed>, child_tidptr=0x5555566886d0) = 5093 [pid 5092] <... getpid resumed>) = 5092 [pid 5092] mkdir("./syzkaller.IHWEvg", 0700 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5093] set_robust_list(0x5555566886e0, 24 [pid 5092] <... mkdir resumed>) = 0 [pid 5092] chmod("./syzkaller.IHWEvg", 0777 [pid 5093] <... set_robust_list resumed>) = 0 [pid 5091] <... clone resumed>, child_tidptr=0x5555566886d0) = 5094 [pid 5092] <... chmod resumed>) = 0 [pid 5092] chdir("./syzkaller.IHWEvg") = 0 [pid 5092] unshare(CLONE_NEWPID [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5093] getpid(./strace-static-x86_64: Process 5095 attached ./strace-static-x86_64: Process 5094 attached [pid 5092] <... unshare resumed>) = 0 [pid 5092] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5091] <... clone resumed>, child_tidptr=0x5555566886d0) = 5095 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... clone resumed>, child_tidptr=0x5555566886d0) = 5096 [pid 5094] set_robust_list(0x5555566886e0, 24 [pid 5093] <... getpid resumed>) = 5093 [pid 5093] mkdir("./syzkaller.v5JmWj", 0700) = 0 ./strace-static-x86_64: Process 5096 attached ./strace-static-x86_64: Process 5097 attached [pid 5091] <... clone resumed>, child_tidptr=0x5555566886d0) = 5097 [pid 5095] set_robust_list(0x5555566886e0, 24 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] chmod("./syzkaller.v5JmWj", 0777 [pid 5094] getpid() = 5094 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] mkdir("./syzkaller.TIx7Um", 0700) = 0 [pid 5093] <... chmod resumed>) = 0 [pid 5093] chdir("./syzkaller.v5JmWj") = 0 [pid 5093] unshare(CLONE_NEWPID) = 0 [pid 5094] chmod("./syzkaller.TIx7Um", 0777) = 0 [pid 5093] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5098 attached [pid 5091] <... clone resumed>, child_tidptr=0x5555566886d0) = 5098 [pid 5097] set_robust_list(0x5555566886e0, 24 [pid 5096] set_robust_list(0x5555566886e0, 24 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5094] chdir("./syzkaller.TIx7Um"./strace-static-x86_64: Process 5099 attached [pid 5093] <... clone resumed>, child_tidptr=0x5555566886d0) = 5099 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5096] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5094] <... chdir resumed>) = 0 [pid 5099] set_robust_list(0x5555566886e0, 24 [pid 5098] set_robust_list(0x5555566886e0, 24 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5095] getpid( [pid 5094] unshare(CLONE_NEWPID [pid 5096] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5094] <... unshare resumed>) = 0 [pid 5094] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] <... set_robust_list resumed>) = 0 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] getpid( [pid 5094] <... clone resumed>, child_tidptr=0x5555566886d0) = 5100 [pid 5095] <... getpid resumed>) = 5095 [pid 5095] mkdir("./syzkaller.g3Xxlq", 0700 [pid 5096] <... prctl resumed>) = 0 [pid 5095] <... mkdir resumed>) = 0 [pid 5098] getpid( [pid 5096] setsid(./strace-static-x86_64: Process 5100 attached [pid 5099] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5098] <... getpid resumed>) = 5098 [pid 5097] <... getpid resumed>) = 5097 [pid 5096] <... setsid resumed>) = 1 [pid 5095] chmod("./syzkaller.g3Xxlq", 0777 [pid 5099] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5098] mkdir("./syzkaller.k9mzmH", 0700 [pid 5096] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5100] set_robust_list(0x5555566886e0, 24 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5098] <... mkdir resumed>) = 0 [pid 5097] mkdir("./syzkaller.N2bmxD", 0700 [pid 5095] <... chmod resumed>) = 0 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5099] <... prctl resumed>) = 0 [pid 5098] chmod("./syzkaller.k9mzmH", 0777 [pid 5097] <... mkdir resumed>) = 0 [pid 5096] <... prlimit64 resumed>NULL) = 0 [pid 5100] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5097] chmod("./syzkaller.N2bmxD", 0777 [pid 5095] chdir("./syzkaller.g3Xxlq" [pid 5100] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5099] setsid( [pid 5098] <... chmod resumed>) = 0 [pid 5097] <... chmod resumed>) = 0 [pid 5096] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] chdir("./syzkaller.N2bmxD" [pid 5095] <... chdir resumed>) = 0 [pid 5100] <... prctl resumed>) = 0 [pid 5097] <... chdir resumed>) = 0 [pid 5100] setsid( [pid 5097] unshare(CLONE_NEWPID [pid 5095] unshare(CLONE_NEWPID [pid 5100] <... setsid resumed>) = 1 [pid 5097] <... unshare resumed>) = 0 [pid 5095] <... unshare resumed>) = 0 [pid 5100] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5097] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] <... setsid resumed>) = 1 [pid 5098] chdir("./syzkaller.k9mzmH" [pid 5096] <... prlimit64 resumed>NULL) = 0 [pid 5099] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5098] <... chdir resumed>) = 0 [pid 5096] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, ./strace-static-x86_64: Process 5102 attached ./strace-static-x86_64: Process 5101 attached [pid 5100] <... prlimit64 resumed>NULL) = 0 [pid 5099] <... prlimit64 resumed>NULL) = 0 [pid 5098] unshare(CLONE_NEWPID [pid 5097] <... clone resumed>, child_tidptr=0x5555566886d0) = 5101 [pid 5096] <... prlimit64 resumed>NULL) = 0 [pid 5100] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5099] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5098] <... unshare resumed>) = 0 [pid 5096] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5095] <... clone resumed>, child_tidptr=0x5555566886d0) = 5102 [pid 5101] set_robust_list(0x5555566886e0, 24 [pid 5100] <... prlimit64 resumed>NULL) = 0 [pid 5099] <... prlimit64 resumed>NULL) = 0 [pid 5098] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] <... prlimit64 resumed>NULL) = 0 [pid 5102] set_robust_list(0x5555566886e0, 24 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5100] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5099] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5096] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5102] <... set_robust_list resumed>) = 0 [pid 5101] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5100] <... prlimit64 resumed>NULL) = 0 [pid 5099] <... prlimit64 resumed>NULL) = 0 [pid 5096] <... prlimit64 resumed>NULL) = 0 ./strace-static-x86_64: Process 5103 attached [pid 5102] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5101] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5100] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5099] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5096] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5103] set_robust_list(0x5555566886e0, 24 [pid 5102] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] <... prlimit64 resumed>NULL) = 0 [pid 5099] <... prlimit64 resumed>NULL) = 0 [pid 5098] <... clone resumed>, child_tidptr=0x5555566886d0) = 5103 [pid 5096] <... prlimit64 resumed>NULL) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5101] <... prctl resumed>) = 0 [pid 5100] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5099] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5103] <... set_robust_list resumed>) = 0 [pid 5102] <... prctl resumed>) = 0 [pid 5101] setsid( [pid 5100] <... prlimit64 resumed>NULL) = 0 [pid 5096] unshare(CLONE_NEWNS [pid 5099] <... prlimit64 resumed>NULL) = 0 [pid 5103] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5102] setsid( [pid 5101] <... setsid resumed>) = 1 [pid 5100] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5102] <... setsid resumed>) = 1 [pid 5101] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5100] <... prlimit64 resumed>NULL) = 0 [pid 5102] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5101] <... prlimit64 resumed>NULL) = 0 [pid 5100] unshare(CLONE_NEWNS [pid 5099] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5096] <... unshare resumed>) = 0 [pid 5103] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5102] <... prlimit64 resumed>NULL) = 0 [pid 5101] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5100] <... unshare resumed>) = 0 [pid 5099] <... prlimit64 resumed>NULL) = 0 [pid 5096] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5102] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5101] <... prlimit64 resumed>NULL) = 0 [pid 5100] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5099] unshare(CLONE_NEWNS [pid 5103] <... prctl resumed>) = 0 [pid 5102] <... prlimit64 resumed>NULL) = 0 [pid 5101] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5100] <... mount resumed>) = 0 [pid 5096] <... mount resumed>) = 0 [pid 5103] setsid( [pid 5102] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5101] <... prlimit64 resumed>NULL) = 0 [pid 5100] unshare(CLONE_NEWIPC [pid 5099] <... unshare resumed>) = 0 [pid 5096] unshare(CLONE_NEWIPC [pid 5103] <... setsid resumed>) = 1 [pid 5102] <... prlimit64 resumed>NULL) = 0 [pid 5101] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5100] <... unshare resumed>) = 0 [pid 5099] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5103] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5102] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5101] <... prlimit64 resumed>NULL) = 0 [pid 5100] unshare(CLONE_NEWCGROUP [pid 5096] <... unshare resumed>) = 0 [pid 5103] <... prlimit64 resumed>NULL) = 0 [pid 5102] <... prlimit64 resumed>NULL) = 0 [pid 5101] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5100] <... unshare resumed>) = 0 [pid 5099] <... mount resumed>) = 0 [pid 5096] unshare(CLONE_NEWCGROUP [pid 5103] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5102] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5101] <... prlimit64 resumed>NULL) = 0 [pid 5100] unshare(CLONE_NEWUTS [pid 5099] unshare(CLONE_NEWIPC [pid 5103] <... prlimit64 resumed>NULL) = 0 [pid 5102] <... prlimit64 resumed>NULL) = 0 [pid 5101] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5100] <... unshare resumed>) = 0 [pid 5096] <... unshare resumed>) = 0 [pid 5102] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5101] <... prlimit64 resumed>NULL) = 0 [pid 5100] unshare(CLONE_SYSVSEM [pid 5103] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5102] <... prlimit64 resumed>NULL) = 0 [pid 5101] unshare(CLONE_NEWNS [pid 5100] <... unshare resumed>) = 0 [pid 5099] <... unshare resumed>) = 0 [pid 5096] unshare(CLONE_NEWUTS [pid 5103] <... prlimit64 resumed>NULL) = 0 [pid 5102] unshare(CLONE_NEWNS [pid 5101] <... unshare resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5099] unshare(CLONE_NEWCGROUP [pid 5103] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5102] <... unshare resumed>) = 0 [pid 5099] <... unshare resumed>) = 0 [pid 5096] <... unshare resumed>) = 0 [pid 5103] <... prlimit64 resumed>NULL) = 0 [pid 5102] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5101] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5100] <... openat resumed>) = 3 [pid 5099] unshare(CLONE_NEWUTS [pid 5096] unshare(CLONE_SYSVSEM [pid 5103] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5102] <... mount resumed>) = 0 [pid 5101] <... mount resumed>) = 0 [pid 5100] write(3, "16777216", 8 [pid 5103] <... prlimit64 resumed>NULL) = 0 [pid 5102] unshare(CLONE_NEWIPC [pid 5101] unshare(CLONE_NEWIPC [pid 5100] <... write resumed>) = 8 [pid 5099] <... unshare resumed>) = 0 [pid 5096] <... unshare resumed>) = 0 [pid 5103] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5102] <... unshare resumed>) = 0 [pid 5101] <... unshare resumed>) = 0 [pid 5100] close(3 [pid 5099] unshare(CLONE_SYSVSEM [pid 5103] <... prlimit64 resumed>NULL) = 0 [pid 5102] unshare(CLONE_NEWCGROUP [pid 5101] unshare(CLONE_NEWCGROUP [pid 5100] <... close resumed>) = 0 [pid 5099] <... unshare resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5103] unshare(CLONE_NEWNS [pid 5102] <... unshare resumed>) = 0 [pid 5101] <... unshare resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5102] unshare(CLONE_NEWUTS [pid 5101] unshare(CLONE_NEWUTS [pid 5100] <... openat resumed>) = 3 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5096] <... openat resumed>) = 3 [pid 5103] <... unshare resumed>) = 0 [pid 5102] <... unshare resumed>) = 0 [pid 5101] <... unshare resumed>) = 0 [pid 5100] write(3, "536870912", 9 [pid 5103] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5102] unshare(CLONE_SYSVSEM [pid 5101] unshare(CLONE_SYSVSEM [pid 5100] <... write resumed>) = 9 [pid 5099] <... openat resumed>) = 3 [pid 5096] write(3, "16777216", 8 [pid 5103] <... mount resumed>) = 0 [pid 5102] <... unshare resumed>) = 0 [pid 5101] <... unshare resumed>) = 0 [pid 5100] close(3 [pid 5099] write(3, "16777216", 8 [pid 5096] <... write resumed>) = 8 [pid 5103] unshare(CLONE_NEWIPC [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5100] <... close resumed>) = 0 [pid 5099] <... write resumed>) = 8 [pid 5096] close(3 [pid 5103] <... unshare resumed>) = 0 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5099] close(3 [pid 5103] unshare(CLONE_NEWCGROUP [pid 5102] write(3, "16777216", 8 [pid 5101] write(3, "16777216", 8 [pid 5100] <... openat resumed>) = 3 [pid 5096] <... close resumed>) = 0 [pid 5103] <... unshare resumed>) = 0 [pid 5102] <... write resumed>) = 8 [pid 5101] <... write resumed>) = 8 [pid 5100] write(3, "1024", 4 [pid 5099] <... close resumed>) = 0 [pid 5103] unshare(CLONE_NEWUTS [pid 5102] close(3 [pid 5101] close(3 [pid 5100] <... write resumed>) = 4 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5103] <... unshare resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] close(3 [pid 5103] unshare(CLONE_SYSVSEM [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5100] <... close resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5096] <... openat resumed>) = 3 [pid 5103] <... unshare resumed>) = 0 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5099] write(3, "536870912", 9 [pid 5096] write(3, "536870912", 9 [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5102] write(3, "536870912", 9 [pid 5101] write(3, "536870912", 9 [pid 5100] <... openat resumed>) = 3 [pid 5103] <... openat resumed>) = 3 [pid 5102] <... write resumed>) = 9 [pid 5101] <... write resumed>) = 9 [pid 5100] write(3, "8192", 4 [pid 5099] <... write resumed>) = 9 [pid 5096] <... write resumed>) = 9 [pid 5103] write(3, "16777216", 8 [pid 5102] close(3 [pid 5101] close(3 [pid 5100] <... write resumed>) = 4 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] close(3 [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5100] <... close resumed>) = 0 [pid 5103] <... write resumed>) = 8 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5099] close(3 [pid 5096] close(3 [pid 5103] close(3 [pid 5102] write(3, "1024", 4 [pid 5101] write(3, "1024", 4 [pid 5100] <... openat resumed>) = 3 [pid 5099] <... close resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5102] <... write resumed>) = 4 [pid 5101] <... write resumed>) = 4 [pid 5100] write(3, "1024", 4 [pid 5096] <... close resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5102] close(3 [pid 5101] close(3 [pid 5100] <... write resumed>) = 4 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5103] <... openat resumed>) = 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] close(3 [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5103] write(3, "536870912", 9 [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5100] <... close resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5103] <... write resumed>) = 9 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5096] <... openat resumed>) = 3 [pid 5103] close(3 [pid 5102] write(3, "8192", 4 [pid 5101] write(3, "8192", 4 [pid 5100] <... openat resumed>) = 3 [pid 5099] write(3, "1024", 4 [pid 5103] <... close resumed>) = 0 [pid 5102] <... write resumed>) = 4 [pid 5101] <... write resumed>) = 4 [pid 5100] write(3, "1024", 4 [pid 5096] write(3, "1024", 4 [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5102] close(3 [pid 5101] close(3 [pid 5100] <... write resumed>) = 4 [pid 5099] <... write resumed>) = 4 [pid 5103] <... openat resumed>) = 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] close(3 [pid 5099] close(3 [pid 5096] <... write resumed>) = 4 [pid 5103] write(3, "1024", 4 [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5100] <... close resumed>) = 0 [pid 5103] <... write resumed>) = 4 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5099] <... close resumed>) = 0 [pid 5096] close(3 [pid 5103] close(3 [pid 5102] write(3, "1024", 4 [pid 5101] write(3, "1024", 4 [pid 5100] <... openat resumed>) = 3 [pid 5103] <... close resumed>) = 0 [pid 5102] <... write resumed>) = 4 [pid 5101] <... write resumed>) = 4 [pid 5100] write(3, "1024 1048576 500 1024", 21 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5096] <... close resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5102] close(3 [pid 5101] close(3 [pid 5100] <... write resumed>) = 21 [pid 5103] <... openat resumed>) = 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] close(3 [pid 5099] <... openat resumed>) = 3 [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5103] write(3, "8192", 4 [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5100] <... close resumed>) = 0 [pid 5099] write(3, "8192", 4 [pid 5103] <... write resumed>) = 4 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] getpid( [pid 5096] <... openat resumed>) = 3 [pid 5103] close(3 [pid 5102] write(3, "1024", 4 [pid 5101] write(3, "1024", 4 [pid 5100] <... getpid resumed>) = 1 [pid 5099] <... write resumed>) = 4 [pid 5103] <... close resumed>) = 0 [pid 5102] <... write resumed>) = 4 [pid 5101] <... write resumed>) = 4 [pid 5100] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5099] close(3 [pid 5096] write(3, "8192", 4 [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5102] close(3 [pid 5101] close(3 [pid 5100] <... capget resumed>{effective=1<) = 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5100] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5099] <... close resumed>) = 0 [pid 5096] <... write resumed>) = 4 [pid 5103] write(3, "1024", 4 [pid 5102] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5101] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5100] <... capset resumed>) = 0 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5096] close(3 [pid 5103] <... write resumed>) = 4 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... openat resumed>) = 3 [pid 5100] unshare(CLONE_NEWNET [pid 5103] close(3 [pid 5102] write(3, "1024 1048576 500 1024", 21 [pid 5101] write(3, "1024 1048576 500 1024", 21 [pid 5099] <... openat resumed>) = 3 [pid 5096] <... close resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5102] <... write resumed>) = 21 [pid 5101] <... write resumed>) = 21 [pid 5099] write(3, "1024", 4 [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5102] close(3 [pid 5101] close(3 [pid 5099] <... write resumed>) = 4 [pid 5096] <... openat resumed>) = 3 [pid 5103] <... openat resumed>) = 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5099] close(3 [pid 5096] write(3, "1024", 4 [pid 5103] write(3, "1024", 4 [pid 5102] getpid( [pid 5101] getpid( [pid 5099] <... close resumed>) = 0 [pid 5096] <... write resumed>) = 4 [pid 5103] <... write resumed>) = 4 [pid 5102] <... getpid resumed>) = 1 [pid 5101] <... getpid resumed>) = 1 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5096] close(3 [pid 5103] close(3 [pid 5102] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5101] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5099] <... openat resumed>) = 3 [pid 5096] <... close resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5102] <... capget resumed>{effective=1<{effective=1< [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5103] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5102] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5101] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5099] <... write resumed>) = 4 [pid 5096] <... openat resumed>) = 3 [pid 5103] <... openat resumed>) = 3 [pid 5102] <... capset resumed>) = 0 [pid 5101] <... capset resumed>) = 0 [pid 5099] close(3 [pid 5096] write(3, "1024", 4 [pid 5103] write(3, "1024 1048576 500 1024", 21 [pid 5102] unshare(CLONE_NEWNET [pid 5101] unshare(CLONE_NEWNET [pid 5099] <... close resumed>) = 0 [pid 5096] <... write resumed>) = 4 [pid 5103] <... write resumed>) = 21 [pid 5099] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5096] close(3 [pid 5103] close(3 [pid 5099] <... openat resumed>) = 3 [pid 5096] <... close resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5099] write(3, "1024 1048576 500 1024", 21 [pid 5096] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5103] getpid( [pid 5099] <... write resumed>) = 21 [pid 5096] <... openat resumed>) = 3 [pid 5103] <... getpid resumed>) = 1 [pid 5099] close(3 [pid 5096] write(3, "1024 1048576 500 1024", 21 [pid 5103] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5099] <... close resumed>) = 0 [pid 5096] <... write resumed>) = 21 [pid 5103] <... capget resumed>{effective=1< [pid 5096] close(3 [pid 5103] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5099] <... getpid resumed>) = 1 [pid 5096] <... close resumed>) = 0 [pid 5103] <... capset resumed>) = 0 [pid 5099] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5096] getpid( [pid 5103] unshare(CLONE_NEWNET [pid 5099] <... capget resumed>{effective=1<) = 1 [pid 5099] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5096] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5099] <... capset resumed>) = 0 [pid 5096] <... capget resumed>{effective=1< [pid 5096] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5100] <... unshare resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "0 65535", 7) = 7 [pid 5100] close(3) = 0 [pid 5100] mkdir("/dev/binderfs", 0777) = 0 [pid 5100] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 5100] mkdir("./0", 0777) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5100] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5100] close(3) = 0 [pid 5100] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566886d0) = 2 ./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x5555566886e0, 24) = 0 [pid 5105] chdir("./0") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] futex(0x7fefcfdc37ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fefcfcc9000 [pid 5105] mprotect(0x7fefcfcca000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5105] clone(child_stack=0x7fefcfce92f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3], tls=0x7fefcfce9700, child_tidptr=0x7fefcfce99d0) = 3 [pid 5105] futex(0x7fefcfdc37a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] futex(0x7fefcfdc37ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x7fefcfce99e0, 24) = 0 [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fefc78c9000 [pid 5102] <... unshare resumed>) = 0 [pid 5102] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "0 65535", 7) = 7 [pid 5102] close(3) = 0 [pid 5102] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5102] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 syzkaller login: [ 77.827197][ T5107] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5107 'syz-executor368' [pid 5103] <... unshare resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "0 65535", 7) = 7 [pid 5103] close(3) = 0 [pid 5103] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5103] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 5103] mkdir("./0", 0777) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5103] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5102] mkdir("./0", 0777 [pid 5103] close(3 [pid 5101] <... unshare resumed>) = 0 [pid 5096] <... unshare resumed>) = 0 [pid 5107] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5103] <... close resumed>) = 0 [pid 5102] <... mkdir resumed>) = 0 [pid 5101] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5096] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5103] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5102] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5101] <... openat resumed>) = 3 [pid 5102] <... openat resumed>) = 3 [pid 5101] write(3, "0 65535", 7 [pid 5096] <... openat resumed>) = 3 [pid 5103] <... clone resumed>, child_tidptr=0x5555566886d0) = 2 [pid 5102] ioctl(3, LOOP_CLR_FD [pid 5101] <... write resumed>) = 7 [pid 5096] write(3, "0 65535", 7 [pid 5101] close(3 [pid 5102] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5096] <... write resumed>) = 7 [pid 5101] <... close resumed>) = 0 [pid 5102] close(3 [pid 5101] mkdir("/dev/binderfs", 0777 [pid 5096] close(3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... mkdir resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 5112 attached [pid 5102] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5101] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5096] <... close resumed>) = 0 [pid 5112] set_robust_list(0x5555566886e0, 24 [pid 5101] <... mount resumed>) = 0 [pid 5096] mkdir("/dev/binderfs", 0777./strace-static-x86_64: Process 5114 attached [pid 5112] <... set_robust_list resumed>) = 0 [pid 5102] <... clone resumed>, child_tidptr=0x5555566886d0) = 2 [pid 5101] mkdir("./0", 0777 [pid 5096] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5114] set_robust_list(0x5555566886e0, 24 [pid 5112] chdir("./0" [pid 5114] <... set_robust_list resumed>) = 0 [pid 5112] <... chdir resumed>) = 0 [pid 5101] <... mkdir resumed>) = 0 [pid 5096] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5114] chdir("./0" [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5101] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5099] <... unshare resumed>) = 0 [pid 5114] <... chdir resumed>) = 0 [pid 5112] <... prctl resumed>) = 0 [pid 5101] <... openat resumed>) = 3 [pid 5099] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5096] <... mount resumed>) = 0 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5112] setpgid(0, 0 [pid 5101] ioctl(3, LOOP_CLR_FD [pid 5099] <... openat resumed>) = 3 [pid 5114] <... prctl resumed>) = 0 [pid 5112] <... setpgid resumed>) = 0 [pid 5101] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5099] write(3, "0 65535", 7 [pid 5096] mkdir("./0", 0777 [pid 5114] setpgid(0, 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] close(3 [pid 5099] <... write resumed>) = 7 [pid 5114] <... setpgid resumed>) = 0 [pid 5112] <... openat resumed>) = 3 [pid 5101] <... close resumed>) = 0 [pid 5099] close(3 [pid 5096] <... mkdir resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5112] write(3, "1000", 4 [pid 5101] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] <... close resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5114] <... openat resumed>) = 3 [pid 5112] <... write resumed>) = 4 [pid 5099] mkdir("/dev/binderfs", 0777 [pid 5114] write(3, "1000", 4 [pid 5112] close(3 [pid 5101] <... clone resumed>, child_tidptr=0x5555566886d0) = 2 [pid 5099] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5096] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5115 attached [pid 5114] <... write resumed>) = 4 [pid 5112] <... close resumed>) = 0 [pid 5107] <... write resumed>) = 4194304 [pid 5099] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5096] ioctl(3, LOOP_CLR_FD [pid 5115] set_robust_list(0x5555566886e0, 24 [pid 5114] close(3 [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5107] munmap(0x7fefc78c9000, 4194304 [pid 5099] <... mount resumed>) = 0 [pid 5115] <... set_robust_list resumed>) = 0 [pid 5114] <... close resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5107] <... munmap resumed>) = 0 [pid 5099] mkdir("./0", 0777 [pid 5096] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5115] chdir("./0" [pid 5114] symlink("/dev/binderfs", "./binderfs" [pid 5112] futex(0x7fefcfdc37ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... mkdir resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5096] close(3 [pid 5115] <... chdir resumed>) = 0 [pid 5114] <... symlink resumed>) = 0 [pid 5112] <... futex resumed>) = 0 [pid 5107] <... openat resumed>) = 4 [pid 5099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5096] <... close resumed>) = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5114] futex(0x7fefcfdc37ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 5099] <... openat resumed>) = 3 [pid 5096] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5115] <... prctl resumed>) = 0 [pid 5114] <... futex resumed>) = 0 [pid 5112] <... mmap resumed>) = 0x7fefcfcc9000 [pid 5099] ioctl(3, LOOP_CLR_FD [pid 5112] mprotect(0x7fefcfcca000, 131072, PROT_READ|PROT_WRITE [pid 5099] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5112] <... mprotect resumed>) = 0 [pid 5099] close(3 [pid 5112] clone(child_stack=0x7fefcfce92f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5099] <... close resumed>) = 0 [pid 5099] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5115] setpgid(0, 0 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5112] <... clone resumed>, parent_tid=[3], tls=0x7fefcfce9700, child_tidptr=0x7fefcfce99d0) = 3 [pid 5115] <... setpgid resumed>) = 0 [pid 5114] <... mmap resumed>) = 0x7fefcfcc9000 [pid 5112] futex(0x7fefcfdc37a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... clone resumed>, child_tidptr=0x5555566886d0) = 2 [pid 5096] <... clone resumed>, child_tidptr=0x5555566886d0) = 2 ./strace-static-x86_64: Process 5117 attached [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5114] mprotect(0x7fefcfcca000, 131072, PROT_READ|PROT_WRITE [pid 5112] <... futex resumed>) = 0 [pid 5107] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5118 attached ./strace-static-x86_64: Process 5116 attached [pid 5117] set_robust_list(0x5555566886e0, 24 [pid 5115] <... openat resumed>) = 3 [pid 5114] <... mprotect resumed>) = 0 [pid 5112] futex(0x7fefcfdc37ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5107] close(3 [pid 5118] set_robust_list(0x5555566886e0, 24 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5116] set_robust_list(0x7fefcfce99e0, 24 [pid 5115] write(3, "1000", 4 [pid 5114] clone(child_stack=0x7fefcfce92f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5107] <... close resumed>) = 0 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5117] chdir("./0" [pid 5116] <... set_robust_list resumed>) = 0 [pid 5115] <... write resumed>) = 4 [pid 5107] mkdir("./bus", 0777 [pid 5117] <... chdir resumed>) = 0 [pid 5115] close(3 [pid 5114] <... clone resumed>, parent_tid=[3], tls=0x7fefcfce9700, child_tidptr=0x7fefcfce99d0) = 3 [pid 5118] chdir("./0" [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] memfd_create("syzkaller", 0 [pid 5115] <... close resumed>) = 0 [pid 5114] futex(0x7fefcfdc37a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5119 attached [pid 5118] <... chdir resumed>) = 0 [pid 5117] <... prctl resumed>) = 0 [pid 5116] <... memfd_create resumed>) = 3 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5114] <... futex resumed>) = 0 [pid 5107] mount("/dev/loop2", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5119] set_robust_list(0x7fefcfce99e0, 24 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5117] setpgid(0, 0 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5115] <... symlink resumed>) = 0 [pid 5114] futex(0x7fefcfdc37ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5118] <... prctl resumed>) = 0 [pid 5117] <... setpgid resumed>) = 0 [pid 5116] <... mmap resumed>) = 0x7fefc78c9000 [pid 5115] futex(0x7fefcfdc37ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] setpgid(0, 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5115] <... futex resumed>) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5118] <... setpgid resumed>) = 0 [pid 5117] <... openat resumed>) = 3 [pid 5115] <... mmap resumed>) = 0x7fefcfcc9000 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5117] write(3, "1000", 4 [pid 5115] mprotect(0x7fefcfcca000, 131072, PROT_READ|PROT_WRITE [pid 5119] <... set_robust_list resumed>) = 0 [pid 5118] <... openat resumed>) = 3 [pid 5117] <... write resumed>) = 4 [pid 5115] <... mprotect resumed>) = 0 [pid 5119] memfd_create("syzkaller", 0 [pid 5118] write(3, "1000", 4 [pid 5117] close(3 [pid 5115] clone(child_stack=0x7fefcfce92f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5119] <... memfd_create resumed>) = 3 [pid 5118] <... write resumed>) = 4 [pid 5117] <... close resumed>) = 0 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] close(3 [pid 5117] symlink("/dev/binderfs", "./binderfs" [pid 5115] <... clone resumed>, parent_tid=[3], tls=0x7fefcfce9700, child_tidptr=0x7fefcfce99d0) = 3 [pid 5118] <... close resumed>) = 0 [pid 5117] <... symlink resumed>) = 0 [pid 5119] <... mmap resumed>) = 0x7fefc78c9000 [pid 5118] symlink("/dev/binderfs", "./binderfs" [pid 5117] futex(0x7fefcfdc37ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7fefcfdc37a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... symlink resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5118] futex(0x7fefcfdc37ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5115] futex(0x7fefcfdc37ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5118] <... futex resumed>) = 0 [pid 5117] <... mmap resumed>) = 0x7fefcfcc9000 [ 77.999520][ T5107] loop2: detected capacity change from 0 to 8192 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5117] mprotect(0x7fefcfcca000, 131072, PROT_READ|PROT_WRITE