ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor2344733899 <...> no interfaces have a carrier [ 65.572655][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.595774][ T5248] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 91.980192][ T2259] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor2344733899", ["ci2-upstream-fs/syz-executor2344733899"], 0x7ffea0fcdb40 /* 10 vars */) = 0 brk(NULL) = 0x5555829a2000 brk(0x5555829a2d80) = 0x5555829a2d80 arch_prctl(ARCH_SET_FS, 0x5555829a2400) = 0 set_tid_address(0x5555829a26d0) = 5613 set_robust_list(0x5555829a26e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor2344733899", 4096) = 44 getrandom("\x1f\xc9\xaa\xbe\x92\x74\xb9\x9c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555829a2d80 brk(0x5555829c3d80) = 0x5555829c3d80 brk(0x5555829c4000) = 0x5555829c4000 mprotect(0x7f8b455f1000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 [ 112.699391][ T5613] cgroup: Unknown subsys name 'net' umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 [ 112.992032][ T5613] cgroup: Unknown subsys name 'cpuset' umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 113.050209][ T5613] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) getrandom("\x42\x79\xe3\x38\x9d\x5d\x4b\xb9", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.oqHKhI", 0700) = 0 chmod("./syzkaller.oqHKhI", 0777) = 0 chdir("./syzkaller.oqHKhI") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5614 attached , child_tidptr=0x5555829a26d0) = 5614 [pid 5613] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] set_robust_list(0x5555829a26e0, 24 [pid 5613] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5614] getppid() = 0 [pid 5614] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5614] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5614] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5614] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5614] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5614] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5614] unshare(CLONE_NEWNS) = 0 [pid 5614] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5614] unshare(CLONE_NEWIPC) = 0 [pid 5614] unshare(CLONE_NEWCGROUP) = 0 [pid 5614] unshare(CLONE_NEWUTS) = 0 [pid 5614] unshare(CLONE_SYSVSEM) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "16777216", 8) = 8 [pid 5614] close(3) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "536870912", 9) = 9 [pid 5614] close(3) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1024", 4) = 4 [pid 5614] close(3) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "8192", 4) = 4 [pid 5614] close(3) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1024", 4) = 4 [pid 5614] close(3) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1024", 4) = 4 [pid 5614] close(3) = 0 [pid 5614] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5614] close(3) = 0 [pid 5614] getpid() = 1 [pid 5614] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5643] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] chdir("./0") = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5643] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5643] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5643] write(3, "1000", 4) = 4 [pid 5643] close(3) = 0 [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5643] write(1, "executing program\n", 18) = 18 [pid 5643] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5643] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 executing program [pid 5643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5643] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5644 attached [pid 5644] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5643] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 5644] set_robust_list(0x7f8b4551a9a0, 24 [pid 5643] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... set_robust_list resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5643] <... futex resumed>) = 0 [pid 5643] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... mkdirat resumed>) = 0 [pid 5644] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [pid 5644] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] <... futex resumed>) = 0 [pid 5644] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5643] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... mount resumed>) = 0 [pid 5644] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [pid 5644] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] <... futex resumed>) = 0 [pid 5644] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5643] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... openat resumed>) = 3 [pid 5644] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... futex resumed>) = 0 [pid 5643] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = 1 [pid 5643] <... futex resumed>) = 0 [pid 5644] write(3, "+p", 2 [pid 5643] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5643] futex(0x7f8b455f7b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454d9000 [pid 5643] mprotect(0x7f8b454da000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b454f9990, parent_tid=0x7f8b454f9990, exit_signal=0, stack=0x7f8b454d9000, stack_size=0x202c0, tls=0x7f8b454f96c0}ci2-upstream-fs/strace-static-x86_64: Process 5645 attached [pid 5645] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5645] set_robust_list(0x7f8b454f99a0, 24) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] futex(0x7f8b455f7b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5643] futex(0x7f8b455f7b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] <... futex resumed>) = 0 [pid 5643] futex(0x7f8b455f7b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5645] futex(0x7f8b455f7b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [pid 5645] futex(0x7f8b455f7b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] futex(0x7f8b455f7b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] <... futex resumed>) = 0 [pid 5645] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5643] <... futex resumed>) = 1 [pid 5643] futex(0x7f8b455f7b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] <... write resumed>) = 309 [pid 5645] futex(0x7f8b455f7b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [pid 5643] futex(0x7f8b455f7b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5643] <... futex resumed>) = 0 [pid 5645] <... write resumed>) = 16 [pid 5643] futex(0x7f8b455f7b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] futex(0x7f8b455f7b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [ 118.844514][ T202] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5645] futex(0x7f8b455f7b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] close(3) = 0 [pid 5643] close(4) = 0 [pid 5643] close(5) = -1 EBADF (Bad file descriptor) [pid 5643] close(6) = -1 EBADF (Bad file descriptor) [pid 5643] close(7) = -1 EBADF (Bad file descriptor) [pid 5643] close(8) = -1 EBADF (Bad file descriptor) [pid 5643] close(9) = -1 EBADF (Bad file descriptor) [pid 5643] close(10) = -1 EBADF (Bad file descriptor) [pid 5643] close(11) = -1 EBADF (Bad file descriptor) [pid 5643] close(12) = -1 EBADF (Bad file descriptor) [pid 5643] close(13) = -1 EBADF (Bad file descriptor) [pid 5643] close(14) = -1 EBADF (Bad file descriptor) [pid 5643] close(15) = -1 EBADF (Bad file descriptor) [pid 5643] close(16) = -1 EBADF (Bad file descriptor) [pid 5643] close(17) = -1 EBADF (Bad file descriptor) [pid 5643] close(18) = -1 EBADF (Bad file descriptor) [pid 5643] close(19) = -1 EBADF (Bad file descriptor) [pid 5643] close(20) = -1 EBADF (Bad file descriptor) [pid 5643] close(21) = -1 EBADF (Bad file descriptor) [pid 5643] close(22) = -1 EBADF (Bad file descriptor) [pid 5643] close(23) = -1 EBADF (Bad file descriptor) [pid 5643] close(24) = -1 EBADF (Bad file descriptor) [pid 5643] close(25) = -1 EBADF (Bad file descriptor) [pid 5643] close(26) = -1 EBADF (Bad file descriptor) [pid 5643] close(27) = -1 EBADF (Bad file descriptor) [pid 5643] close(28) = -1 EBADF (Bad file descriptor) [pid 5643] close(29) = -1 EBADF (Bad file descriptor) [pid 5643] exit_group(0) = ? [pid 5645] <... futex resumed>) = ? [pid 5645] +++ exited with 0 +++ [pid 5644] <... write resumed>) = ? [pid 5644] +++ exited with 0 +++ [pid 5643] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=126 /* 1.26 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./0/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./0/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./0/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./0/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./0/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./0/debug") = 0 [pid 5614] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./0/binderfs") = 0 [pid 5614] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./0/cgroup.net") = 0 [pid 5614] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./0/cgroup.cpu") = 0 [pid 5614] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./0/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./0") = 0 [pid 5614] mkdir("./1", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5647 attached , child_tidptr=0x5555829a26d0) = 5 [pid 5647] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] chdir("./1") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5647] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5647] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] write(1, "executing program\n", 18) = 18 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5647] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 executing program [pid 5647] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5648 attached [pid 5648] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5647] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 5648] <... rseq resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] <... futex resumed>) = 0 [pid 5648] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... mkdirat resumed>) = 0 [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5648] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... mount resumed>) = 0 [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5648] <... futex resumed>) = 1 [pid 5648] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... openat resumed>) = 3 [pid 5647] <... futex resumed>) = 0 [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] <... futex resumed>) = 0 [pid 5648] write(3, "+p", 2 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... write resumed>) = 2 [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5647] <... futex resumed>) = 0 [pid 5648] <... openat resumed>) = 4 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] <... futex resumed>) = 0 [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5648] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... write resumed>) = 309 [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5648] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5647] <... futex resumed>) = 0 [pid 5648] <... write resumed>) = 16 [pid 5647] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5648] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] close(5) = -1 EBADF (Bad file descriptor) [pid 5647] close(6) = -1 EBADF (Bad file descriptor) [pid 5647] close(7) = -1 EBADF (Bad file descriptor) [pid 5647] close(8) = -1 EBADF (Bad file descriptor) [pid 5647] close(9) = -1 EBADF (Bad file descriptor) [pid 5647] close(10) = -1 EBADF (Bad file descriptor) [pid 5647] close(11) = -1 EBADF (Bad file descriptor) [ 120.186901][ T952] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5647] close(12) = -1 EBADF (Bad file descriptor) [pid 5647] close(13) = -1 EBADF (Bad file descriptor) [pid 5647] close(14) = -1 EBADF (Bad file descriptor) [pid 5647] close(15) = -1 EBADF (Bad file descriptor) [pid 5647] close(16) = -1 EBADF (Bad file descriptor) [pid 5647] close(17) = -1 EBADF (Bad file descriptor) [pid 5647] close(18) = -1 EBADF (Bad file descriptor) [pid 5647] close(19) = -1 EBADF (Bad file descriptor) [pid 5647] close(20) = -1 EBADF (Bad file descriptor) [pid 5647] close(21) = -1 EBADF (Bad file descriptor) [pid 5647] close(22) = -1 EBADF (Bad file descriptor) [pid 5647] close(23) = -1 EBADF (Bad file descriptor) [pid 5647] close(24) = -1 EBADF (Bad file descriptor) [pid 5647] close(25) = -1 EBADF (Bad file descriptor) [pid 5647] close(26) = -1 EBADF (Bad file descriptor) [pid 5647] close(27) = -1 EBADF (Bad file descriptor) [pid 5647] close(28) = -1 EBADF (Bad file descriptor) [pid 5647] close(29) = -1 EBADF (Bad file descriptor) [pid 5647] exit_group(0) = ? [pid 5648] <... futex resumed>) = ? [pid 5648] +++ exited with 0 +++ [pid 5647] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [ 120.308698][ T5649] fido_id[5649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./1/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./1/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./1/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./1/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./1/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./1/debug") = 0 [pid 5614] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./1/binderfs") = 0 [pid 5614] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./1/cgroup.net") = 0 [pid 5614] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./1/cgroup.cpu") = 0 [pid 5614] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./1/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./1") = 0 [pid 5614] mkdir("./2", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5650 attached [pid 5650] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 7 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] chdir("./2") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5650] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5650] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5650] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5650] write(1, "executing program\n", 18) = 18 executing program [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5650] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5650] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5651 attached [pid 5651] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5650] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5651] <... rseq resumed>) = 0 [pid 5651] set_robust_list(0x7f8b4551a9a0, 24 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] <... set_robust_list resumed>) = 0 [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] <... futex resumed>) = 0 [pid 5651] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... mkdirat resumed>) = 0 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] <... futex resumed>) = 0 [pid 5651] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... mount resumed>) = 0 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] <... futex resumed>) = 0 [pid 5651] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... openat resumed>) = 3 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5651] write(3, "+p", 2 [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... write resumed>) = 2 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] <... futex resumed>) = 0 [pid 5651] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... openat resumed>) = 4 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] <... futex resumed>) = 0 [pid 5651] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... write resumed>) = 309 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... futex resumed>) = 0 [pid 5651] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5651] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] <... futex resumed>) = 1 [pid 5650] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] close(3) = 0 [pid 5650] close(4) = 0 [pid 5650] close(5) = -1 EBADF (Bad file descriptor) [pid 5650] close(6) = -1 EBADF (Bad file descriptor) [pid 5650] close(7) = -1 EBADF (Bad file descriptor) [ 120.617733][ T202] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5650] close(8) = -1 EBADF (Bad file descriptor) [pid 5650] close(9) = -1 EBADF (Bad file descriptor) [pid 5650] close(10) = -1 EBADF (Bad file descriptor) [pid 5650] close(11) = -1 EBADF (Bad file descriptor) [pid 5650] close(12) = -1 EBADF (Bad file descriptor) [pid 5650] close(13) = -1 EBADF (Bad file descriptor) [pid 5650] close(14) = -1 EBADF (Bad file descriptor) [pid 5650] close(15) = -1 EBADF (Bad file descriptor) [pid 5650] close(16) = -1 EBADF (Bad file descriptor) [pid 5650] close(17) = -1 EBADF (Bad file descriptor) [pid 5650] close(18) = -1 EBADF (Bad file descriptor) [pid 5650] close(19) = -1 EBADF (Bad file descriptor) [pid 5650] close(20) = -1 EBADF (Bad file descriptor) [pid 5650] close(21) = -1 EBADF (Bad file descriptor) [pid 5650] close(22) = -1 EBADF (Bad file descriptor) [pid 5650] close(23) = -1 EBADF (Bad file descriptor) [pid 5650] close(24) = -1 EBADF (Bad file descriptor) [pid 5650] close(25) = -1 EBADF (Bad file descriptor) [pid 5650] close(26) = -1 EBADF (Bad file descriptor) [pid 5650] close(27) = -1 EBADF (Bad file descriptor) [pid 5650] close(28) = -1 EBADF (Bad file descriptor) [pid 5650] close(29) = -1 EBADF (Bad file descriptor) [pid 5650] exit_group(0) = ? [pid 5651] <... futex resumed>) = ? [pid 5651] +++ exited with 0 +++ [pid 5650] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./2/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./2/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./2/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./2/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./2/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 120.751410][ T5652] fido_id[5652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./2/debug") = 0 [pid 5614] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./2/binderfs") = 0 [pid 5614] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./2/cgroup.net") = 0 [pid 5614] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./2/cgroup.cpu") = 0 [pid 5614] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./2/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./2") = 0 [pid 5614] mkdir("./3", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5653 attached [pid 5653] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 9 [pid 5653] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] chdir("./3") = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5653] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5653] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5653] write(1, "executing program\n", 18) = 18 [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5653] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5654 attached => {parent_tid=[10]}, 88) = 10 [pid 5654] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5654] set_robust_list(0x7f8b4551a9a0, 24 [pid 5653] rt_sigprocmask(SIG_SETMASK, [] [pid 5654] <... set_robust_list resumed>) = 0 [pid 5653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] <... futex resumed>) = 0 [pid 5654] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5653] <... futex resumed>) = 0 [pid 5654] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... mount resumed>) = 0 [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5654] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... futex resumed>) = 0 [pid 5654] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5654] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] <... futex resumed>) = 0 [pid 5653] <... futex resumed>) = 1 [pid 5654] write(3, "+p", 2) = 2 [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5654] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] <... futex resumed>) = 0 [pid 5653] <... futex resumed>) = 1 [pid 5654] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... openat resumed>) = 4 [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] <... futex resumed>) = 0 [pid 5654] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] <... futex resumed>) = 0 [pid 5653] <... futex resumed>) = 1 [pid 5654] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... write resumed>) = 309 [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5653] <... futex resumed>) = 0 [pid 5654] <... write resumed>) = 16 [pid 5654] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5654] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5653] close(3) = 0 [pid 5653] close(4) = 0 [pid 5653] close(5) = -1 EBADF (Bad file descriptor) [pid 5653] close(6) = -1 EBADF (Bad file descriptor) [pid 5653] close(7) = -1 EBADF (Bad file descriptor) [pid 5653] close(8) = -1 EBADF (Bad file descriptor) [pid 5653] close(9) = -1 EBADF (Bad file descriptor) [pid 5653] close(10) = -1 EBADF (Bad file descriptor) [pid 5653] close(11) = -1 EBADF (Bad file descriptor) [pid 5653] close(12) = -1 EBADF (Bad file descriptor) [pid 5653] close(13) = -1 EBADF (Bad file descriptor) [pid 5653] close(14) = -1 EBADF (Bad file descriptor) [pid 5653] close(15) = -1 EBADF (Bad file descriptor) [ 121.085478][ T952] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5653] close(16) = -1 EBADF (Bad file descriptor) [pid 5653] close(17) = -1 EBADF (Bad file descriptor) [pid 5653] close(18) = -1 EBADF (Bad file descriptor) [pid 5653] close(19) = -1 EBADF (Bad file descriptor) [pid 5653] close(20) = -1 EBADF (Bad file descriptor) [pid 5653] close(21) = -1 EBADF (Bad file descriptor) [pid 5653] close(22) = -1 EBADF (Bad file descriptor) [pid 5653] close(23) = -1 EBADF (Bad file descriptor) [pid 5653] close(24) = -1 EBADF (Bad file descriptor) [pid 5653] close(25) = -1 EBADF (Bad file descriptor) [pid 5653] close(26) = -1 EBADF (Bad file descriptor) [pid 5653] close(27) = -1 EBADF (Bad file descriptor) [pid 5653] close(28) = -1 EBADF (Bad file descriptor) [pid 5653] close(29) = -1 EBADF (Bad file descriptor) [pid 5653] exit_group(0) = ? [pid 5654] <... futex resumed>) = ? [pid 5654] +++ exited with 0 +++ [pid 5653] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./3/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 121.191379][ T5655] fido_id[5655]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./3/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./3/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./3/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./3/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./3/debug") = 0 [pid 5614] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./3/binderfs") = 0 [pid 5614] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./3/cgroup.net") = 0 [pid 5614] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./3/cgroup.cpu") = 0 [pid 5614] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./3/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./3") = 0 [pid 5614] mkdir("./4", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 11 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] chdir("./4" [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] <... chdir resumed>) = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5656] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5656] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] write(1, "executing program\n", 18) = 18 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5656] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5656] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5657 attached [pid 5657] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5656] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12 [pid 5657] set_robust_list(0x7f8b4551a9a0, 24 [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] <... set_robust_list resumed>) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... mkdirat resumed>) = 0 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5657] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5656] <... futex resumed>) = 1 [pid 5657] <... mount resumed>) = 0 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... openat resumed>) = 3 [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... futex resumed>) = 1 [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] write(3, "+p", 2 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... write resumed>) = 2 [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... futex resumed>) = 1 [pid 5657] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... write resumed>) = 309 [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5657] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] <... futex resumed>) = 0 [pid 5656] close(3) = 0 [pid 5656] close(4) = 0 [pid 5656] close(5) = -1 EBADF (Bad file descriptor) [pid 5656] close(6) = -1 EBADF (Bad file descriptor) [pid 5656] close(7) = -1 EBADF (Bad file descriptor) [pid 5656] close(8) = -1 EBADF (Bad file descriptor) [pid 5656] close(9) = -1 EBADF (Bad file descriptor) [pid 5656] close(10) = -1 EBADF (Bad file descriptor) [pid 5656] close(11) = -1 EBADF (Bad file descriptor) [pid 5656] close(12) = -1 EBADF (Bad file descriptor) [pid 5656] close(13) = -1 EBADF (Bad file descriptor) [pid 5656] close(14) = -1 EBADF (Bad file descriptor) [pid 5656] close(15) = -1 EBADF (Bad file descriptor) [pid 5656] close(16) = -1 EBADF (Bad file descriptor) [pid 5656] close(17) = -1 EBADF (Bad file descriptor) [pid 5656] close(18) = -1 EBADF (Bad file descriptor) [pid 5656] close(19) = -1 EBADF (Bad file descriptor) [pid 5656] close(20) = -1 EBADF (Bad file descriptor) [pid 5656] close(21) = -1 EBADF (Bad file descriptor) [ 121.523323][ T5642] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5656] close(22) = -1 EBADF (Bad file descriptor) [pid 5656] close(23) = -1 EBADF (Bad file descriptor) [pid 5656] close(24) = -1 EBADF (Bad file descriptor) [pid 5656] close(25) = -1 EBADF (Bad file descriptor) [pid 5656] close(26) = -1 EBADF (Bad file descriptor) [pid 5656] close(27) = -1 EBADF (Bad file descriptor) [pid 5656] close(28) = -1 EBADF (Bad file descriptor) [pid 5656] close(29) = -1 EBADF (Bad file descriptor) [pid 5656] exit_group(0 [pid 5657] <... futex resumed>) = ? [pid 5656] <... exit_group resumed>) = ? [pid 5657] +++ exited with 0 +++ [pid 5656] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./4/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./4/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./4/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./4/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./4/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./4/debug") = 0 [pid 5614] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./4/binderfs") = 0 [pid 5614] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 121.648804][ T5658] fido_id[5658]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] unlink("./4/cgroup.net") = 0 [pid 5614] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./4/cgroup.cpu") = 0 [pid 5614] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./4/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./4") = 0 [pid 5614] mkdir("./5", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5659 attached [pid 5659] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 13 [pid 5659] <... set_robust_list resumed>) = 0 [pid 5659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5659] chdir("./5" [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5659] <... chdir resumed>) = 0 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5659] setpgid(0, 0) = 0 [pid 5659] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5659] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5659] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5659] write(3, "1000", 4) = 4 [pid 5659] close(3) = 0 [pid 5659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5659] write(1, "executing program\n", 18) = 18 executing program [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5659] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5659] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5660 attached [pid 5660] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5659] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 5660] <... rseq resumed>) = 0 [pid 5660] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] <... futex resumed>) = 0 [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5659] <... futex resumed>) = 0 [pid 5660] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... mount resumed>) = 0 [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5659] <... futex resumed>) = 0 [pid 5660] <... openat resumed>) = 3 [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5659] <... futex resumed>) = 0 [pid 5660] write(3, "+p", 2 [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... write resumed>) = 2 [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... futex resumed>) = 0 [pid 5660] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5659] <... futex resumed>) = 1 [pid 5660] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... write resumed>) = 309 [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] <... futex resumed>) = 0 [pid 5659] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5659] <... futex resumed>) = 1 [pid 5660] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5659] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] <... futex resumed>) = 0 [pid 5659] close(3 [pid 5660] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] <... close resumed>) = 0 [pid 5659] close(4) = 0 [pid 5659] close(5) = -1 EBADF (Bad file descriptor) [pid 5659] close(6) = -1 EBADF (Bad file descriptor) [ 122.018712][ T202] wacom 0003:056A:003F.0006: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5659] close(7) = -1 EBADF (Bad file descriptor) [pid 5659] close(8) = -1 EBADF (Bad file descriptor) [pid 5659] close(9) = -1 EBADF (Bad file descriptor) [pid 5659] close(10) = -1 EBADF (Bad file descriptor) [pid 5659] close(11) = -1 EBADF (Bad file descriptor) [pid 5659] close(12) = -1 EBADF (Bad file descriptor) [pid 5659] close(13) = -1 EBADF (Bad file descriptor) [pid 5659] close(14) = -1 EBADF (Bad file descriptor) [pid 5659] close(15) = -1 EBADF (Bad file descriptor) [pid 5659] close(16) = -1 EBADF (Bad file descriptor) [pid 5659] close(17) = -1 EBADF (Bad file descriptor) [pid 5659] close(18) = -1 EBADF (Bad file descriptor) [pid 5659] close(19) = -1 EBADF (Bad file descriptor) [pid 5659] close(20) = -1 EBADF (Bad file descriptor) [pid 5659] close(21) = -1 EBADF (Bad file descriptor) [pid 5659] close(22) = -1 EBADF (Bad file descriptor) [pid 5659] close(23) = -1 EBADF (Bad file descriptor) [pid 5659] close(24) = -1 EBADF (Bad file descriptor) [pid 5659] close(25) = -1 EBADF (Bad file descriptor) [pid 5659] close(26) = -1 EBADF (Bad file descriptor) [pid 5659] close(27) = -1 EBADF (Bad file descriptor) [pid 5659] close(28) = -1 EBADF (Bad file descriptor) [pid 5659] close(29) = -1 EBADF (Bad file descriptor) [pid 5659] exit_group(0) = ? [pid 5660] <... futex resumed>) = ? [pid 5660] +++ exited with 0 +++ [pid 5659] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [ 122.157938][ T5661] fido_id[5661]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./5/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./5/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./5/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./5/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./5/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./5/debug") = 0 [pid 5614] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./5/binderfs") = 0 [pid 5614] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./5/cgroup.net") = 0 [pid 5614] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./5/cgroup.cpu") = 0 [pid 5614] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./5/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./5") = 0 [pid 5614] mkdir("./6", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5662 attached [pid 5662] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 15 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] <... set_robust_list resumed>) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] chdir("./6") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5662] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5662] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] write(1, "executing program\n", 18) = 18 executing program [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5662] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5662] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5662] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5663 attached => {parent_tid=[16]}, 88) = 16 [pid 5663] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5663] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5663] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = 0 [pid 5662] <... futex resumed>) = 1 [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] <... futex resumed>) = 0 [pid 5663] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... mount resumed>) = 0 [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] <... futex resumed>) = 0 [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5663] <... futex resumed>) = 1 [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] write(3, "+p", 2 [pid 5662] <... futex resumed>) = 0 [pid 5663] <... write resumed>) = 2 [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] <... futex resumed>) = 0 [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5663] <... futex resumed>) = 1 [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5663] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... write resumed>) = 309 [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5663] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5663] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] <... futex resumed>) = 0 [pid 5662] close(3) = 0 [pid 5662] close(4) = 0 [pid 5662] close(5) = -1 EBADF (Bad file descriptor) [pid 5662] close(6) = -1 EBADF (Bad file descriptor) [pid 5662] close(7) = -1 EBADF (Bad file descriptor) [pid 5662] close(8) = -1 EBADF (Bad file descriptor) [pid 5662] close(9) = -1 EBADF (Bad file descriptor) [pid 5662] close(10) = -1 EBADF (Bad file descriptor) [pid 5662] close(11) = -1 EBADF (Bad file descriptor) [pid 5662] close(12) = -1 EBADF (Bad file descriptor) [pid 5662] close(13) = -1 EBADF (Bad file descriptor) [pid 5662] close(14) = -1 EBADF (Bad file descriptor) [pid 5662] close(15) = -1 EBADF (Bad file descriptor) [pid 5662] close(16) = -1 EBADF (Bad file descriptor) [pid 5662] close(17) = -1 EBADF (Bad file descriptor) [pid 5662] close(18) = -1 EBADF (Bad file descriptor) [pid 5662] close(19) = -1 EBADF (Bad file descriptor) [pid 5662] close(20) = -1 EBADF (Bad file descriptor) [pid 5662] close(21) = -1 EBADF (Bad file descriptor) [pid 5662] close(22) = -1 EBADF (Bad file descriptor) [pid 5662] close(23) = -1 EBADF (Bad file descriptor) [pid 5662] close(24) = -1 EBADF (Bad file descriptor) [pid 5662] close(25) = -1 EBADF (Bad file descriptor) [pid 5662] close(26) = -1 EBADF (Bad file descriptor) [pid 5662] close(27) = -1 EBADF (Bad file descriptor) [pid 5662] close(28) = -1 EBADF (Bad file descriptor) [pid 5662] close(29) = -1 EBADF (Bad file descriptor) [pid 5662] exit_group(0 [pid 5663] <... futex resumed>) = ? [pid 5662] <... exit_group resumed>) = ? [ 122.639709][ T952] wacom 0003:056A:003F.0007: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5663] +++ exited with 0 +++ [pid 5662] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./6/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./6/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./6/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./6/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./6/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./6/debug") = 0 [ 122.788328][ T5664] fido_id[5664]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./6/binderfs") = 0 [pid 5614] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./6/cgroup.net") = 0 [pid 5614] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./6/cgroup.cpu") = 0 [pid 5614] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./6/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./6") = 0 [pid 5614] mkdir("./7", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5665 attached , child_tidptr=0x5555829a26d0) = 17 [pid 5665] set_robust_list(0x5555829a26e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] <... set_robust_list resumed>) = 0 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] chdir("./7") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5665] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5665] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] write(1, "executing program\n", 18) = 18 executing program [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5665] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5666 attached [pid 5666] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5666] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] <... clone3 resumed> => {parent_tid=[18]}, 88) = 18 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5666] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... mount resumed>) = 0 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] write(3, "+p", 2) = 2 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... openat resumed>) = 4 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... futex resumed>) = 0 [pid 5665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5666] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... write resumed>) = 309 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5666] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] close(3) = 0 [pid 5665] close(4) = 0 [pid 5665] close(5) = -1 EBADF (Bad file descriptor) [pid 5665] close(6) = -1 EBADF (Bad file descriptor) [pid 5665] close(7) = -1 EBADF (Bad file descriptor) [pid 5665] close(8) = -1 EBADF (Bad file descriptor) [pid 5665] close(9) = -1 EBADF (Bad file descriptor) [pid 5665] close(10) = -1 EBADF (Bad file descriptor) [pid 5665] close(11) = -1 EBADF (Bad file descriptor) [pid 5665] close(12) = -1 EBADF (Bad file descriptor) [pid 5665] close(13) = -1 EBADF (Bad file descriptor) [pid 5665] close(14) = -1 EBADF (Bad file descriptor) [pid 5665] close(15) = -1 EBADF (Bad file descriptor) [pid 5665] close(16) = -1 EBADF (Bad file descriptor) [pid 5665] close(17) = -1 EBADF (Bad file descriptor) [pid 5665] close(18) = -1 EBADF (Bad file descriptor) [pid 5665] close(19) = -1 EBADF (Bad file descriptor) [pid 5665] close(20) = -1 EBADF (Bad file descriptor) [pid 5665] close(21) = -1 EBADF (Bad file descriptor) [pid 5665] close(22) = -1 EBADF (Bad file descriptor) [pid 5665] close(23) = -1 EBADF (Bad file descriptor) [ 123.111463][ T202] wacom 0003:056A:003F.0008: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5665] close(24) = -1 EBADF (Bad file descriptor) [pid 5665] close(25) = -1 EBADF (Bad file descriptor) [pid 5665] close(26) = -1 EBADF (Bad file descriptor) [pid 5665] close(27) = -1 EBADF (Bad file descriptor) [pid 5665] close(28) = -1 EBADF (Bad file descriptor) [pid 5665] close(29) = -1 EBADF (Bad file descriptor) [pid 5665] exit_group(0 [pid 5666] <... futex resumed>) = ? [pid 5665] <... exit_group resumed>) = ? [pid 5666] +++ exited with 0 +++ [pid 5665] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./7/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./7/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./7/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./7/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./7/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./7/debug") = 0 [pid 5614] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./7/binderfs") = 0 [pid 5614] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./7/cgroup.net") = 0 [pid 5614] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./7/cgroup.cpu") = 0 [pid 5614] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./7/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./7") = 0 [pid 5614] mkdir("./8", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5668 attached , child_tidptr=0x5555829a26d0) = 19 [pid 5668] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5668] chdir("./8") = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] setpgid(0, 0) = 0 [pid 5668] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [ 123.323401][ T5667] fido_id[5667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5668] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5668] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5668] write(3, "1000", 4) = 4 [pid 5668] close(3) = 0 [pid 5668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5668] write(1, "executing program\n", 18) = 18 executing program [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5668] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5668] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5668] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5669 attached => {parent_tid=[20]}, 88) = 20 [pid 5668] rt_sigprocmask(SIG_SETMASK, [] [pid 5669] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5668] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] <... rseq resumed>) = 0 [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] set_robust_list(0x7f8b4551a9a0, 24 [pid 5668] <... futex resumed>) = 0 [pid 5669] <... set_robust_list resumed>) = 0 [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5669] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5668] <... futex resumed>) = 0 [pid 5669] <... mount resumed>) = 0 [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] <... futex resumed>) = 0 [pid 5669] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] <... openat resumed>) = 3 [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] write(3, "+p", 2) = 2 [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = 1 [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5668] <... futex resumed>) = 0 [pid 5669] <... openat resumed>) = 4 [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5668] <... futex resumed>) = 0 [pid 5669] <... write resumed>) = 309 [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] <... futex resumed>) = 0 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5669] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] close(3) = 0 [pid 5668] close(4) = 0 [pid 5668] close(5) = -1 EBADF (Bad file descriptor) [pid 5668] close(6) = -1 EBADF (Bad file descriptor) [pid 5668] close(7) = -1 EBADF (Bad file descriptor) [pid 5668] close(8) = -1 EBADF (Bad file descriptor) [pid 5668] close(9) = -1 EBADF (Bad file descriptor) [pid 5668] close(10) = -1 EBADF (Bad file descriptor) [pid 5668] close(11) = -1 EBADF (Bad file descriptor) [pid 5668] close(12) = -1 EBADF (Bad file descriptor) [pid 5668] close(13) = -1 EBADF (Bad file descriptor) [pid 5668] close(14) = -1 EBADF (Bad file descriptor) [pid 5668] close(15) = -1 EBADF (Bad file descriptor) [pid 5668] close(16) = -1 EBADF (Bad file descriptor) [pid 5668] close(17) = -1 EBADF (Bad file descriptor) [ 123.521488][ T5642] wacom 0003:056A:003F.0009: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5668] close(18) = -1 EBADF (Bad file descriptor) [pid 5668] close(19) = -1 EBADF (Bad file descriptor) [pid 5668] close(20) = -1 EBADF (Bad file descriptor) [pid 5668] close(21) = -1 EBADF (Bad file descriptor) [pid 5668] close(22) = -1 EBADF (Bad file descriptor) [pid 5668] close(23) = -1 EBADF (Bad file descriptor) [pid 5668] close(24) = -1 EBADF (Bad file descriptor) [pid 5668] close(25) = -1 EBADF (Bad file descriptor) [pid 5668] close(26) = -1 EBADF (Bad file descriptor) [pid 5668] close(27) = -1 EBADF (Bad file descriptor) [pid 5668] close(28) = -1 EBADF (Bad file descriptor) [pid 5668] close(29) = -1 EBADF (Bad file descriptor) [pid 5668] exit_group(0 [pid 5669] <... futex resumed>) = ? [pid 5668] <... exit_group resumed>) = ? [pid 5669] +++ exited with 0 +++ [pid 5668] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./8/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./8/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./8/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./8/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./8/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./8/debug") = 0 [pid 5614] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./8/binderfs") = 0 [pid 5614] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./8/cgroup.net") = 0 [pid 5614] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 123.675311][ T5670] fido_id[5670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] unlink("./8/cgroup.cpu") = 0 [pid 5614] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./8/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./8") = 0 [pid 5614] mkdir("./9", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5671 attached , child_tidptr=0x5555829a26d0) = 21 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5671] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5671] chdir("./9") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5671] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5671] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] write(1, "executing program\n", 18) = 18 executing program [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5671] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5672 attached [pid 5672] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5671] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5672] set_robust_list(0x7f8b4551a9a0, 24 [pid 5671] rt_sigprocmask(SIG_SETMASK, [] [pid 5672] <... set_robust_list resumed>) = 0 [pid 5671] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5672] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... futex resumed>) = 0 [pid 5672] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5672] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... mount resumed>) = 0 [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5671] <... futex resumed>) = 0 [pid 5672] <... openat resumed>) = 3 [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5672] <... futex resumed>) = 0 [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] write(3, "+p", 2 [pid 5671] <... futex resumed>) = 0 [pid 5672] <... write resumed>) = 2 [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = 0 [pid 5671] <... futex resumed>) = 0 [pid 5672] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... openat resumed>) = 4 [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... write resumed>) = 309 [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5671] <... futex resumed>) = 0 [pid 5672] <... write resumed>) = 16 [pid 5671] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5672] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] close(3) = 0 [pid 5671] close(4) = 0 [pid 5671] close(5) = -1 EBADF (Bad file descriptor) [pid 5671] close(6) = -1 EBADF (Bad file descriptor) [pid 5671] close(7) = -1 EBADF (Bad file descriptor) [pid 5671] close(8) = -1 EBADF (Bad file descriptor) [pid 5671] close(9) = -1 EBADF (Bad file descriptor) [pid 5671] close(10) = -1 EBADF (Bad file descriptor) [ 123.961165][ T202] wacom 0003:056A:003F.000A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5671] close(11) = -1 EBADF (Bad file descriptor) [pid 5671] close(12) = -1 EBADF (Bad file descriptor) [pid 5671] close(13) = -1 EBADF (Bad file descriptor) [pid 5671] close(14) = -1 EBADF (Bad file descriptor) [pid 5671] close(15) = -1 EBADF (Bad file descriptor) [pid 5671] close(16) = -1 EBADF (Bad file descriptor) [pid 5671] close(17) = -1 EBADF (Bad file descriptor) [pid 5671] close(18) = -1 EBADF (Bad file descriptor) [pid 5671] close(19) = -1 EBADF (Bad file descriptor) [pid 5671] close(20) = -1 EBADF (Bad file descriptor) [pid 5671] close(21) = -1 EBADF (Bad file descriptor) [pid 5671] close(22) = -1 EBADF (Bad file descriptor) [pid 5671] close(23) = -1 EBADF (Bad file descriptor) [pid 5671] close(24) = -1 EBADF (Bad file descriptor) [pid 5671] close(25) = -1 EBADF (Bad file descriptor) [pid 5671] close(26) = -1 EBADF (Bad file descriptor) [pid 5671] close(27) = -1 EBADF (Bad file descriptor) [pid 5671] close(28) = -1 EBADF (Bad file descriptor) [pid 5671] close(29) = -1 EBADF (Bad file descriptor) [pid 5671] exit_group(0 [pid 5672] <... futex resumed>) = ? [pid 5671] <... exit_group resumed>) = ? [pid 5672] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./9/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./9/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./9/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./9/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./9/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./9/debug") = 0 [pid 5614] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./9/binderfs") = 0 [pid 5614] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./9/cgroup.net") = 0 [pid 5614] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./9/cgroup.cpu") = 0 [pid 5614] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./9/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [ 124.146228][ T5673] fido_id[5673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] rmdir("./9") = 0 [pid 5614] mkdir("./10", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5675 attached [pid 5675] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 23 [pid 5675] <... set_robust_list resumed>) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5675] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5675] chdir("./10") = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5675] setpgid(0, 0) = 0 [pid 5675] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5675] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5675] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5675] write(3, "1000", 4) = 4 [pid 5675] close(3) = 0 [pid 5675] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5675] write(1, "executing program\n", 18) = 18 [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5675] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5675] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5676 attached => {parent_tid=[24]}, 88) = 24 [pid 5676] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5675] rt_sigprocmask(SIG_SETMASK, [] [pid 5676] <... rseq resumed>) = 0 [pid 5675] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5676] set_robust_list(0x7f8b4551a9a0, 24 [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... set_robust_list resumed>) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [] [pid 5675] <... futex resumed>) = 0 [pid 5676] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5676] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5676] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... mount resumed>) = 0 [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 1 [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5675] <... futex resumed>) = 0 [pid 5676] <... openat resumed>) = 3 [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5676] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5676] write(3, "+p", 2 [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... write resumed>) = 2 [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5676] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5676] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... openat resumed>) = 4 [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5676] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5676] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... write resumed>) = 309 [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] <... futex resumed>) = 0 [pid 5675] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5676] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5675] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5676] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] close(3) = 0 [pid 5675] close(4) = 0 [pid 5675] close(5) = -1 EBADF (Bad file descriptor) [pid 5675] close(6) = -1 EBADF (Bad file descriptor) [pid 5675] close(7) = -1 EBADF (Bad file descriptor) [pid 5675] close(8) = -1 EBADF (Bad file descriptor) [ 124.381790][ T5642] wacom 0003:056A:003F.000B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5675] close(9) = -1 EBADF (Bad file descriptor) [pid 5675] close(10) = -1 EBADF (Bad file descriptor) [pid 5675] close(11) = -1 EBADF (Bad file descriptor) [pid 5675] close(12) = -1 EBADF (Bad file descriptor) [pid 5675] close(13) = -1 EBADF (Bad file descriptor) [pid 5675] close(14) = -1 EBADF (Bad file descriptor) [pid 5675] close(15) = -1 EBADF (Bad file descriptor) [pid 5675] close(16) = -1 EBADF (Bad file descriptor) [pid 5675] close(17) = -1 EBADF (Bad file descriptor) [pid 5675] close(18) = -1 EBADF (Bad file descriptor) [pid 5675] close(19) = -1 EBADF (Bad file descriptor) [pid 5675] close(20) = -1 EBADF (Bad file descriptor) [pid 5675] close(21) = -1 EBADF (Bad file descriptor) [pid 5675] close(22) = -1 EBADF (Bad file descriptor) [pid 5675] close(23) = -1 EBADF (Bad file descriptor) [pid 5675] close(24) = -1 EBADF (Bad file descriptor) [pid 5675] close(25) = -1 EBADF (Bad file descriptor) [pid 5675] close(26) = -1 EBADF (Bad file descriptor) [pid 5675] close(27) = -1 EBADF (Bad file descriptor) [pid 5675] close(28) = -1 EBADF (Bad file descriptor) [pid 5675] close(29) = -1 EBADF (Bad file descriptor) [pid 5675] exit_group(0) = ? [pid 5676] <... futex resumed>) = ? [pid 5676] +++ exited with 0 +++ [pid 5675] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5614] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [ 124.428997][ C1] net_ratelimit: 56 callbacks suppressed [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./10/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./10/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./10/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./10/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./10/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./10/debug") = 0 [pid 5614] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./10/binderfs") = 0 [pid 5614] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 124.507737][ T5677] fido_id[5677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./10/cgroup.net") = 0 [pid 5614] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./10/cgroup.cpu") = 0 [pid 5614] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./10/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./10") = 0 [pid 5614] mkdir("./11", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5678 attached [pid 5678] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 25 [pid 5678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5678] chdir("./11" [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5678] <... chdir resumed>) = 0 [pid 5678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5678] setpgid(0, 0) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5678] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5678] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5678] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5678] write(3, "1000", 4) = 4 [pid 5678] close(3) = 0 [pid 5678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5678] write(1, "executing program\n", 18) = 18 executing program [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5678] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5678] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5679 attached [pid 5679] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5678] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5679] <... rseq resumed>) = 0 [pid 5678] rt_sigprocmask(SIG_SETMASK, [] [pid 5679] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5678] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5679] rt_sigprocmask(SIG_SETMASK, [] [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5679] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5678] <... futex resumed>) = 0 [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... mkdirat resumed>) = 0 [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = 0 [pid 5679] <... futex resumed>) = 1 [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5678] <... futex resumed>) = 0 [pid 5679] <... mount resumed>) = 0 [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5679] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] <... futex resumed>) = 0 [pid 5678] <... futex resumed>) = 1 [pid 5679] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... openat resumed>) = 3 [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5678] <... futex resumed>) = 0 [pid 5679] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] write(3, "+p", 2) = 2 [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5678] <... futex resumed>) = 0 [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5678] <... futex resumed>) = 0 [pid 5679] <... openat resumed>) = 4 [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] <... futex resumed>) = 0 [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5678] <... futex resumed>) = 0 [pid 5679] <... write resumed>) = 309 [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] <... futex resumed>) = 0 [pid 5679] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5678] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5679] <... futex resumed>) = 0 [pid 5678] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5679] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5678] <... futex resumed>) = 0 [pid 5678] close(3 [pid 5679] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5678] <... close resumed>) = 0 [pid 5678] close(4) = 0 [pid 5678] close(5) = -1 EBADF (Bad file descriptor) [pid 5678] close(6) = -1 EBADF (Bad file descriptor) [pid 5678] close(7) = -1 EBADF (Bad file descriptor) [pid 5678] close(8) = -1 EBADF (Bad file descriptor) [pid 5678] close(9) = -1 EBADF (Bad file descriptor) [pid 5678] close(10) = -1 EBADF (Bad file descriptor) [pid 5678] close(11) = -1 EBADF (Bad file descriptor) [pid 5678] close(12) = -1 EBADF (Bad file descriptor) [pid 5678] close(13) = -1 EBADF (Bad file descriptor) [pid 5678] close(14) = -1 EBADF (Bad file descriptor) [pid 5678] close(15) = -1 EBADF (Bad file descriptor) [pid 5678] close(16) = -1 EBADF (Bad file descriptor) [pid 5678] close(17) = -1 EBADF (Bad file descriptor) [pid 5678] close(18) = -1 EBADF (Bad file descriptor) [pid 5678] close(19) = -1 EBADF (Bad file descriptor) [pid 5678] close(20) = -1 EBADF (Bad file descriptor) [pid 5678] close(21) = -1 EBADF (Bad file descriptor) [pid 5678] close(22) = -1 EBADF (Bad file descriptor) [pid 5678] close(23) = -1 EBADF (Bad file descriptor) [pid 5678] close(24) = -1 EBADF (Bad file descriptor) [pid 5678] close(25) = -1 EBADF (Bad file descriptor) [ 124.819787][ T5642] wacom 0003:056A:003F.000C: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5678] close(26) = -1 EBADF (Bad file descriptor) [pid 5678] close(27) = -1 EBADF (Bad file descriptor) [pid 5678] close(28) = -1 EBADF (Bad file descriptor) [pid 5678] close(29) = -1 EBADF (Bad file descriptor) [pid 5678] exit_group(0) = ? [pid 5679] <... futex resumed>) = ? [pid 5679] +++ exited with 0 +++ [pid 5678] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./11/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./11/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./11/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./11/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./11/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./11/debug") = 0 [pid 5614] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./11/binderfs") = 0 [pid 5614] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./11/cgroup.net") = 0 [pid 5614] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./11/cgroup.cpu") = 0 [pid 5614] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./11/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./11") = 0 [pid 5614] mkdir("./12", 0777) = 0 [ 124.951370][ T5680] fido_id[5680]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5681 attached [pid 5681] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 27 [pid 5681] <... set_robust_list resumed>) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] chdir("./12") = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5681] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5681] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5681] write(1, "executing program\n", 18) = 18 [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5681] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5681] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5682 attached [pid 5682] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5681] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5682] <... rseq resumed>) = 0 [pid 5682] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [] [pid 5682] rt_sigprocmask(SIG_SETMASK, [] [pid 5681] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5682] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5682] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = 0 [pid 5681] <... futex resumed>) = 1 [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5682] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5682] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5681] <... futex resumed>) = 0 [pid 5682] <... openat resumed>) = 3 [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = 0 [pid 5681] <... futex resumed>) = 0 [pid 5682] write(3, "+p", 2 [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... write resumed>) = 2 [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5682] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = 0 [pid 5681] <... futex resumed>) = 1 [pid 5682] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... openat resumed>) = 4 [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 0 [pid 5682] <... futex resumed>) = 1 [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5681] <... futex resumed>) = 0 [pid 5682] <... write resumed>) = 309 [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] <... futex resumed>) = 0 [pid 5681] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5681] <... futex resumed>) = 0 [pid 5682] <... write resumed>) = 16 [pid 5681] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] <... futex resumed>) = 0 [pid 5681] close(3 [pid 5682] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] <... close resumed>) = 0 [pid 5681] close(4) = 0 [pid 5681] close(5) = -1 EBADF (Bad file descriptor) [pid 5681] close(6) = -1 EBADF (Bad file descriptor) [pid 5681] close(7) = -1 EBADF (Bad file descriptor) [pid 5681] close(8) = -1 EBADF (Bad file descriptor) [pid 5681] close(9) = -1 EBADF (Bad file descriptor) [pid 5681] close(10) = -1 EBADF (Bad file descriptor) [pid 5681] close(11) = -1 EBADF (Bad file descriptor) [pid 5681] close(12) = -1 EBADF (Bad file descriptor) [pid 5681] close(13) = -1 EBADF (Bad file descriptor) [pid 5681] close(14) = -1 EBADF (Bad file descriptor) [pid 5681] close(15) = -1 EBADF (Bad file descriptor) [pid 5681] close(16) = -1 EBADF (Bad file descriptor) [pid 5681] close(17) = -1 EBADF (Bad file descriptor) [pid 5681] close(18) = -1 EBADF (Bad file descriptor) [pid 5681] close(19) = -1 EBADF (Bad file descriptor) [pid 5681] close(20) = -1 EBADF (Bad file descriptor) [pid 5681] close(21) = -1 EBADF (Bad file descriptor) [pid 5681] close(22) = -1 EBADF (Bad file descriptor) [pid 5681] close(23) = -1 EBADF (Bad file descriptor) [pid 5681] close(24) = -1 EBADF (Bad file descriptor) [pid 5681] close(25) = -1 EBADF (Bad file descriptor) [pid 5681] close(26) = -1 EBADF (Bad file descriptor) [pid 5681] close(27) = -1 EBADF (Bad file descriptor) [pid 5681] close(28) = -1 EBADF (Bad file descriptor) [pid 5681] close(29) = -1 EBADF (Bad file descriptor) [pid 5681] exit_group(0 [pid 5682] <... futex resumed>) = ? [pid 5681] <... exit_group resumed>) = ? [pid 5682] +++ exited with 0 +++ [ 125.207434][ T5642] wacom 0003:056A:003F.000D: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5681] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./12/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./12/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./12/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./12/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./12/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./12/debug") = 0 [pid 5614] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./12/binderfs") = 0 [pid 5614] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./12/cgroup.net") = 0 [pid 5614] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 125.324291][ T5683] fido_id[5683]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./12/cgroup.cpu") = 0 [pid 5614] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./12/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./12") = 0 [pid 5614] mkdir("./13", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5684 attached , child_tidptr=0x5555829a26d0) = 29 [pid 5684] set_robust_list(0x5555829a26e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5684] <... set_robust_list resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] chdir("./13") = 0 [pid 5684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5684] setpgid(0, 0) = 0 [pid 5684] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5684] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5684] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5684] write(3, "1000", 4) = 4 [pid 5684] close(3) = 0 [pid 5684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5684] write(1, "executing program\n", 18) = 18 executing program [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5684] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5685 attached => {parent_tid=[30]}, 88) = 30 [pid 5685] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5685] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5684] rt_sigprocmask(SIG_SETMASK, [] [pid 5685] rt_sigprocmask(SIG_SETMASK, [] [pid 5684] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5685] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = 0 [pid 5684] <... futex resumed>) = 1 [pid 5685] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... mkdirat resumed>) = 0 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5684] <... futex resumed>) = 0 [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5684] <... futex resumed>) = 0 [pid 5685] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... mount resumed>) = 0 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] <... futex resumed>) = 0 [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = 0 [pid 5684] <... futex resumed>) = 1 [pid 5685] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... futex resumed>) = 0 [pid 5684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5684] <... futex resumed>) = 0 [pid 5685] write(3, "+p", 2 [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... write resumed>) = 2 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5684] <... futex resumed>) = 0 [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5684] <... futex resumed>) = 0 [pid 5685] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... openat resumed>) = 4 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = 0 [pid 5685] <... futex resumed>) = 1 [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... write resumed>) = 309 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5684] <... futex resumed>) = 0 [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5684] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5685] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5684] <... futex resumed>) = 0 [pid 5685] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] close(3) = 0 [pid 5684] close(4) = 0 [pid 5684] close(5) = -1 EBADF (Bad file descriptor) [pid 5684] close(6) = -1 EBADF (Bad file descriptor) [pid 5684] close(7) = -1 EBADF (Bad file descriptor) [pid 5684] close(8) = -1 EBADF (Bad file descriptor) [pid 5684] close(9) = -1 EBADF (Bad file descriptor) [pid 5684] close(10) = -1 EBADF (Bad file descriptor) [pid 5684] close(11) = -1 EBADF (Bad file descriptor) [pid 5684] close(12) = -1 EBADF (Bad file descriptor) [pid 5684] close(13) = -1 EBADF (Bad file descriptor) [pid 5684] close(14) = -1 EBADF (Bad file descriptor) [pid 5684] close(15) = -1 EBADF (Bad file descriptor) [ 125.602099][ T5642] wacom 0003:056A:003F.000E: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5684] close(16) = -1 EBADF (Bad file descriptor) [pid 5684] close(17) = -1 EBADF (Bad file descriptor) [pid 5684] close(18) = -1 EBADF (Bad file descriptor) [pid 5684] close(19) = -1 EBADF (Bad file descriptor) [pid 5684] close(20) = -1 EBADF (Bad file descriptor) [pid 5684] close(21) = -1 EBADF (Bad file descriptor) [pid 5684] close(22) = -1 EBADF (Bad file descriptor) [pid 5684] close(23) = -1 EBADF (Bad file descriptor) [pid 5684] close(24) = -1 EBADF (Bad file descriptor) [pid 5684] close(25) = -1 EBADF (Bad file descriptor) [pid 5684] close(26) = -1 EBADF (Bad file descriptor) [pid 5684] close(27) = -1 EBADF (Bad file descriptor) [pid 5684] close(28) = -1 EBADF (Bad file descriptor) [pid 5684] close(29) = -1 EBADF (Bad file descriptor) [pid 5684] exit_group(0) = ? [pid 5685] <... futex resumed>) = ? [pid 5685] +++ exited with 0 +++ [pid 5684] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5614] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./13/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./13/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./13/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./13/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./13/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [ 125.705212][ T5686] fido_id[5686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] rmdir("./13/debug") = 0 [pid 5614] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./13/binderfs") = 0 [pid 5614] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./13/cgroup.net") = 0 [pid 5614] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./13/cgroup.cpu") = 0 [pid 5614] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./13/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./13") = 0 [pid 5614] mkdir("./14", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5687 attached [pid 5687] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 31 [pid 5687] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5687] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5687] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5687] chdir("./14") = 0 [pid 5687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5687] setpgid(0, 0) = 0 [pid 5687] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5687] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5687] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5687] write(3, "1000", 4) = 4 [pid 5687] close(3) = 0 [pid 5687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5687] write(1, "executing program\n", 18) = 18 executing program [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5687] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5687] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5688 attached [pid 5688] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5687] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5688] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5687] rt_sigprocmask(SIG_SETMASK, [] [pid 5688] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... futex resumed>) = 0 [pid 5687] <... futex resumed>) = 1 [pid 5688] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] <... mkdirat resumed>) = 0 [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5687] <... futex resumed>) = 0 [pid 5688] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... futex resumed>) = 0 [pid 5687] <... futex resumed>) = 1 [pid 5688] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5688] <... futex resumed>) = 0 [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5687] <... futex resumed>) = 0 [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] <... futex resumed>) = 0 [pid 5688] write(3, "+p", 2) = 2 [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5687] <... futex resumed>) = 0 [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5687] <... futex resumed>) = 0 [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5687] <... futex resumed>) = 0 [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] <... write resumed>) = 309 [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5687] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] <... futex resumed>) = 0 [pid 5688] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5687] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5688] <... futex resumed>) = 0 [pid 5687] close(3 [pid 5688] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] <... close resumed>) = 0 [pid 5687] close(4) = 0 [pid 5687] close(5) = -1 EBADF (Bad file descriptor) [pid 5687] close(6) = -1 EBADF (Bad file descriptor) [pid 5687] close(7) = -1 EBADF (Bad file descriptor) [pid 5687] close(8) = -1 EBADF (Bad file descriptor) [pid 5687] close(9) = -1 EBADF (Bad file descriptor) [pid 5687] close(10) = -1 EBADF (Bad file descriptor) [pid 5687] close(11) = -1 EBADF (Bad file descriptor) [pid 5687] close(12) = -1 EBADF (Bad file descriptor) [pid 5687] close(13) = -1 EBADF (Bad file descriptor) [pid 5687] close(14) = -1 EBADF (Bad file descriptor) [pid 5687] close(15) = -1 EBADF (Bad file descriptor) [pid 5687] close(16) = -1 EBADF (Bad file descriptor) [pid 5687] close(17) = -1 EBADF (Bad file descriptor) [pid 5687] close(18) = -1 EBADF (Bad file descriptor) [pid 5687] close(19) = -1 EBADF (Bad file descriptor) [pid 5687] close(20) = -1 EBADF (Bad file descriptor) [pid 5687] close(21) = -1 EBADF (Bad file descriptor) [pid 5687] close(22) = -1 EBADF (Bad file descriptor) [pid 5687] close(23) = -1 EBADF (Bad file descriptor) [pid 5687] close(24) = -1 EBADF (Bad file descriptor) [pid 5687] close(25) = -1 EBADF (Bad file descriptor) [ 125.976848][ T5642] wacom 0003:056A:003F.000F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5687] close(26) = -1 EBADF (Bad file descriptor) [pid 5687] close(27) = -1 EBADF (Bad file descriptor) [pid 5687] close(28) = -1 EBADF (Bad file descriptor) [pid 5687] close(29) = -1 EBADF (Bad file descriptor) [pid 5687] exit_group(0 [pid 5688] <... futex resumed>) = ? [pid 5687] <... exit_group resumed>) = ? [pid 5688] +++ exited with 0 +++ [pid 5687] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5614] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./14/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./14/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./14/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./14/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./14/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./14/debug") = 0 [pid 5614] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./14/binderfs") = 0 [pid 5614] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./14/cgroup.net") = 0 [pid 5614] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./14/cgroup.cpu") = 0 [pid 5614] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./14/cgroup") = 0 [ 126.097826][ T5689] fido_id[5689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./14") = 0 [pid 5614] mkdir("./15", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5690 attached [pid 5690] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 33 [pid 5690] <... set_robust_list resumed>) = 0 [pid 5690] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5690] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5690] chdir("./15") = 0 [pid 5690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5690] setpgid(0, 0) = 0 [pid 5690] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5690] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5690] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5690] write(3, "1000", 4) = 4 [pid 5690] close(3) = 0 [pid 5690] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5690] write(1, "executing program\n", 18) = 18 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5690] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5690] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5691 attached [pid 5691] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5691] set_robust_list(0x7f8b4551a9a0, 24 [pid 5690] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5691] <... set_robust_list resumed>) = 0 [pid 5690] rt_sigprocmask(SIG_SETMASK, [] [pid 5691] rt_sigprocmask(SIG_SETMASK, [] [pid 5690] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5691] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] <... mkdirat resumed>) = 0 [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 1 [pid 5691] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] <... mount resumed>) = 0 [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 1 [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5690] <... futex resumed>) = 0 [pid 5691] <... openat resumed>) = 3 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] <... futex resumed>) = 1 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] write(3, "+p", 2) = 2 [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5691] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] <... openat resumed>) = 4 [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5691] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... write resumed>) = 309 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5690] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5690] close(3 [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] <... close resumed>) = 0 [pid 5690] close(4) = 0 [pid 5690] close(5) = -1 EBADF (Bad file descriptor) [pid 5690] close(6) = -1 EBADF (Bad file descriptor) [pid 5690] close(7) = -1 EBADF (Bad file descriptor) [pid 5690] close(8) = -1 EBADF (Bad file descriptor) [pid 5690] close(9) = -1 EBADF (Bad file descriptor) [pid 5690] close(10) = -1 EBADF (Bad file descriptor) [pid 5690] close(11) = -1 EBADF (Bad file descriptor) [pid 5690] close(12) = -1 EBADF (Bad file descriptor) [pid 5690] close(13) = -1 EBADF (Bad file descriptor) [pid 5690] close(14) = -1 EBADF (Bad file descriptor) [ 126.355622][ T5642] wacom 0003:056A:003F.0010: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5690] close(15) = -1 EBADF (Bad file descriptor) [pid 5690] close(16) = -1 EBADF (Bad file descriptor) [pid 5690] close(17) = -1 EBADF (Bad file descriptor) [pid 5690] close(18) = -1 EBADF (Bad file descriptor) [pid 5690] close(19) = -1 EBADF (Bad file descriptor) [pid 5690] close(20) = -1 EBADF (Bad file descriptor) [pid 5690] close(21) = -1 EBADF (Bad file descriptor) [pid 5690] close(22) = -1 EBADF (Bad file descriptor) [pid 5690] close(23) = -1 EBADF (Bad file descriptor) [pid 5690] close(24) = -1 EBADF (Bad file descriptor) [pid 5690] close(25) = -1 EBADF (Bad file descriptor) [pid 5690] close(26) = -1 EBADF (Bad file descriptor) [pid 5690] close(27) = -1 EBADF (Bad file descriptor) [pid 5690] close(28) = -1 EBADF (Bad file descriptor) [pid 5690] close(29) = -1 EBADF (Bad file descriptor) [pid 5690] exit_group(0 [pid 5691] <... futex resumed>) = ? [pid 5690] <... exit_group resumed>) = ? [pid 5691] +++ exited with 0 +++ [pid 5690] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5614] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./15/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 126.459995][ T5692] fido_id[5692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./15/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./15/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./15/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./15/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./15/debug") = 0 [pid 5614] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./15/binderfs") = 0 [pid 5614] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./15/cgroup.net") = 0 [pid 5614] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./15/cgroup.cpu") = 0 [pid 5614] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./15/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./15") = 0 [pid 5614] mkdir("./16", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5693 attached , child_tidptr=0x5555829a26d0) = 35 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5693] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5693] <... set_robust_list resumed>) = 0 [pid 5693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5693] chdir("./16") = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5693] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5693] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3) = 0 [pid 5693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5693] write(1, "executing program\n", 18) = 18 executing program [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5693] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5694 attached [pid 5694] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5693] <... clone3 resumed> => {parent_tid=[36]}, 88) = 36 [pid 5694] <... rseq resumed>) = 0 [pid 5694] set_robust_list(0x7f8b4551a9a0, 24 [pid 5693] rt_sigprocmask(SIG_SETMASK, [] [pid 5694] <... set_robust_list resumed>) = 0 [pid 5693] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... mkdirat resumed>) = 0 [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5694] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5694] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... mount resumed>) = 0 [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5694] <... futex resumed>) = 1 [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5693] <... futex resumed>) = 0 [pid 5694] <... openat resumed>) = 3 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5694] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = 0 [pid 5693] <... futex resumed>) = 1 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] write(3, "+p", 2) = 2 [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5693] <... futex resumed>) = 0 [pid 5694] <... openat resumed>) = 4 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = 0 [pid 5693] <... futex resumed>) = 1 [pid 5694] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... write resumed>) = 309 [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5693] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] <... futex resumed>) = 0 [pid 5693] close(3) = 0 [pid 5693] close(4) = 0 [pid 5693] close(5) = -1 EBADF (Bad file descriptor) [pid 5693] close(6) = -1 EBADF (Bad file descriptor) [pid 5693] close(7) = -1 EBADF (Bad file descriptor) [pid 5693] close(8) = -1 EBADF (Bad file descriptor) [pid 5693] close(9) = -1 EBADF (Bad file descriptor) [pid 5693] close(10) = -1 EBADF (Bad file descriptor) [pid 5693] close(11) = -1 EBADF (Bad file descriptor) [pid 5693] close(12) = -1 EBADF (Bad file descriptor) [pid 5693] close(13) = -1 EBADF (Bad file descriptor) [pid 5693] close(14) = -1 EBADF (Bad file descriptor) [pid 5693] close(15) = -1 EBADF (Bad file descriptor) [pid 5693] close(16) = -1 EBADF (Bad file descriptor) [pid 5693] close(17) = -1 EBADF (Bad file descriptor) [pid 5693] close(18) = -1 EBADF (Bad file descriptor) [pid 5693] close(19) = -1 EBADF (Bad file descriptor) [ 126.761386][ T202] wacom 0003:056A:003F.0011: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5693] close(20) = -1 EBADF (Bad file descriptor) [pid 5693] close(21) = -1 EBADF (Bad file descriptor) [pid 5693] close(22) = -1 EBADF (Bad file descriptor) [pid 5693] close(23) = -1 EBADF (Bad file descriptor) [pid 5693] close(24) = -1 EBADF (Bad file descriptor) [pid 5693] close(25) = -1 EBADF (Bad file descriptor) [pid 5693] close(26) = -1 EBADF (Bad file descriptor) [pid 5693] close(27) = -1 EBADF (Bad file descriptor) [pid 5693] close(28) = -1 EBADF (Bad file descriptor) [pid 5693] close(29) = -1 EBADF (Bad file descriptor) [pid 5693] exit_group(0) = ? [pid 5694] <... futex resumed>) = ? [pid 5694] +++ exited with 0 +++ [pid 5693] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./16/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./16/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./16/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./16/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./16/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./16/debug") = 0 [pid 5614] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 126.901267][ T5695] fido_id[5695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] unlink("./16/binderfs") = 0 [pid 5614] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./16/cgroup.net") = 0 [pid 5614] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./16/cgroup.cpu") = 0 [pid 5614] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./16/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./16") = 0 [pid 5614] mkdir("./17", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5696 attached , child_tidptr=0x5555829a26d0) = 37 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5696] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5696] <... set_robust_list resumed>) = 0 [pid 5696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5696] chdir("./17") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5696] setpgid(0, 0) = 0 [pid 5696] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5696] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5696] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5696] write(1, "executing program\n", 18) = 18 executing program [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5696] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5696] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5697 attached [pid 5697] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5696] <... clone3 resumed> => {parent_tid=[38]}, 88) = 38 [pid 5697] <... rseq resumed>) = 0 [pid 5697] set_robust_list(0x7f8b4551a9a0, 24 [pid 5696] rt_sigprocmask(SIG_SETMASK, [] [pid 5697] <... set_robust_list resumed>) = 0 [pid 5696] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] rt_sigprocmask(SIG_SETMASK, [] [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5696] <... futex resumed>) = 0 [pid 5697] <... mkdirat resumed>) = 0 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5696] <... futex resumed>) = 0 [pid 5697] <... mount resumed>) = 0 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5696] <... futex resumed>) = 0 [pid 5697] <... openat resumed>) = 3 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] write(3, "+p", 2 [pid 5696] <... futex resumed>) = 0 [pid 5697] <... write resumed>) = 2 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5696] <... futex resumed>) = 0 [pid 5697] <... openat resumed>) = 4 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5696] <... futex resumed>) = 0 [pid 5697] <... write resumed>) = 309 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5696] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5696] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5697] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5697] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... futex resumed>) = 0 [pid 5696] close(3) = 0 [pid 5696] close(4) = 0 [pid 5696] close(5) = -1 EBADF (Bad file descriptor) [pid 5696] close(6) = -1 EBADF (Bad file descriptor) [pid 5696] close(7) = -1 EBADF (Bad file descriptor) [pid 5696] close(8) = -1 EBADF (Bad file descriptor) [pid 5696] close(9) = -1 EBADF (Bad file descriptor) [ 127.258377][ T202] wacom 0003:056A:003F.0012: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5696] close(10) = -1 EBADF (Bad file descriptor) [pid 5696] close(11) = -1 EBADF (Bad file descriptor) [pid 5696] close(12) = -1 EBADF (Bad file descriptor) [pid 5696] close(13) = -1 EBADF (Bad file descriptor) [pid 5696] close(14) = -1 EBADF (Bad file descriptor) [pid 5696] close(15) = -1 EBADF (Bad file descriptor) [pid 5696] close(16) = -1 EBADF (Bad file descriptor) [pid 5696] close(17) = -1 EBADF (Bad file descriptor) [pid 5696] close(18) = -1 EBADF (Bad file descriptor) [pid 5696] close(19) = -1 EBADF (Bad file descriptor) [pid 5696] close(20) = -1 EBADF (Bad file descriptor) [pid 5696] close(21) = -1 EBADF (Bad file descriptor) [pid 5696] close(22) = -1 EBADF (Bad file descriptor) [pid 5696] close(23) = -1 EBADF (Bad file descriptor) [pid 5696] close(24) = -1 EBADF (Bad file descriptor) [pid 5696] close(25) = -1 EBADF (Bad file descriptor) [pid 5696] close(26) = -1 EBADF (Bad file descriptor) [pid 5696] close(27) = -1 EBADF (Bad file descriptor) [pid 5696] close(28) = -1 EBADF (Bad file descriptor) [pid 5696] close(29) = -1 EBADF (Bad file descriptor) [pid 5696] exit_group(0) = ? [pid 5697] <... futex resumed>) = ? [pid 5697] +++ exited with 0 +++ [pid 5696] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 127.342060][ T5698] fido_id[5698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./17/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./17/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./17/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./17/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./17/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./17/debug") = 0 [pid 5614] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./17/binderfs") = 0 [pid 5614] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./17/cgroup.net") = 0 [pid 5614] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./17/cgroup.cpu") = 0 [pid 5614] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./17/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./17") = 0 [pid 5614] mkdir("./18", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5699 attached , child_tidptr=0x5555829a26d0) = 39 [pid 5699] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5699] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5699] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5699] chdir("./18") = 0 [pid 5699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5699] setpgid(0, 0) = 0 [pid 5699] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5699] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5699] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5699] write(3, "1000", 4) = 4 [pid 5699] close(3) = 0 [pid 5699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5699] write(1, "executing program\n", 18) = 18 executing program [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5699] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5699] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5700 attached => {parent_tid=[40]}, 88) = 40 [pid 5700] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5700] set_robust_list(0x7f8b4551a9a0, 24 [pid 5699] rt_sigprocmask(SIG_SETMASK, [] [pid 5700] <... set_robust_list resumed>) = 0 [pid 5699] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5699] <... futex resumed>) = 0 [pid 5700] <... mkdirat resumed>) = 0 [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] <... futex resumed>) = 0 [pid 5700] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5699] <... futex resumed>) = 0 [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5699] <... futex resumed>) = 0 [pid 5700] <... openat resumed>) = 3 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5699] <... futex resumed>) = 0 [pid 5700] write(3, "+p", 2 [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5700] <... write resumed>) = 2 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5699] <... futex resumed>) = 0 [pid 5700] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5700] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5699] <... futex resumed>) = 0 [pid 5700] <... openat resumed>) = 4 [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] <... futex resumed>) = 0 [pid 5700] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 1 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309) = 309 [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5700] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5699] <... futex resumed>) = 0 [pid 5699] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 1 [pid 5700] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5700] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5699] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] close(3) = 0 [pid 5699] close(4) = 0 [pid 5699] close(5) = -1 EBADF (Bad file descriptor) [pid 5699] close(6) = -1 EBADF (Bad file descriptor) [pid 5699] close(7) = -1 EBADF (Bad file descriptor) [pid 5699] close(8) = -1 EBADF (Bad file descriptor) [pid 5699] close(9) = -1 EBADF (Bad file descriptor) [pid 5699] close(10) = -1 EBADF (Bad file descriptor) [pid 5699] close(11) = -1 EBADF (Bad file descriptor) [pid 5699] close(12) = -1 EBADF (Bad file descriptor) [pid 5699] close(13) = -1 EBADF (Bad file descriptor) [pid 5699] close(14) = -1 EBADF (Bad file descriptor) [pid 5699] close(15) = -1 EBADF (Bad file descriptor) [pid 5699] close(16) = -1 EBADF (Bad file descriptor) [pid 5699] close(17) = -1 EBADF (Bad file descriptor) [pid 5699] close(18) = -1 EBADF (Bad file descriptor) [pid 5699] close(19) = -1 EBADF (Bad file descriptor) [pid 5699] close(20) = -1 EBADF (Bad file descriptor) [pid 5699] close(21) = -1 EBADF (Bad file descriptor) [pid 5699] close(22) = -1 EBADF (Bad file descriptor) [pid 5699] close(23) = -1 EBADF (Bad file descriptor) [ 127.776045][ T5642] wacom 0003:056A:003F.0013: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5699] close(24) = -1 EBADF (Bad file descriptor) [pid 5699] close(25) = -1 EBADF (Bad file descriptor) [pid 5699] close(26) = -1 EBADF (Bad file descriptor) [pid 5699] close(27) = -1 EBADF (Bad file descriptor) [pid 5699] close(28) = -1 EBADF (Bad file descriptor) [pid 5699] close(29) = -1 EBADF (Bad file descriptor) [pid 5699] exit_group(0) = ? [pid 5700] <... futex resumed>) = ? [pid 5700] +++ exited with 0 +++ [pid 5699] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./18/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./18/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./18/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./18/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./18/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./18/debug") = 0 [pid 5614] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./18/binderfs") = 0 [pid 5614] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./18/cgroup.net") = 0 [pid 5614] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./18/cgroup.cpu") = 0 [ 127.902432][ T5701] fido_id[5701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./18/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./18") = 0 [pid 5614] mkdir("./19", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5702 attached , child_tidptr=0x5555829a26d0) = 41 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5702] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5702] chdir("./19") = 0 [pid 5702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5702] setpgid(0, 0) = 0 [pid 5702] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5702] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5702] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5702] write(3, "1000", 4) = 4 [pid 5702] close(3) = 0 [pid 5702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5702] write(1, "executing program\n", 18) = 18 executing program [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5702] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5702] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5702] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5703 attached => {parent_tid=[42]}, 88) = 42 [pid 5702] rt_sigprocmask(SIG_SETMASK, [] [pid 5703] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5702] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... rseq resumed>) = 0 [pid 5703] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5703] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] <... futex resumed>) = 0 [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] <... futex resumed>) = 0 [pid 5703] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... openat resumed>) = 3 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] write(3, "+p", 2) = 2 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] <... futex resumed>) = 0 [pid 5703] <... futex resumed>) = 1 [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5702] <... futex resumed>) = 0 [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... openat resumed>) = 4 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5702] <... futex resumed>) = 0 [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... write resumed>) = 309 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5702] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5702] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5703] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] close(3) = 0 [pid 5702] close(4) = 0 [pid 5702] close(5) = -1 EBADF (Bad file descriptor) [ 128.233902][ T5642] wacom 0003:056A:003F.0014: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5702] close(6) = -1 EBADF (Bad file descriptor) [pid 5702] close(7) = -1 EBADF (Bad file descriptor) [pid 5702] close(8) = -1 EBADF (Bad file descriptor) [pid 5702] close(9) = -1 EBADF (Bad file descriptor) [pid 5702] close(10) = -1 EBADF (Bad file descriptor) [pid 5702] close(11) = -1 EBADF (Bad file descriptor) [pid 5702] close(12) = -1 EBADF (Bad file descriptor) [pid 5702] close(13) = -1 EBADF (Bad file descriptor) [pid 5702] close(14) = -1 EBADF (Bad file descriptor) [pid 5702] close(15) = -1 EBADF (Bad file descriptor) [pid 5702] close(16) = -1 EBADF (Bad file descriptor) [pid 5702] close(17) = -1 EBADF (Bad file descriptor) [pid 5702] close(18) = -1 EBADF (Bad file descriptor) [pid 5702] close(19) = -1 EBADF (Bad file descriptor) [pid 5702] close(20) = -1 EBADF (Bad file descriptor) [pid 5702] close(21) = -1 EBADF (Bad file descriptor) [pid 5702] close(22) = -1 EBADF (Bad file descriptor) [pid 5702] close(23) = -1 EBADF (Bad file descriptor) [pid 5702] close(24) = -1 EBADF (Bad file descriptor) [pid 5702] close(25) = -1 EBADF (Bad file descriptor) [pid 5702] close(26) = -1 EBADF (Bad file descriptor) [pid 5702] close(27) = -1 EBADF (Bad file descriptor) [pid 5702] close(28) = -1 EBADF (Bad file descriptor) [pid 5702] close(29) = -1 EBADF (Bad file descriptor) [pid 5702] exit_group(0) = ? [pid 5703] <... futex resumed>) = ? [pid 5703] +++ exited with 0 +++ [pid 5702] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [ 128.334207][ T5704] fido_id[5704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./19/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./19/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./19/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./19/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./19/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./19/debug") = 0 [pid 5614] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./19/binderfs") = 0 [pid 5614] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./19/cgroup.net") = 0 [pid 5614] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./19/cgroup.cpu") = 0 [pid 5614] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./19/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./19") = 0 [pid 5614] mkdir("./20", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5706 attached [pid 5706] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 43 [pid 5706] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5706] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5706] chdir("./20") = 0 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] setpgid(0, 0) = 0 [pid 5706] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5706] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5706] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5706] write(3, "1000", 4) = 4 [pid 5706] close(3) = 0 [pid 5706] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5706] write(1, "executing program\n", 18) = 18 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5706] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5706] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5707 attached [pid 5707] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5706] <... clone3 resumed> => {parent_tid=[44]}, 88) = 44 [pid 5707] set_robust_list(0x7f8b4551a9a0, 24 [pid 5706] rt_sigprocmask(SIG_SETMASK, [] [pid 5707] <... set_robust_list resumed>) = 0 [pid 5707] rt_sigprocmask(SIG_SETMASK, [] [pid 5706] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5707] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5706] <... futex resumed>) = 0 [pid 5707] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... mkdirat resumed>) = 0 [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = 0 [pid 5706] <... futex resumed>) = 1 [pid 5707] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... futex resumed>) = 0 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] write(3, "+p", 2 [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... write resumed>) = 2 [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... futex resumed>) = 0 [pid 5707] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] <... futex resumed>) = 0 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... write resumed>) = 309 [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] <... futex resumed>) = 0 [pid 5706] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5706] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5707] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] <... futex resumed>) = 0 [pid 5706] close(3) = 0 [pid 5706] close(4 [pid 5707] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... close resumed>) = 0 [pid 5706] close(5) = -1 EBADF (Bad file descriptor) [pid 5706] close(6) = -1 EBADF (Bad file descriptor) [pid 5706] close(7) = -1 EBADF (Bad file descriptor) [pid 5706] close(8) = -1 EBADF (Bad file descriptor) [pid 5706] close(9) = -1 EBADF (Bad file descriptor) [pid 5706] close(10) = -1 EBADF (Bad file descriptor) [pid 5706] close(11) = -1 EBADF (Bad file descriptor) [pid 5706] close(12) = -1 EBADF (Bad file descriptor) [pid 5706] close(13) = -1 EBADF (Bad file descriptor) [pid 5706] close(14) = -1 EBADF (Bad file descriptor) [pid 5706] close(15) = -1 EBADF (Bad file descriptor) [pid 5706] close(16) = -1 EBADF (Bad file descriptor) [pid 5706] close(17) = -1 EBADF (Bad file descriptor) [pid 5706] close(18) = -1 EBADF (Bad file descriptor) [pid 5706] close(19) = -1 EBADF (Bad file descriptor) [pid 5706] close(20) = -1 EBADF (Bad file descriptor) [ 128.683211][ T5642] wacom 0003:056A:003F.0015: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5706] close(21) = -1 EBADF (Bad file descriptor) [pid 5706] close(22) = -1 EBADF (Bad file descriptor) [pid 5706] close(23) = -1 EBADF (Bad file descriptor) [pid 5706] close(24) = -1 EBADF (Bad file descriptor) [pid 5706] close(25) = -1 EBADF (Bad file descriptor) [pid 5706] close(26) = -1 EBADF (Bad file descriptor) [pid 5706] close(27) = -1 EBADF (Bad file descriptor) [pid 5706] close(28) = -1 EBADF (Bad file descriptor) [pid 5706] close(29) = -1 EBADF (Bad file descriptor) [pid 5706] exit_group(0) = ? [pid 5707] <... futex resumed>) = ? [pid 5707] +++ exited with 0 +++ [pid 5706] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./20/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./20/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./20/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./20/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./20/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./20/debug") = 0 [pid 5614] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./20/binderfs") = 0 [pid 5614] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./20/cgroup.net") = 0 [pid 5614] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./20/cgroup.cpu") = 0 [pid 5614] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./20/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./20") = 0 [ 128.836451][ T5708] fido_id[5708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] mkdir("./21", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829a26d0) = 45 ci2-upstream-fs/strace-static-x86_64: Process 5709 attached [pid 5709] set_robust_list(0x5555829a26e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5709] <... set_robust_list resumed>) = 0 [pid 5709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5709] chdir("./21") = 0 [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5709] setpgid(0, 0) = 0 [pid 5709] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5709] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5709] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5709] write(3, "1000", 4) = 4 [pid 5709] close(3) = 0 [pid 5709] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5709] write(1, "executing program\n", 18) = 18 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5709] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5709] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5709] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5710 attached [pid 5710] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5709] <... clone3 resumed> => {parent_tid=[46]}, 88) = 46 [pid 5710] set_robust_list(0x7f8b4551a9a0, 24 [pid 5709] rt_sigprocmask(SIG_SETMASK, [] [pid 5710] <... set_robust_list resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [] [pid 5709] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5710] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5710] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5709] <... futex resumed>) = 0 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] <... mkdirat resumed>) = 0 [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5709] <... futex resumed>) = 0 [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] <... futex resumed>) = 0 [pid 5709] <... futex resumed>) = 1 [pid 5710] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] <... mount resumed>) = 0 [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... futex resumed>) = 0 [pid 5710] <... futex resumed>) = 1 [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5709] <... futex resumed>) = 0 [pid 5710] <... openat resumed>) = 3 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... futex resumed>) = 0 [pid 5710] <... futex resumed>) = 1 [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] write(3, "+p", 2 [pid 5709] <... futex resumed>) = 0 [pid 5710] <... write resumed>) = 2 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] <... futex resumed>) = 0 [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5709] <... futex resumed>) = 0 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] <... openat resumed>) = 4 [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5709] <... futex resumed>) = 0 [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5710] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] <... write resumed>) = 309 [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5709] <... futex resumed>) = 0 [pid 5710] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5709] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] <... write resumed>) = 16 [pid 5709] <... futex resumed>) = 0 [pid 5710] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] <... futex resumed>) = 0 [pid 5709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5709] close(3) = 0 [pid 5709] close(4) = 0 [pid 5709] close(5) = -1 EBADF (Bad file descriptor) [pid 5709] close(6) = -1 EBADF (Bad file descriptor) [pid 5709] close(7) = -1 EBADF (Bad file descriptor) [pid 5709] close(8) = -1 EBADF (Bad file descriptor) [pid 5709] close(9) = -1 EBADF (Bad file descriptor) [pid 5709] close(10) = -1 EBADF (Bad file descriptor) [pid 5709] close(11) = -1 EBADF (Bad file descriptor) [pid 5709] close(12) = -1 EBADF (Bad file descriptor) [pid 5709] close(13) = -1 EBADF (Bad file descriptor) [pid 5709] close(14) = -1 EBADF (Bad file descriptor) [pid 5709] close(15) = -1 EBADF (Bad file descriptor) [pid 5709] close(16) = -1 EBADF (Bad file descriptor) [pid 5709] close(17) = -1 EBADF (Bad file descriptor) [pid 5709] close(18) = -1 EBADF (Bad file descriptor) [pid 5709] close(19) = -1 EBADF (Bad file descriptor) [pid 5709] close(20) = -1 EBADF (Bad file descriptor) [pid 5709] close(21) = -1 EBADF (Bad file descriptor) [pid 5709] close(22) = -1 EBADF (Bad file descriptor) [pid 5709] close(23) = -1 EBADF (Bad file descriptor) [pid 5709] close(24) = -1 EBADF (Bad file descriptor) [pid 5709] close(25) = -1 EBADF (Bad file descriptor) [pid 5709] close(26) = -1 EBADF (Bad file descriptor) [ 129.137486][ T202] wacom 0003:056A:003F.0016: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5709] close(27) = -1 EBADF (Bad file descriptor) [pid 5709] close(28) = -1 EBADF (Bad file descriptor) [pid 5709] close(29) = -1 EBADF (Bad file descriptor) [pid 5709] exit_group(0) = ? [pid 5710] <... futex resumed>) = ? [pid 5710] +++ exited with 0 +++ [pid 5709] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./21/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./21/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./21/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./21/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./21/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./21/debug") = 0 [pid 5614] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./21/binderfs") = 0 [pid 5614] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./21/cgroup.net") = 0 [pid 5614] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./21/cgroup.cpu") = 0 [pid 5614] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./21/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./21") = 0 [ 129.271063][ T5711] fido_id[5711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] mkdir("./22", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5712 attached [pid 5712] set_robust_list(0x5555829a26e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 47 [pid 5712] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5712] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5712] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5712] chdir("./22") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5712] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5712] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5712] write(1, "executing program\n", 18) = 18 executing program [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5712] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5712] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5713 attached [pid 5713] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5712] <... clone3 resumed> => {parent_tid=[48]}, 88) = 48 [pid 5713] set_robust_list(0x7f8b4551a9a0, 24 [pid 5712] rt_sigprocmask(SIG_SETMASK, [] [pid 5713] <... set_robust_list resumed>) = 0 [pid 5712] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] <... mkdirat resumed>) = 0 [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5712] <... futex resumed>) = 0 [pid 5713] <... mount resumed>) = 0 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5713] <... futex resumed>) = 0 [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5712] <... futex resumed>) = 0 [pid 5713] <... openat resumed>) = 3 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5713] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] <... futex resumed>) = 0 [pid 5713] write(3, "+p", 2) = 2 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] <... openat resumed>) = 4 [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5713] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5712] <... futex resumed>) = 1 [pid 5713] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] <... write resumed>) = 309 [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5713] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] <... futex resumed>) = 0 [pid 5713] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5712] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] <... write resumed>) = 16 [pid 5713] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5713] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... futex resumed>) = 0 [pid 5712] close(3) = 0 [pid 5712] close(4) = 0 [pid 5712] close(5) = -1 EBADF (Bad file descriptor) [pid 5712] close(6) = -1 EBADF (Bad file descriptor) [pid 5712] close(7) = -1 EBADF (Bad file descriptor) [pid 5712] close(8) = -1 EBADF (Bad file descriptor) [pid 5712] close(9) = -1 EBADF (Bad file descriptor) [pid 5712] close(10) = -1 EBADF (Bad file descriptor) [pid 5712] close(11) = -1 EBADF (Bad file descriptor) [pid 5712] close(12) = -1 EBADF (Bad file descriptor) [pid 5712] close(13) = -1 EBADF (Bad file descriptor) [pid 5712] close(14) = -1 EBADF (Bad file descriptor) [pid 5712] close(15) = -1 EBADF (Bad file descriptor) [ 129.581586][ T5642] wacom 0003:056A:003F.0017: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 129.628997][ C1] net_ratelimit: 2 callbacks suppressed [pid 5712] close(16) = -1 EBADF (Bad file descriptor) [pid 5712] close(17) = -1 EBADF (Bad file descriptor) [pid 5712] close(18) = -1 EBADF (Bad file descriptor) [pid 5712] close(19) = -1 EBADF (Bad file descriptor) [pid 5712] close(20) = -1 EBADF (Bad file descriptor) [pid 5712] close(21) = -1 EBADF (Bad file descriptor) [pid 5712] close(22) = -1 EBADF (Bad file descriptor) [pid 5712] close(23) = -1 EBADF (Bad file descriptor) [pid 5712] close(24) = -1 EBADF (Bad file descriptor) [pid 5712] close(25) = -1 EBADF (Bad file descriptor) [pid 5712] close(26) = -1 EBADF (Bad file descriptor) [pid 5712] close(27) = -1 EBADF (Bad file descriptor) [pid 5712] close(28) = -1 EBADF (Bad file descriptor) [pid 5712] close(29) = -1 EBADF (Bad file descriptor) [pid 5712] exit_group(0) = ? [pid 5713] <... futex resumed>) = ? [pid 5713] +++ exited with 0 +++ [pid 5712] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./22/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./22/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 129.693192][ T5715] fido_id[5715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] newfstatat(AT_FDCWD, "./22/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./22/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./22/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./22/debug") = 0 [pid 5614] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./22/binderfs") = 0 [pid 5614] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./22/cgroup.net") = 0 [pid 5614] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./22/cgroup.cpu") = 0 [pid 5614] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./22/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./22") = 0 [pid 5614] mkdir("./23", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5717 attached , child_tidptr=0x5555829a26d0) = 49 [pid 5717] set_robust_list(0x5555829a26e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5717] <... set_robust_list resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5717] chdir("./23") = 0 [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5717] setpgid(0, 0) = 0 [pid 5717] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5717] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5717] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5717] write(3, "1000", 4) = 4 [pid 5717] close(3) = 0 executing program [pid 5717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5717] write(1, "executing program\n", 18) = 18 [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5717] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5717] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5717] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5718 attached [pid 5718] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5717] <... clone3 resumed> => {parent_tid=[50]}, 88) = 50 [pid 5717] rt_sigprocmask(SIG_SETMASK, [] [pid 5718] <... rseq resumed>) = 0 [pid 5718] set_robust_list(0x7f8b4551a9a0, 24 [pid 5717] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5718] <... set_robust_list resumed>) = 0 [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] rt_sigprocmask(SIG_SETMASK, [] [pid 5717] <... futex resumed>) = 0 [pid 5718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5718] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5717] <... futex resumed>) = 0 [pid 5718] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... mount resumed>) = 0 [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5718] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5717] <... futex resumed>) = 0 [pid 5718] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... openat resumed>) = 3 [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = 0 [pid 5718] <... futex resumed>) = 1 [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] write(3, "+p", 2 [pid 5717] <... futex resumed>) = 0 [pid 5718] <... write resumed>) = 2 [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5718] <... futex resumed>) = 0 [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5717] <... futex resumed>) = 0 [pid 5718] <... openat resumed>) = 4 [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5718] <... futex resumed>) = 0 [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5718] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... write resumed>) = 309 [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5718] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5718] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5717] <... futex resumed>) = 0 [pid 5717] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... write resumed>) = 16 [pid 5718] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5718] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] <... futex resumed>) = 0 [pid 5717] close(3) = 0 [pid 5717] close(4) = 0 [pid 5717] close(5) = -1 EBADF (Bad file descriptor) [pid 5717] close(6) = -1 EBADF (Bad file descriptor) [pid 5717] close(7) = -1 EBADF (Bad file descriptor) [pid 5717] close(8) = -1 EBADF (Bad file descriptor) [pid 5717] close(9) = -1 EBADF (Bad file descriptor) [pid 5717] close(10) = -1 EBADF (Bad file descriptor) [pid 5717] close(11) = -1 EBADF (Bad file descriptor) [pid 5717] close(12) = -1 EBADF (Bad file descriptor) [pid 5717] close(13) = -1 EBADF (Bad file descriptor) [pid 5717] close(14) = -1 EBADF (Bad file descriptor) [pid 5717] close(15) = -1 EBADF (Bad file descriptor) [pid 5717] close(16) = -1 EBADF (Bad file descriptor) [pid 5717] close(17) = -1 EBADF (Bad file descriptor) [pid 5717] close(18) = -1 EBADF (Bad file descriptor) [pid 5717] close(19) = -1 EBADF (Bad file descriptor) [pid 5717] close(20) = -1 EBADF (Bad file descriptor) [pid 5717] close(21) = -1 EBADF (Bad file descriptor) [pid 5717] close(22) = -1 EBADF (Bad file descriptor) [pid 5717] close(23) = -1 EBADF (Bad file descriptor) [pid 5717] close(24) = -1 EBADF (Bad file descriptor) [pid 5717] close(25) = -1 EBADF (Bad file descriptor) [ 130.052502][ T5642] wacom 0003:056A:003F.0018: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5717] close(26) = -1 EBADF (Bad file descriptor) [pid 5717] close(27) = -1 EBADF (Bad file descriptor) [pid 5717] close(28) = -1 EBADF (Bad file descriptor) [pid 5717] close(29) = -1 EBADF (Bad file descriptor) [pid 5717] exit_group(0 [pid 5718] <... futex resumed>) = ? [pid 5717] <... exit_group resumed>) = ? [pid 5718] +++ exited with 0 +++ [pid 5717] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./23/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./23/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./23/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./23/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./23/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./23/debug") = 0 [pid 5614] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./23/binderfs") = 0 [pid 5614] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./23/cgroup.net") = 0 [pid 5614] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./23/cgroup.cpu") = 0 [pid 5614] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./23/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./23") = 0 [pid 5614] mkdir("./24", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5721 attached , child_tidptr=0x5555829a26d0) = 51 [pid 5721] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5721] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5721] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5721] chdir("./24") = 0 [pid 5721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5721] setpgid(0, 0) = 0 [pid 5721] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5721] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5721] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5721] write(3, "1000", 4) = 4 [pid 5721] close(3) = 0 [pid 5721] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5721] write(1, "executing program\n", 18) = 18 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5721] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5721] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5721] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5721] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5721] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5722 attached [pid 5722] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5722] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5722] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5721] <... clone3 resumed> => {parent_tid=[52]}, 88) = 52 [pid 5721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] <... futex resumed>) = 0 [ 130.257324][ T5720] fido_id[5720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5722] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5722] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5721] <... futex resumed>) = 0 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5721] <... futex resumed>) = 0 [pid 5722] <... futex resumed>) = 1 [pid 5722] write(3, "+p", 2 [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] <... write resumed>) = 2 [pid 5721] <... futex resumed>) = 0 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5721] <... futex resumed>) = 0 [pid 5722] <... futex resumed>) = 1 [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5721] <... futex resumed>) = 0 [pid 5722] <... openat resumed>) = 4 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5721] <... futex resumed>) = 0 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309) = 309 [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5721] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5721] <... futex resumed>) = 0 [pid 5722] <... write resumed>) = 16 [pid 5721] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5722] <... futex resumed>) = 0 [pid 5721] close(3 [pid 5722] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5721] <... close resumed>) = 0 [pid 5721] close(4) = 0 [pid 5721] close(5) = -1 EBADF (Bad file descriptor) [pid 5721] close(6) = -1 EBADF (Bad file descriptor) [pid 5721] close(7) = -1 EBADF (Bad file descriptor) [pid 5721] close(8) = -1 EBADF (Bad file descriptor) [pid 5721] close(9) = -1 EBADF (Bad file descriptor) [pid 5721] close(10) = -1 EBADF (Bad file descriptor) [pid 5721] close(11) = -1 EBADF (Bad file descriptor) [pid 5721] close(12) = -1 EBADF (Bad file descriptor) [pid 5721] close(13) = -1 EBADF (Bad file descriptor) [pid 5721] close(14) = -1 EBADF (Bad file descriptor) [pid 5721] close(15) = -1 EBADF (Bad file descriptor) [pid 5721] close(16) = -1 EBADF (Bad file descriptor) [pid 5721] close(17) = -1 EBADF (Bad file descriptor) [pid 5721] close(18) = -1 EBADF (Bad file descriptor) [pid 5721] close(19) = -1 EBADF (Bad file descriptor) [pid 5721] close(20) = -1 EBADF (Bad file descriptor) [pid 5721] close(21) = -1 EBADF (Bad file descriptor) [pid 5721] close(22) = -1 EBADF (Bad file descriptor) [pid 5721] close(23) = -1 EBADF (Bad file descriptor) [ 130.409532][ T952] wacom 0003:056A:003F.0019: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5721] close(24) = -1 EBADF (Bad file descriptor) [pid 5721] close(25) = -1 EBADF (Bad file descriptor) [pid 5721] close(26) = -1 EBADF (Bad file descriptor) [pid 5721] close(27) = -1 EBADF (Bad file descriptor) [pid 5721] close(28) = -1 EBADF (Bad file descriptor) [pid 5721] close(29) = -1 EBADF (Bad file descriptor) [pid 5721] exit_group(0 [pid 5722] <... futex resumed>) = ? [pid 5722] +++ exited with 0 +++ [pid 5721] <... exit_group resumed>) = ? [pid 5721] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./24/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./24/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./24/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./24/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./24/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./24/debug") = 0 [pid 5614] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./24/binderfs") = 0 [pid 5614] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./24/cgroup.net") = 0 [pid 5614] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./24/cgroup.cpu") = 0 [pid 5614] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./24/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./24") = 0 [pid 5614] mkdir("./25", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 130.573583][ T5724] fido_id[5724]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5725 attached [pid 5725] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5725] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... clone resumed>, child_tidptr=0x5555829a26d0) = 53 [pid 5725] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5725] chdir("./25") = 0 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5725] setpgid(0, 0) = 0 [pid 5725] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5725] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5725] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5725] write(3, "1000", 4) = 4 [pid 5725] close(3) = 0 [pid 5725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5725] write(1, "executing program\n", 18) = 18 executing program [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5725] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5725] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5725] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5726 attached [pid 5726] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5726] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5725] <... clone3 resumed> => {parent_tid=[54]}, 88) = 54 [pid 5726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] <... futex resumed>) = 0 [pid 5725] <... futex resumed>) = 1 [pid 5726] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] <... mkdirat resumed>) = 0 [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] <... futex resumed>) = 0 [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] <... futex resumed>) = 0 [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] <... futex resumed>) = 0 [pid 5725] <... futex resumed>) = 1 [pid 5726] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR) = 3 [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] <... futex resumed>) = 0 [pid 5725] <... futex resumed>) = 1 [pid 5726] write(3, "+p", 2) = 2 [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] <... futex resumed>) = 0 [pid 5726] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] <... futex resumed>) = 0 [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] <... futex resumed>) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5726] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] <... write resumed>) = 309 [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5726] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5725] <... futex resumed>) = 0 [pid 5726] <... write resumed>) = 16 [pid 5725] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5726] <... futex resumed>) = 0 [pid 5725] close(3 [pid 5726] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] <... close resumed>) = 0 [pid 5725] close(4) = 0 [pid 5725] close(5) = -1 EBADF (Bad file descriptor) [pid 5725] close(6) = -1 EBADF (Bad file descriptor) [pid 5725] close(7) = -1 EBADF (Bad file descriptor) [pid 5725] close(8) = -1 EBADF (Bad file descriptor) [pid 5725] close(9) = -1 EBADF (Bad file descriptor) [pid 5725] close(10) = -1 EBADF (Bad file descriptor) [pid 5725] close(11) = -1 EBADF (Bad file descriptor) [pid 5725] close(12) = -1 EBADF (Bad file descriptor) [pid 5725] close(13) = -1 EBADF (Bad file descriptor) [pid 5725] close(14) = -1 EBADF (Bad file descriptor) [pid 5725] close(15) = -1 EBADF (Bad file descriptor) [pid 5725] close(16) = -1 EBADF (Bad file descriptor) [pid 5725] close(17) = -1 EBADF (Bad file descriptor) [pid 5725] close(18) = -1 EBADF (Bad file descriptor) [pid 5725] close(19) = -1 EBADF (Bad file descriptor) [pid 5725] close(20) = -1 EBADF (Bad file descriptor) [pid 5725] close(21) = -1 EBADF (Bad file descriptor) [pid 5725] close(22) = -1 EBADF (Bad file descriptor) [pid 5725] close(23) = -1 EBADF (Bad file descriptor) [pid 5725] close(24) = -1 EBADF (Bad file descriptor) [pid 5725] close(25) = -1 EBADF (Bad file descriptor) [ 130.891908][ T202] wacom 0003:056A:003F.001A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5725] close(26) = -1 EBADF (Bad file descriptor) [pid 5725] close(27) = -1 EBADF (Bad file descriptor) [pid 5725] close(28) = -1 EBADF (Bad file descriptor) [pid 5725] close(29) = -1 EBADF (Bad file descriptor) [pid 5725] exit_group(0) = ? [pid 5726] <... futex resumed>) = ? [pid 5726] +++ exited with 0 +++ [pid 5725] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./25/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 131.018221][ T5727] fido_id[5727]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] umount2("./25/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./25/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./25/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./25/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./25/debug") = 0 [pid 5614] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./25/binderfs") = 0 [pid 5614] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./25/cgroup.net") = 0 [pid 5614] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./25/cgroup.cpu") = 0 [pid 5614] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./25/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./25") = 0 [pid 5614] mkdir("./26", 0777) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5728 attached , child_tidptr=0x5555829a26d0) = 55 [pid 5728] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5728] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] chdir("./26") = 0 [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5728] setpgid(0, 0) = 0 [pid 5728] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5728] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5728] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5728] write(3, "1000", 4) = 4 [pid 5728] close(3) = 0 [pid 5728] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5728] write(1, "executing program\n", 18) = 18 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5728] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5728] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5728] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5730 attached => {parent_tid=[56]}, 88) = 56 [pid 5730] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5728] rt_sigprocmask(SIG_SETMASK, [] [pid 5730] set_robust_list(0x7f8b4551a9a0, 24 [pid 5728] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] <... set_robust_list resumed>) = 0 [pid 5730] rt_sigprocmask(SIG_SETMASK, [] [pid 5728] <... futex resumed>) = 0 [pid 5730] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5730] mkdirat(AT_FDCWD, "./debug", 0254 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] <... mkdirat resumed>) = 0 [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5730] <... futex resumed>) = 0 [pid 5730] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] <... futex resumed>) = 0 [pid 5730] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5728] <... futex resumed>) = 0 [pid 5730] <... openat resumed>) = 3 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] write(3, "+p", 2 [pid 5728] <... futex resumed>) = 0 [pid 5730] <... write resumed>) = 2 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5730] openat(AT_FDCWD, "/dev/uhid", O_RDWR) = 4 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] <... futex resumed>) = 0 [pid 5728] <... futex resumed>) = 0 [pid 5730] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] <... write resumed>) = 309 [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5728] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5730] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5728] close(3) = 0 [pid 5730] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] close(4) = 0 [pid 5728] close(5) = -1 EBADF (Bad file descriptor) [pid 5728] close(6) = -1 EBADF (Bad file descriptor) [pid 5728] close(7) = -1 EBADF (Bad file descriptor) [pid 5728] close(8) = -1 EBADF (Bad file descriptor) [pid 5728] close(9) = -1 EBADF (Bad file descriptor) [pid 5728] close(10) = -1 EBADF (Bad file descriptor) [pid 5728] close(11) = -1 EBADF (Bad file descriptor) [pid 5728] close(12) = -1 EBADF (Bad file descriptor) [pid 5728] close(13) = -1 EBADF (Bad file descriptor) [pid 5728] close(14) = -1 EBADF (Bad file descriptor) [pid 5728] close(15) = -1 EBADF (Bad file descriptor) [pid 5728] close(16) = -1 EBADF (Bad file descriptor) [pid 5728] close(17) = -1 EBADF (Bad file descriptor) [pid 5728] close(18) = -1 EBADF (Bad file descriptor) [pid 5728] close(19) = -1 EBADF (Bad file descriptor) [ 131.288177][ T202] wacom 0003:056A:003F.001B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [pid 5728] close(20) = -1 EBADF (Bad file descriptor) [pid 5728] close(21) = -1 EBADF (Bad file descriptor) [pid 5728] close(22) = -1 EBADF (Bad file descriptor) [pid 5728] close(23) = -1 EBADF (Bad file descriptor) [pid 5728] close(24) = -1 EBADF (Bad file descriptor) [pid 5728] close(25) = -1 EBADF (Bad file descriptor) [pid 5728] close(26) = -1 EBADF (Bad file descriptor) [pid 5728] close(27) = -1 EBADF (Bad file descriptor) [pid 5728] close(28) = -1 EBADF (Bad file descriptor) [pid 5728] close(29) = -1 EBADF (Bad file descriptor) [pid 5728] exit_group(0 [pid 5730] <... futex resumed>) = ? [pid 5728] <... exit_group resumed>) = ? [pid 5730] +++ exited with 0 +++ [pid 5728] +++ exited with 0 +++ [pid 5614] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5614] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5614] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5614] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 7 entries */, 32768) = 208 [pid 5614] umount2("./26/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5614] umount2("./26/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./26/debug", {st_mode=S_IFDIR|0200, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] umount2("./26/debug", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./26/debug", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5614] fstat(4, {st_mode=S_IFDIR|0200, st_size=40, ...}) = 0 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 2 entries */, 32768) = 48 [pid 5614] getdents64(4, 0x5555829ab7d0 /* 0 entries */, 32768) = 0 [pid 5614] close(4) = 0 [pid 5614] rmdir("./26/debug") = 0 [pid 5614] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./26/binderfs") = 0 [pid 5614] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./26/cgroup.net") = 0 [pid 5614] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./26/cgroup.cpu") = 0 [pid 5614] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5614] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5614] unlink("./26/cgroup") = 0 [pid 5614] getdents64(3, 0x5555829a3790 /* 0 entries */, 32768) = 0 [pid 5614] close(3) = 0 [pid 5614] rmdir("./26") = 0 [pid 5614] mkdir("./27", 0777) = 0 [ 131.412024][ T5731] fido_id[5731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829a26d0) = 57 ci2-upstream-fs/strace-static-x86_64: Process 5732 attached [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5732] set_robust_list(0x5555829a26e0, 24) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5732] chdir("./27") = 0 [pid 5732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5732] setpgid(0, 0) = 0 [pid 5732] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5732] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5732] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5732] write(3, "1000", 4) = 4 [pid 5732] close(3) = 0 [pid 5732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5732] write(1, "executing program\n", 18) = 18 executing program [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5732] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b4555d110, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b4554f0a0}, NULL, 8) = 0 [pid 5732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b454fa000 [pid 5732] mprotect(0x7f8b454fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b4551a990, parent_tid=0x7f8b4551a990, exit_signal=0, stack=0x7f8b454fa000, stack_size=0x202c0, tls=0x7f8b4551a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5733 attached => {parent_tid=[58]}, 88) = 58 [pid 5732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5733] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... rseq resumed>) = 0 [pid 5732] <... futex resumed>) = 0 [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] set_robust_list(0x7f8b4551a9a0, 24) = 0 [pid 5733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5733] mkdirat(AT_FDCWD, "./debug", 0254) = 0 [pid 5733] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5733] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] <... futex resumed>) = 0 [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5733] <... futex resumed>) = 0 [pid 5733] mount(NULL, "./debug", "debugfs", 0, NULL [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] <... mount resumed>) = 0 [pid 5733] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5732] <... futex resumed>) = 0 [pid 5733] openat(AT_FDCWD, "./debug/dynamic_debug/control", O_RDWR [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] <... openat resumed>) = 3 [pid 5733] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5732] <... futex resumed>) = 0 [pid 5733] write(3, "+p", 2 [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] <... write resumed>) = 2 [pid 5733] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5732] <... futex resumed>) = 0 [pid 5733] openat(AT_FDCWD, "/dev/uhid", O_RDWR [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] <... openat resumed>) = 4 [pid 5733] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5732] <... futex resumed>) = 0 [pid 5733] write(4, "\x0b\x00\x00\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 309 [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] <... write resumed>) = 309 [pid 5733] futex(0x7f8b455f7b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] futex(0x7f8b455f7b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] futex(0x7f8b455f7b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5732] <... futex resumed>) = 1 [pid 5732] futex(0x7f8b455f7b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 131.648025][ T202] wacom 0003:056A:003F.001C: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 131.661580][ T5610] eth0: xmit ffff888028ce20f0 42:01:0a:80:00:01 [ 131.661613][ T5610] Added buffer head 12 to ffff888029c1ee00 [ 131.661676][ T1196] virtqueue callback for ffff888029c1ee00 (ffffffff86322960) [ 131.661706][ C1] Sent skb ffff888028ce20f0 [ 131.661726][ C1] No more buffers in queue [ 131.661856][ T1195] virtqueue callback for ffff888028e26600 (ffffffff86322820) [ 131.661883][ C1] No more buffers in queue [ 131.661938][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 131.661964][ C1] No more buffers in queue [ 131.662652][ T5610] eth0: xmit ffff88803d85fc70 42:01:0a:80:00:01 [ 131.662683][ T5610] Added buffer head 12 to ffff888029c1ee00 [ 131.662740][ T1196] virtqueue callback for ffff888029c1ee00 (ffffffff86322960) [ 131.662841][ C1] Sent skb ffff88803d85fc70 [ 131.662874][ C1] No more buffers in queue [ 131.662894][ C1] No more buffers in queue [ 131.662932][ T1195] virtqueue callback for ffff888028e26600 (ffffffff86322820) [ 131.662958][ C1] No more buffers in queue [ 131.663013][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 131.663039][ C1] No more buffers in queue [ 131.663397][ T5733] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006c: 0000 [#1] SMP KASAN PTI [ 131.780522][ T5733] KASAN: null-ptr-deref in range [0x0000000000000360-0x0000000000000367] [ 131.788978][ T5733] CPU: 1 UID: 0 PID: 5733 Comm: syz-executor234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.799242][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.809325][ T5733] RIP: 0010:wacom_intuos_irq+0x3318/0x33f0 [ 131.815191][ T5733] Code: f1 ff ff 48 8b 7c 24 10 e8 35 68 9b f9 e9 0c f1 ff ff 49 81 c6 60 03 00 00 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 3a 68 9b f9 49 8b 1e 48 b8 00 00 00 [ 131.834817][ T5733] RSP: 0018:ffffc900057278f0 EFLAGS: 00010206 [ 131.840916][ T5733] RAX: 000000000000006c RBX: 1ffff11006ce3a29 RCX: dffffc0000000000 [ 131.848917][ T5733] RDX: ffffffff8897159a RSI: ffffffff8f44ff80 RDI: 0000000000000000 [ 131.856911][ T5733] RBP: 0000000000000000 R08: ffff88801eb9be80 R09: 0000000000000007 [ 131.864907][ T5733] R10: 0000000000000100 R11: 0000000000000011 R12: ffff888049dd80a6 [ 131.872892][ T5733] R13: 1ffff11006ce3a40 R14: 0000000000000360 R15: 1ffff110093bb014 [ 131.880889][ T5733] FS: 00007f8b4551a6c0(0000) GS:ffff888125cc3000(0000) knlGS:0000000000000000 [ 131.889860][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.896475][ T5733] CR2: 00005555829a2340 CR3: 00000000332a8000 CR4: 00000000003526f0 [ 131.904479][ T5733] Call Trace: [ 131.907782][ T5733] [ 131.910746][ T5733] ? __lock_acquire+0x747/0x2de0 [ 131.915718][ T5733] wacom_wac_irq+0x102d/0x9b90 [ 131.920508][ T5733] ? __lock_acquire+0x747/0x2de0 [ 131.925481][ T5733] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.930532][ T5733] wacom_raw_event+0x9d2/0xd10 [ 131.935329][ T5733] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 131.941178][ T5733] ? down_trylock+0x50/0xb0 [ 131.945704][ T5733] __hid_input_report+0x421/0x580 [ 131.950784][ T5733] ? __pfx_wacom_raw_event+0x10/0x10 [ 131.956095][ T5733] uhid_dev_input2+0xbc/0x150 [ 131.960813][ T5733] uhid_char_write+0x4a7/0xc90 [ 131.965600][ T5733] ? __pfx_uhid_char_write+0x10/0x10 [ 131.970910][ T5733] vfs_write+0x29f/0xbb0 [ 131.975178][ T5733] ? __pfx_vfs_write+0x10/0x10 [ 131.979964][ T5733] ? __fget_files+0x2a/0x420 [ 131.984576][ T5733] ? __fget_files+0x2a/0x420 [ 131.989184][ T5733] ? __fget_files+0x3a8/0x420 [ 131.993878][ T5733] ? __fget_files+0x2a/0x420 [ 131.998491][ T5733] ksys_write+0x156/0x270 [ 132.002843][ T5733] ? __pfx_ksys_write+0x10/0x10 [ 132.007823][ T5733] do_syscall_64+0x166/0x520 [ 132.012432][ T5733] ? trace_irq_disable+0x3b/0x140 [ 132.017492][ T5733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.023579][ T5733] ? clear_bhb_loop+0x70/0xc0 [ 132.028302][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.034217][ T5733] RIP: 0033:0x7f8b45547d49 [ 132.038676][ T5733] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 132.058297][ T5733] RSP: 002b:00007f8b4551a1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.066727][ T5733] RAX: ffffffffffffffda RBX: 00007f8b455f7b48 RCX: 00007f8b45547d49 [ 132.074719][ T5733] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000004 [ 132.082750][ T5733] RBP: 00007f8b455f7b40 R08: 35203a6b63617473 R09: 35203a6b63617473 [ 132.090746][ T5733] R10: 35203a6b63617473 R11: 0000000000000246 R12: 00007f8b455c4bb8 [pid 5733] write(4, "\x0c\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16 [pid 5732] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 132.098757][ T5733] R13: 0000200000001004 R14: 0000200000001000 R15: 0000200000000300 [ 132.106756][ T5733] [ 132.109791][ T5733] Modules linked in: [ 132.113799][ T5733] ---[ end trace 0000000000000000 ]--- [ 132.120089][ T5610] eth0: xmit ffff88803d85f9f0 42:01:0a:80:00:01 [ 132.120125][ T5610] Added buffer head 12 to ffff888029c1ee00 [ 132.120184][ T1196] virtqueue callback for ffff888029c1ee00 (ffffffff86322960) [ 132.120214][ C1] Sent skb ffff88803d85f9f0 [ 132.120234][ C1] No more buffers in queue [ 132.120321][ T1195] virtqueue callback for ffff888028e26600 (ffffffff86322820) [ 132.120344][ C1] No more buffers in queue [ 132.120383][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 132.120409][ C1] No more buffers in queue [ 132.120428][ C1] Added buffer head 1658 to ffff888028e26600 [ 132.120448][ C1] Added buffer head 1657 to ffff888028e26600 [ 132.120470][ C1] Added buffer head 1656 to ffff888028e26600 [ 132.120490][ C1] Added buffer head 1655 to ffff888028e26600 [ 132.120509][ C1] Added buffer head 1654 to ffff888028e26600 [ 132.120528][ C1] Added buffer head 1596 to ffff888028e26600 [ 132.120549][ C1] Added buffer head 1595 to ffff888028e26600 [ 132.120571][ C1] Added buffer head 1594 to ffff888028e26600 [ 132.120591][ C1] Added buffer head 1593 to ffff888028e26600 [ 132.120611][ C1] Added buffer head 1592 to ffff888028e26600 [ 132.120631][ C1] Added buffer head 1591 to ffff888028e2660 ** replaying previous printk message ** [ 132.120631][ C1] Added buffer head 1591 to ffff888028e26600 [ 132.120650][ C1] Added buffer head 1590 to ffff888028e26600 [ 132.120671][ C1] Added buffer head 1589 to ffff888028e26600 [ 132.120690][ C1] Added buffer head 1588 to ffff888028e26600 [ 132.120710][ C1] Added buffer head 1587 to ffff888028e26600 [ 132.120736][ C1] Added buffer head 1586 to ffff888028e26600 [ 132.120756][ C1] Added buffer head 1585 to ffff888028e26600 [ 132.120776][ C1] Added buffer head 1584 to ffff888028e26600 [ 132.120797][ C1] Added buffer head 1583 to ffff888028e26600 [ 132.120816][ C1] Added buffer head 1582 to ffff888028e26600 [ 132.120837][ C1] Added buffer head 1581 to ffff888028e26600 [ 132.120864][ C1] Added buffer head 1580 to ffff888028e26600 [ 132.120885][ C1] Added buffer head 1702 to ffff888028e26600 [ 132.120904][ C1] Added buffer head 1701 to ffff888028e26600 [ 132.120924][ C1] Added buffer head 1700 to ffff888028e26600 [ 132.120944][ C1] Added buffer head 1699 to ffff888028e26600 [ 132.120964][ C1] Added buffer head 1698 to ffff888028e26600 [ 132.120984][ C1] Added buffer head 1697 to ffff888028e26600 [ 132.121003][ C1] Added buffer head 1696 to ffff888028e26600 [ 132.121023][ C1] Added buffer head 1695 to ffff888028e26600 [ 132.121043][ C1] Added buffer head 1694 to ffff888028e26600 [ 132.121063][ C1] Added buffer head 1693 to ffff888028e26600 [ 132.121083][ C1] Added buffer head 1692 to ffff888028e26600 [ 132.237277][ T5733] RIP: 0010:wacom_intuos_irq+0x3318/0x33f0 [ 132.237416][ T5733] Code: f1 ff ff 48 8b 7c 24 10 e8 35 68 9b f9 e9 0c f1 ff ff 49 81 c6 60 03 00 00 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 3a 68 9b f9 49 8b 1e 48 b8 00 00 00 [ 132.237487][ T5733] RSP: 0018:ffffc900057278f0 EFLAGS: 00010206 [ 132.237559][ T5733] RAX: 000000000000006c RBX: 1ffff11006ce3a29 RCX: dffffc0000000000 [ 132.237611][ T5733] RDX: ffffffff8897159a RSI: ffffffff8f44ff80 RDI: 0000000000000000 [ 132.237656][ T5733] RBP: 0000000000000000 R08: ffff88801eb9be80 R09: 0000000000000007 [ 132.237699][ T5733] R10: 0000000000000100 R11: 0000000000000011 R12: ffff888049dd80a6 [ 132.237743][ T5733] R13: 1ffff11006ce3a40 R14: 0000000000000360 R15: 1ffff110093bb014 [ 132.237786][ T5733] FS: 00007f8b4551a6c0(0000) GS:ffff888125bc3000(0000) knlGS:0000000000000000 [ 132.237833][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.237876][ T5733] CR2: 00007f0c360b7080 CR3: 00000000332a8000 CR4: 00000000003526f0 [ 132.237940][ T5733] Kernel panic - not syncing: Fatal exception [ 132.481820][ T5733] Kernel Offset: disabled [ 132.486156][ T5733] Rebooting in 86400 seconds..