ci2-android-6-1/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1/syz-executor4141605116 <...> syzkaller syzkaller login: [ 14.269505][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 14.269520][ T28] audit: type=1400 audit(1791886387.344:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.273710][ T28] audit: type=1400 audit(1791886387.344:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.276351][ T28] audit: type=1400 audit(1791886387.354:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14658]" dev="pipefs" ino=14658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.279388][ T28] audit: type=1400 audit(1791886387.354:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.282231][ T28] audit: type=1400 audit(1791886387.354:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. execve("ci2-android-6-1/syz-executor4141605116", ["ci2-android-6-1/syz-executor4141605116"], 0x7ffd94bc5000 /* 10 vars */) = 0 brk(NULL) = 0x55557fa89000 brk(0x55557fa89d40) = 0x55557fa89d40 arch_prctl(ARCH_SET_FS, 0x55557fa893c0) = 0 set_tid_address(0x55557fa89690) = 305 set_robust_list(0x55557fa896a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1/syz-executor4141605116", 4096) = 44 getrandom("\x6f\xf2\x98\x39\x2e\x49\xe0\xf9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557fa89d40 brk(0x55557faaad40) = 0x55557faaad40 brk(0x55557faab000) = 0x55557faab000 mprotect(0x7f96e2d10000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 306 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "306", 3) = 3 close(3) = 0 kill(306, SIGKILL) = 0 ci2-android-6-1/strace-static-x86_64: Process 306 attached [pid 306] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=306, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 [ 23.590514][ T28] audit: type=1400 audit(1791886396.664:64): avc: denied { execmem } for pid=305 comm="syz-executor414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.609932][ T305] cgroup: Unknown subsys name 'net' [ 23.615613][ T28] audit: type=1400 audit(1791886396.684:65): avc: denied { mounton } for pid=305 comm="syz-executor414" path="/syzcgroup/unified" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 23.616007][ T305] cgroup: Unknown subsys name 'devices' [ 23.638701][ T28] audit: type=1400 audit(1791886396.684:66): avc: denied { mount } for pid=305 comm="syz-executor414" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.667030][ T28] audit: type=1400 audit(1791886396.684:67): avc: denied { unmount } for pid=305 comm="syz-executor414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 23.775938][ T305] cgroup: Unknown subsys name 'hugetlb' [ 23.781919][ T305] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2f\x70\x72\x6f\x63\x2f\x74\x68\x72\x65\x61\x64\x2d\x73\x65\x6c\x66\x2f\x63\x77\x64\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 44) = 44 close(3) = 0 chmod("/dev/raw-gadget", 0666) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f96e2c96320}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f96e2c96320}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96e2c52000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7f96e2c52000, stack_size=0x9000}, 88ci2-android-6-1/strace-static-x86_64: Process 307 attached [pid 307] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 307] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f96e2c96320}, NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7fff1e4b5128 /* 10 vars */ [pid 305] <... clone3 resumed>) = 307 [pid 305] munmap(0x7f96e2c52000, 36864) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 307] <... execve resumed>) = 0 [pid 307] brk(NULL) = 0x56389428b000 [pid 307] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f158fa75000 [pid 307] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7fffcffd97a0, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7fffcffd97a0, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 307] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f9b3000 [pid 307] mmap(0x7f158f9c3000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f158f9c3000 [pid 307] mmap(0x7f158fa49000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f158fa49000 [pid 307] mmap(0x7f158fa71000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f158fa71000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 307] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 307] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 307] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f7d3000 [pid 307] mmap(0x7f158f7fb000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f158f7fb000 [pid 307] mmap(0x7f158f949000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f158f949000 [pid 307] mmap(0x7f158f9a0000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f158f9a0000 [pid 307] mmap(0x7f158f9a6000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f158f9a6000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 307] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f7c2000 [pid 307] mmap(0x7f158f7c5000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f158f7c5000 [pid 307] mmap(0x7f158f7cd000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f158f7cd000 [pid 307] mmap(0x7f158f7d1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f158f7d1000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 307] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f7bb000 [pid 307] mmap(0x7f158f7bd000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f158f7bd000 [pid 307] mmap(0x7f158f7bf000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f158f7bf000 [pid 307] mmap(0x7f158f7c0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f158f7c0000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 307] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f7aa000 [pid 307] mmap(0x7f158f7ad000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f158f7ad000 [pid 307] mmap(0x7f158f7b5000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f158f7b5000 [pid 307] mmap(0x7f158f7b7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f158f7b7000 [pid 307] mmap(0x7f158f7b9000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f158f7b9000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7fffcffd9700, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7fffcffd9700, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 307] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f77a000 [pid 307] mmap(0x7f158f782000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f158f782000 [pid 307] mmap(0x7f158f79e000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f158f79e000 [pid 307] mmap(0x7f158f7a6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f158f7a6000 [pid 307] mmap(0x7f158f7a8000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f158f7a8000 [pid 307] close(3) = 0 [pid 307] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f158f778000 [pid 307] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 307] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f76e000 [pid 307] mmap(0x7f158f770000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f158f770000 [pid 307] mmap(0x7f158f773000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f158f773000 [pid 307] mmap(0x7f158f775000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f158f775000 [pid 307] mmap(0x7f158f777000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f158f777000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 307] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f158f70c000 [pid 307] mmap(0x7f158f70f000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f158f70f000 [pid 307] mmap(0x7f158f746000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f158f746000 [pid 307] mmap(0x7f158f76c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f158f76c000 [pid 307] close(3) = 0 [pid 307] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f158f70a000 [pid 307] arch_prctl(ARCH_SET_FS, 0x7f158f70ac80) = 0 [pid 307] set_tid_address(0x7f158f70af50) = 307 [pid 307] set_robust_list(0x7f158f70af60, 24) = 0 [pid 307] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 307] mprotect(0x7f158f9a0000, 16384, PROT_READ) = 0 [pid 307] mprotect(0x7f158f76c000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158f775000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158f7a6000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158f7b7000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158f7d1000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158f7c0000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158fa71000, 12288, PROT_READ) = 0 [pid 307] mprotect(0x56385970a000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7f158faaa000, 8192, PROT_READ) = 0 [pid 307] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 307] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 307] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 307] getrandom("\x96\xe3\x4e\xce\x84\xd5\x9c\x2f", 8, GRND_NONBLOCK) = 8 [pid 307] brk(NULL) = 0x56389428b000 [pid 307] brk(0x5638942ac000) = 0x5638942ac000 [pid 307] access("/etc/selinux/config", F_OK) = 0 [pid 307] getpid() = 307 [pid 307] rt_sigaction(SIGCHLD, {sa_handler=0x7f158f9f6287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f158f812180}, NULL, 8) = 0 [pid 307] getppid() = 305 [pid 307] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 307] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 307] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 307] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 307] rt_sigaction(SIGINT, {sa_handler=0x7f158f9f6287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f158f812180}, NULL, 8) = 0 [pid 307] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 307] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 307] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7fffcffda098, 0) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [ 23.875186][ T28] audit: type=1400 audit(1791886396.954:68): avc: denied { mounton } for pid=305 comm="syz-executor414" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.900214][ T28] audit: type=1400 audit(1791886396.954:69): avc: denied { mount } for pid=305 comm="syz-executor414" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [pid 307] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x56389428b6f0 /* 10 vars */) = 0 [pid 307] brk(NULL) = 0x55b934d60000 [pid 307] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb41e46f000 [pid 307] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffe766ef9a0, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffe766ef9a0, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 307] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e3ad000 [pid 307] mmap(0x7fb41e3bd000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7fb41e3bd000 [pid 307] mmap(0x7fb41e443000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7fb41e443000 [pid 307] mmap(0x7fb41e46b000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7fb41e46b000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 307] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 307] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 307] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e1cd000 [pid 307] mmap(0x7fb41e1f5000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7fb41e1f5000 [pid 307] mmap(0x7fb41e343000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7fb41e343000 [pid 307] mmap(0x7fb41e39a000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7fb41e39a000 [pid 307] mmap(0x7fb41e3a0000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb41e3a0000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 307] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e1bc000 [pid 307] mmap(0x7fb41e1bf000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fb41e1bf000 [pid 307] mmap(0x7fb41e1c7000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fb41e1c7000 [pid 307] mmap(0x7fb41e1cb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7fb41e1cb000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 307] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e1b5000 [pid 307] mmap(0x7fb41e1b7000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fb41e1b7000 [pid 307] mmap(0x7fb41e1b9000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fb41e1b9000 [pid 307] mmap(0x7fb41e1ba000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fb41e1ba000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 307] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e1a4000 [pid 307] mmap(0x7fb41e1a7000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fb41e1a7000 [pid 307] mmap(0x7fb41e1af000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fb41e1af000 [pid 307] mmap(0x7fb41e1b1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7fb41e1b1000 [pid 307] mmap(0x7fb41e1b3000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb41e1b3000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffe766ef900, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffe766ef900, 0) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 307] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e174000 [pid 307] mmap(0x7fb41e17c000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7fb41e17c000 [pid 307] mmap(0x7fb41e198000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7fb41e198000 [pid 307] mmap(0x7fb41e1a0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7fb41e1a0000 [pid 307] mmap(0x7fb41e1a2000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb41e1a2000 [pid 307] close(3) = 0 [pid 307] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb41e172000 [pid 307] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 307] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e168000 [pid 307] mmap(0x7fb41e16a000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fb41e16a000 [pid 307] mmap(0x7fb41e16d000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fb41e16d000 [pid 307] mmap(0x7fb41e16f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fb41e16f000 [pid 307] mmap(0x7fb41e171000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fb41e171000 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 307] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 307] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 307] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fb41e106000 [pid 307] mmap(0x7fb41e109000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fb41e109000 [pid 307] mmap(0x7fb41e140000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7fb41e140000 [pid 307] mmap(0x7fb41e166000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7fb41e166000 [pid 307] close(3) = 0 [pid 307] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb41e104000 [pid 307] arch_prctl(ARCH_SET_FS, 0x7fb41e104c80) = 0 [pid 307] set_tid_address(0x7fb41e104f50) = 307 [pid 307] set_robust_list(0x7fb41e104f60, 24) = 0 [pid 307] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 307] mprotect(0x7fb41e39a000, 16384, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e166000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e16f000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e1a0000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e1b1000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e1cb000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e1ba000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e46b000, 12288, PROT_READ) = 0 [pid 307] mprotect(0x55b90c90a000, 4096, PROT_READ) = 0 [pid 307] mprotect(0x7fb41e4a4000, 8192, PROT_READ) = 0 [pid 307] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 307] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 307] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 307] getrandom("\xdc\x7e\x6d\xf1\xcc\x0a\xf6\x7b", 8, GRND_NONBLOCK) = 8 [pid 307] brk(NULL) = 0x55b934d60000 [pid 307] brk(0x55b934d81000) = 0x55b934d81000 [pid 307] access("/etc/selinux/config", F_OK) = 0 [pid 307] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 307] lseek(3, 0, SEEK_END) = 128000000 [pid 307] lseek(3, 0, SEEK_SET) = 0 [pid 307] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 307] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0 [pid 307] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 307] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 307] futex(0x7fb41e1a36b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 307] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 307] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 307] lseek(3, 4086, SEEK_SET) = 4086 [pid 307] write(3, "SWAPSPACE2", 10) = 10 [ 23.923660][ T28] audit: type=1400 audit(1791886396.954:70): avc: denied { setattr } for pid=305 comm="syz-executor414" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.949053][ T307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [pid 307] fsync(3) = 0 Setting up swapspace version 1, size = 127995904 bytes [pid 307] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 307] exit_group(0) = ? [pid 307] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f96e2c96320}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f96e2c96320}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 23.958236][ T28] audit: type=1400 audit(1791886397.034:71): avc: denied { relabelto } for pid=307 comm="mkswap" name="swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.983667][ T28] audit: type=1400 audit(1791886397.034:72): avc: denied { write } for pid=307 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 308 ci2-android-6-1/strace-static-x86_64: Process 308 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] set_robust_list(0x55557fa896a0, 24) = 0 ci2-android-6-1/strace-static-x86_64: Process 309 attached [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... clone resumed>, child_tidptr=0x55557fa89690) = 309 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] getrandom( [pid 305] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] set_robust_list(0x55557fa896a0, 24 [pid 308] <... getrandom resumed>"\xfd\x9d\xf9\x42\xb2\x84\x33\xd9", 8, GRND_NONBLOCK) = 8 [pid 308] mkdir("./syzkaller.LITv7T", 0700ci2-android-6-1/strace-static-x86_64: Process 310 attached [pid 309] <... set_robust_list resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55557fa89690) = 310 [pid 310] set_robust_list(0x55557fa896a0, 24 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... mkdir resumed>) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] chmod("./syzkaller.LITv7T", 0777 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... set_robust_list resumed>) = 0 [pid 309] getrandom( [pid 305] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... getrandom resumed>"\x09\x95\x8e\x00\xa9\xc4\x85\xa0", 8, GRND_NONBLOCK) = 8 [pid 308] <... chmod resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] mkdir("./syzkaller.vAKLO4", 0700 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... mkdir resumed>) = 0 [pid 308] chdir("./syzkaller.LITv7T" [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] chmod("./syzkaller.vAKLO4", 0777 [pid 308] <... chdir resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 311 attached [pid 309] <... chmod resumed>) = 0 [pid 308] unshare(CLONE_NEWPID [pid 305] <... clone resumed>, child_tidptr=0x55557fa89690) = 311 [pid 311] set_robust_list(0x55557fa896a0, 24 [pid 310] getrandom( [pid 309] chdir("./syzkaller.vAKLO4" [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] <... unshare resumed>) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[] [pid 311] <... set_robust_list resumed>) = 0 [pid 310] <... getrandom resumed>"\x90\xa8\xb8\x42\x92\xd2\xe2\x60", 8, GRND_NONBLOCK) = 8 [pid 309] <... chdir resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] unshare(CLONE_NEWPID [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... unshare resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [] [pid 310] mkdir("./syzkaller.c1qxjF", 0700 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... mkdir resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 312 attached [pid 305] <... clone resumed>, child_tidptr=0x55557fa89690) = 313 [pid 312] set_robust_list(0x55557fa896a0, 24 [pid 311] getrandom( [pid 310] chmod("./syzkaller.c1qxjF", 0777 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55557fa89690) = 312 ci2-android-6-1/strace-static-x86_64: Process 313 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] getppid() = 0 [pid 312] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 312] unshare(CLONE_NEWNS) = 0 [pid 311] <... getrandom resumed>"\x1e\x43\x43\x8f\xbd\x03\x1e\x0a", 8, GRND_NONBLOCK) = 8 [pid 310] <... chmod resumed>) = 0 [pid 312] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 312] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 312] unshare(CLONE_NEWCGROUP) = 0 [pid 311] mkdir("./syzkaller.iNPovP", 0700 [pid 310] chdir("./syzkaller.c1qxjF" [pid 309] <... clone resumed>, child_tidptr=0x55557fa89690) = 314 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 312] unshare(CLONE_NEWUTS) = 0 [pid 312] unshare(CLONE_SYSVSEM) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] <... mkdir resumed>) = 0 [pid 310] <... chdir resumed>) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] chmod("./syzkaller.iNPovP", 0777 [pid 310] unshare(CLONE_NEWPID [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 311] <... chmod resumed>) = 0 [pid 310] <... unshare resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] chdir("./syzkaller.iNPovP" [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 311] <... chdir resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 312] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] unshare(CLONE_NEWPID [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] <... unshare resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] rt_sigprocmask(SIG_BLOCK, ~[] [pid 312] getpid( [pid 311] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55557fa89690) = 315 [pid 311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] <... getpid resumed>) = 1 [pid 312] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... capget resumed>, {effective=1< [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] <... clone resumed>, child_tidptr=0x55557fa89690) = 316 ci2-android-6-1/strace-static-x86_64: Process 316 attached ci2-android-6-1/strace-static-x86_64: Process 315 attached ci2-android-6-1/strace-static-x86_64: Process 314 attached [pid 313] set_robust_list(0x55557fa896a0, 24 [pid 311] rt_sigprocmask(SIG_SETMASK, [] [pid 314] set_robust_list(0x55557fa896a0, 24 [pid 313] <... set_robust_list resumed>) = 0 [pid 311] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... set_robust_list resumed>) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] getrandom( [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] <... getrandom resumed>"\xc9\xa4\x6b\xa1\x31\x83\xab\xdb", 8, GRND_NONBLOCK) = 8 [pid 315] set_robust_list(0x55557fa896a0, 24 [pid 314] <... prctl resumed>) = 0 [pid 313] mkdir("./syzkaller.t1WO6u", 0700 [pid 315] <... set_robust_list resumed>) = 0 [pid 314] getppid( [pid 313] <... mkdir resumed>) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... getppid resumed>) = 0 [pid 313] chmod("./syzkaller.t1WO6u", 0777 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 313] <... chmod resumed>) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 313] chdir("./syzkaller.t1WO6u" [pid 315] <... prctl resumed>) = 0 [pid 314] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 313] <... chdir resumed>) = 0 [pid 315] getppid( [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 313] unshare(CLONE_NEWPID [pid 315] <... getppid resumed>) = 0 [pid 314] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 313] <... unshare resumed>) = 0 [pid 315] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[] [pid 315] <... prlimit64 resumed>, NULL) = 0 [pid 314] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 313] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 315] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] <... prlimit64 resumed>, NULL) = 0 [pid 314] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 315] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 313] <... clone resumed>, child_tidptr=0x55557fa89690) = 317 [pid 315] <... prlimit64 resumed>, NULL) = 0 [pid 314] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 315] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] <... prlimit64 resumed>, NULL) = 0 [pid 314] unshare(CLONE_NEWNS [pid 315] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 314] <... unshare resumed>) = 0 [pid 315] <... prlimit64 resumed>, NULL) = 0 [pid 314] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 315] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 314] <... mount resumed>) = 0 [pid 315] <... prlimit64 resumed>, NULL) = 0 [pid 314] unshare(CLONE_NEWIPC [pid 315] unshare(CLONE_NEWNS [pid 314] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... unshare resumed>) = 0 [pid 314] unshare(CLONE_NEWCGROUP [pid 315] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 314] <... unshare resumed>) = 0 [pid 315] <... mount resumed>) = 0 [pid 314] unshare(CLONE_NEWUTS [pid 315] unshare(CLONE_NEWIPC [pid 314] <... unshare resumed>) = 0 [pid 315] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 314] unshare(CLONE_SYSVSEM [pid 315] unshare(CLONE_NEWCGROUP [pid 314] <... unshare resumed>) = 0 [pid 315] <... unshare resumed>) = 0 [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 315] unshare(CLONE_NEWUTS [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 315] <... unshare resumed>) = 0 [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 315] unshare(CLONE_SYSVSEM [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) ci2-android-6-1/strace-static-x86_64: Process 317 attached [pid 316] set_robust_list(0x55557fa896a0, 24 [pid 315] <... unshare resumed>) = 0 [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 312] <... unshare resumed>) = 0 [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 317] set_robust_list(0x55557fa896a0, 24 [pid 316] <... set_robust_list resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 317] <... set_robust_list resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] <... prctl resumed>) = 0 [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 312] <... openat resumed>) = 3 [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 317] <... prctl resumed>) = 0 [pid 316] getppid( [pid 312] write(3, "0 65535", 7 [pid 317] getppid( [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] getpid( [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 314] <... getpid resumed>) = 1 [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 315] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 314] <... capget resumed>, {effective=1<) = -1 ENOENT (No such file or directory) [pid 314] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 315] getpid( [pid 314] <... capset resumed>) = 0 [pid 317] <... getppid resumed>) = 0 [pid 316] <... getppid resumed>) = 0 [pid 312] <... write resumed>) = 7 [pid 317] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 316] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 315] <... getpid resumed>) = 1 [pid 314] unshare(CLONE_NEWNET [pid 317] <... prlimit64 resumed>, NULL) = 0 [pid 316] <... prlimit64 resumed>, NULL) = 0 [pid 315] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 312] close(3 [pid 317] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 316] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 317] <... prlimit64 resumed>, NULL) = 0 [pid 316] <... prlimit64 resumed>, NULL) = 0 [pid 312] <... close resumed>) = 0 [pid 317] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 316] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 317] <... prlimit64 resumed>, NULL) = 0 [pid 316] <... prlimit64 resumed>, NULL) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 317] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 316] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 317] <... prlimit64 resumed>, NULL) = 0 [pid 316] <... prlimit64 resumed>, NULL) = 0 [pid 312] <... openat resumed>) = 3 [pid 317] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 316] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 317] <... prlimit64 resumed>, NULL) = 0 [pid 316] <... prlimit64 resumed>, NULL) = 0 [pid 312] write(3, "100000", 6 [pid 317] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 316] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 317] <... prlimit64 resumed>, NULL) = 0 [pid 316] <... prlimit64 resumed>, NULL) = 0 [pid 312] <... write resumed>) = 6 [pid 317] unshare(CLONE_NEWNS [pid 316] unshare(CLONE_NEWNS [pid 317] <... unshare resumed>) = 0 [pid 316] <... unshare resumed>) = 0 [pid 312] close(3 [pid 317] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 316] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 317] <... mount resumed>) = 0 [pid 316] <... mount resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 317] unshare(CLONE_NEWIPC [pid 316] unshare(CLONE_NEWIPC [pid 317] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 312] mkdir("./syz-tmp", 0777 [pid 317] unshare(CLONE_NEWCGROUP [pid 316] unshare(CLONE_NEWCGROUP [pid 317] <... unshare resumed>) = 0 [pid 316] <... unshare resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 317] unshare(CLONE_NEWUTS [pid 316] unshare(CLONE_NEWUTS [pid 317] <... unshare resumed>) = 0 [pid 316] <... unshare resumed>) = 0 [pid 312] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 317] unshare(CLONE_SYSVSEM [pid 316] unshare(CLONE_SYSVSEM [pid 317] <... unshare resumed>) = 0 [pid 316] <... unshare resumed>) = 0 [pid 315] <... capget resumed>, {effective=1<) = 0 [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 315] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 312] mkdir("./syz-tmp/newroot", 0777 [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 315] <... capset resumed>) = 0 [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 315] unshare(CLONE_NEWNET [pid 312] <... mkdir resumed>) = 0 [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 312] mkdir("./syz-tmp/newroot/dev", 0700 [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 312] <... mkdir resumed>) = 0 [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 312] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 312] <... mount resumed>) = 0 [pid 317] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 317] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 312] mkdir("./syz-tmp/newroot/proc", 0700 [pid 317] getpid( [pid 316] getpid( [pid 317] <... getpid resumed>) = 1 [pid 316] <... getpid resumed>) = 1 [pid 312] <... mkdir resumed>) = 0 [pid 317] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 316] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 317] <... capget resumed>, {effective=1<, {effective=1< [ 24.010496][ T28] audit: type=1400 audit(1791886397.094:73): avc: denied { read } for pid=305 comm="syz-executor414" name="swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.036411][ T305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 317] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 316] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 317] <... capset resumed>) = 0 [pid 316] <... capset resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 317] unshare(CLONE_NEWNET [pid 316] unshare(CLONE_NEWNET [pid 312] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 315] <... unshare resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 315] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 312] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... openat resumed>) = 3 [pid 312] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 315] write(3, "0 65535", 7 [pid 312] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... write resumed>) = 7 [pid 314] <... unshare resumed>) = 0 [pid 315] close(3 [pid 312] <... mount resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 312] mkdir("./syz-tmp/newroot/sys", 0700 [pid 315] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 314] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 312] <... mkdir resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 312] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] write(3, "100000", 6 [pid 314] <... openat resumed>) = 3 [pid 315] <... write resumed>) = 6 [pid 312] <... mount resumed>) = 0 [pid 315] close(3 [pid 314] write(3, "0 65535", 7 [pid 312] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... close resumed>) = 0 [pid 314] <... write resumed>) = 7 [pid 315] mkdir("./syz-tmp", 0777 [pid 312] <... mount resumed>) = 0 [pid 314] close(3 [pid 315] <... mkdir resumed>) = 0 [pid 312] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 314] <... close resumed>) = 0 [pid 315] <... mount resumed>) = 0 [pid 312] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 315] mkdir("./syz-tmp/newroot", 0777 [pid 314] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 312] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... unshare resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 315] mkdir("./syz-tmp/newroot/dev", 0700 [pid 316] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 314] write(3, "100000", 6 [pid 312] <... mount resumed>) = 0 [pid 314] <... write resumed>) = 6 [pid 312] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 314] close(3 [pid 316] <... openat resumed>) = 3 [pid 315] <... mkdir resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 316] write(3, "0 65535", 7 [pid 315] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mkdir("./syz-tmp", 0777 [pid 312] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... mount resumed>) = 0 [pid 315] mkdir("./syz-tmp/newroot/proc", 0700 [pid 316] <... write resumed>) = 7 [pid 315] <... mkdir resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 312] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 316] close(3 [pid 315] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 314] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 312] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 315] <... mount resumed>) = 0 [pid 315] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 314] <... mount resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 316] <... close resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 314] mkdir("./syz-tmp/newroot", 0777 [pid 316] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 312] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 315] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] <... mkdir resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 316] <... openat resumed>) = 3 [pid 315] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 314] mkdir("./syz-tmp/newroot/dev", 0700 [pid 312] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 316] write(3, "100000", 6 [pid 315] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... write resumed>) = 6 [pid 315] <... mount resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 316] close(3 [pid 315] mkdir("./syz-tmp/newroot/sys", 0700 [pid 314] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 316] <... close resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 316] mkdir("./syz-tmp", 0777 [pid 315] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] <... mount resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 315] <... mount resumed>) = 0 [pid 314] mkdir("./syz-tmp/newroot/proc", 0700 [pid 312] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 315] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mount resumed>) = 0 [pid 315] <... mount resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot", 0777 [pid 315] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 312] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mkdir resumed>) = 0 [pid 315] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 314] <... mount resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot/dev", 0700 [pid 315] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 312] <... mount resumed>) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 315] <... mount resumed>) = 0 [pid 316] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 314] <... mkdir resumed>) = 0 [pid 312] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mount resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 314] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] mkdir("./syz-tmp/newroot/proc", 0700 [pid 315] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... mount resumed>) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 315] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 314] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 312] mkdir("./syz-tmp/pivot", 0777 [pid 316] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 315] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 314] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mount resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 315] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 314] <... mount resumed>) = 0 [pid 312] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 316] <... mkdir resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 314] mkdir("./syz-tmp/newroot/sys", 0700 [pid 316] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 312] <... pivot_root resumed>) = 0 [pid 316] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 315] <... mkdir resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 316] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 314] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] chdir("/" [pid 316] <... mount resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 315] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] <... mount resumed>) = 0 [pid 312] <... chdir resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot/sys", 0700 [pid 315] <... mount resumed>) = 0 [pid 314] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] umount2("./pivot", MNT_DETACH [pid 316] <... mkdir resumed>) = 0 [pid 315] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... mount resumed>) = 0 [pid 314] <... mount resumed>) = 0 [pid 315] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... umount2 resumed>) = 0 [pid 316] <... mount resumed>) = 0 [pid 315] <... mount resumed>) = 0 [pid 314] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] chroot("./newroot" [pid 316] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] mkdir("./syz-tmp/pivot", 0777 [pid 317] <... unshare resumed>) = 0 [pid 316] <... mount resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 314] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 312] <... chroot resumed>) = 0 [pid 317] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 316] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 314] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] chdir("/" [pid 317] <... openat resumed>) = 3 [pid 316] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 315] <... pivot_root resumed>) = 0 [pid 314] <... mount resumed>) = 0 [pid 312] <... chdir resumed>) = 0 [pid 317] write(3, "0 65535", 7 [pid 316] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 312] mkdir("/dev/gadgetfs", 0777 [pid 315] chdir("/" [pid 317] <... write resumed>) = 7 [pid 316] <... mount resumed>) = 0 [pid 315] <... chdir resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 317] close(3 [pid 316] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 315] umount2("./pivot", MNT_DETACH [pid 314] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 317] <... close resumed>) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 315] <... umount2 resumed>) = 0 [pid 314] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 315] chroot("./newroot") = 0 [pid 315] chdir("/") = 0 [pid 315] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 315] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 315] mkdir("/dev/binderfs", 0777) = 0 [pid 315] mount("binder", "/dev/binderfs", "binder", 0, "stats=global") = 0 [pid 315] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 315] getpid() = 1 [pid 315] mkdir("/syzcgroup/unified/syz2", 0777) = 0 [pid 315] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "32", 2) = 2 [pid 315] close(3) = 0 [pid 315] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1", 1 [pid 317] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "100000", 6) = 6 [pid 317] close(3) = 0 [pid 317] mkdir("./syz-tmp", 0777 [pid 316] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... write resumed>) = 1 [pid 314] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 312] <... mount resumed>) = -1 ENODEV (No such device) [pid 317] <... mkdir resumed>) = 0 [pid 316] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 315] close(3 [pid 314] <... mkdir resumed>) = 0 [pid 317] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 316] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 315] <... close resumed>) = 0 [pid 314] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 312] mkdir("/dev/binderfs", 0777 [pid 316] <... mkdir resumed>) = 0 [pid 315] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 314] <... mkdir resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 314] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 312] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 316] <... mkdir resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 314] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 312] mount("binder", "/dev/binderfs", "binder", 0, "stats=global" [pid 316] <... mkdir resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 317] <... mount resumed>) = 0 [pid 316] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 315] <... mkdir resumed>) = 0 [pid 314] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... mount resumed>) = 0 [pid 317] mkdir("./syz-tmp/newroot", 0777 [pid 316] <... mkdir resumed>) = 0 [pid 315] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 314] <... mount resumed>) = 0 [pid 316] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 317] <... mkdir resumed>) = 0 [pid 316] <... mount resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 314] <... mount resumed>) = 0 [pid 317] mkdir("./syz-tmp/newroot/dev", 0700 [pid 316] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] write(3, "1", 1 [pid 314] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 316] <... mount resumed>) = 0 [pid 314] <... mount resumed>) = 0 [pid 316] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] <... write resumed>) = 1 [pid 314] mkdir("./syz-tmp/pivot", 0777 [pid 312] getpid( [pid 317] <... mkdir resumed>) = 0 [pid 316] <... mount resumed>) = 0 [pid 315] close(3 [pid 314] <... mkdir resumed>) = 0 [pid 316] mkdir("./syz-tmp/pivot", 0777 [pid 315] <... close resumed>) = 0 [pid 314] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 317] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... getpid resumed>) = 1 [pid 316] <... mkdir resumed>) = 0 [pid 315] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 314] <... pivot_root resumed>) = 0 [pid 316] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 315] <... openat resumed>) = 3 [pid 314] chdir("/" [pid 312] mkdir("/syzcgroup/unified/syz0", 0777 [pid 317] <... mount resumed>) = 0 [pid 316] <... pivot_root resumed>) = 0 [pid 315] write(3, "313524224", 9 [pid 314] <... chdir resumed>) = 0 [pid 317] mkdir("./syz-tmp/newroot/proc", 0700 [pid 316] chdir("/" [pid 315] <... write resumed>) = 9 [pid 314] umount2("./pivot", MNT_DETACH [pid 317] <... mkdir resumed>) = 0 [pid 316] <... chdir resumed>) = 0 [pid 315] close(3 [pid 312] <... mkdir resumed>) = 0 [pid 317] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 316] umount2("./pivot", MNT_DETACH [pid 315] <... close resumed>) = 0 [pid 317] <... mount resumed>) = 0 [pid 316] <... umount2 resumed>) = 0 [pid 315] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 314] <... umount2 resumed>) = 0 [pid 312] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 317] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 316] chroot("./newroot" [pid 315] <... openat resumed>) = 3 [pid 314] chroot("./newroot" [pid 317] <... mkdir resumed>) = 0 [pid 316] <... chroot resumed>) = 0 [pid 315] write(3, "314572800", 9 [pid 312] <... openat resumed>) = 3 [pid 317] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] chdir("/" [pid 315] <... write resumed>) = 9 [pid 314] <... chroot resumed>) = 0 [pid 317] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... chdir resumed>) = 0 [pid 315] close(3 [pid 314] chdir("/" [pid 312] write(3, "32", 2 [pid 317] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] mkdir("/dev/gadgetfs", 0777 [pid 315] <... close resumed>) = 0 [pid 314] <... chdir resumed>) = 0 [pid 317] <... mount resumed>) = 0 [pid 316] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 315] mkdir("/syzcgroup/net/syz2", 0777 [pid 314] mkdir("/dev/gadgetfs", 0777 [pid 312] <... write resumed>) = 2 [pid 317] mkdir("./syz-tmp/newroot/sys", 0700 [pid 316] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 314] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 312] close(3 [pid 316] <... mount resumed>) = -1 ENODEV (No such device) [pid 314] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 312] <... close resumed>) = 0 [pid 316] mkdir("/dev/binderfs", 0777 [pid 314] <... mount resumed>) = -1 ENODEV (No such device) [pid 312] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 316] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 314] mkdir("/dev/binderfs", 0777 [pid 312] <... openat resumed>) = 3 [pid 316] mount("binder", "/dev/binderfs", "binder", 0, "stats=global" [pid 314] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 312] write(3, "1", 1 [pid 317] <... mkdir resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 317] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mount resumed>) = 0 [pid 315] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 314] mount("binder", "/dev/binderfs", "binder", 0, "stats=global" [pid 312] <... write resumed>) = 1 [pid 317] <... mount resumed>) = 0 [pid 316] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 315] <... openat resumed>) = 3 [pid 317] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 315] write(3, "1", 1 [pid 314] <... mount resumed>) = 0 [pid 312] close(3 [pid 317] <... mount resumed>) = 0 [pid 316] getpid( [pid 315] <... write resumed>) = 1 [pid 314] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 312] <... close resumed>) = 0 [pid 317] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... getpid resumed>) = 1 [pid 315] close(3 [pid 314] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 312] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 317] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 316] mkdir("/syzcgroup/unified/syz3", 0777 [pid 315] <... close resumed>) = 0 [pid 314] getpid( [pid 317] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] mkdir("./0", 0777 [pid 312] <... mkdir resumed>) = 0 [pid 317] <... mount resumed>) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 314] <... getpid resumed>) = 1 [pid 312] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 317] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 316] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 314] mkdir("/syzcgroup/unified/syz1", 0777 [pid 317] <... mkdir resumed>) = 0 [pid 316] <... openat resumed>) = 3 [pid 315] <... openat resumed>) = 3 [pid 312] <... openat resumed>) = 3 [pid 317] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] write(3, "32", 2 [pid 315] ioctl(3, LOOP_CLR_FD [pid 314] <... mkdir resumed>) = 0 [pid 312] write(3, "1", 1 [pid 317] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 316] <... write resumed>) = 2 [pid 315] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 314] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC [pid 312] <... write resumed>) = 1 [pid 317] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 316] close(3 [pid 315] close(3 [pid 314] <... openat resumed>) = 3 [pid 312] close(3 [pid 316] <... close resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 314] write(3, "32", 2 [pid 312] <... close resumed>) = 0 [pid 317] <... mkdir resumed>) = 0 [pid 316] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 315] rt_sigprocmask(SIG_BLOCK, ~[] [pid 317] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 314] <... write resumed>) = 2 [pid 312] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 317] <... mkdir resumed>) = 0 [pid 316] <... openat resumed>) = 3 [pid 315] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] close(3 [pid 317] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 316] write(3, "1", 1 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... close resumed>) = 0 [pid 312] <... openat resumed>) = 3 [pid 317] <... mkdir resumed>) = 0 [pid 316] <... write resumed>) = 1 [pid 314] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 312] write(3, "313524224", 9 [pid 316] close(3 [pid 314] <... openat resumed>) = 3 [pid 312] <... write resumed>) = 9 [pid 316] <... close resumed>) = 0 [pid 314] write(3, "1", 1 [pid 312] close(3ci2-android-6-1/strace-static-x86_64: Process 318 attached [pid 317] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 316] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 314] <... write resumed>) = 1 [pid 312] <... close resumed>) = 0 [pid 318] set_robust_list(0x55557fa896a0, 24 [pid 317] <... mkdir resumed>) = 0 [pid 318] <... set_robust_list resumed>) = 0 [pid 317] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... mkdir resumed>) = 0 [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 2 [pid 314] close(3 [pid 318] rt_sigprocmask(SIG_SETMASK, [] [pid 312] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 318] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] <... mount resumed>) = 0 [pid 316] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... close resumed>) = 0 [pid 312] <... openat resumed>) = 3 [pid 318] chdir("./0" [pid 317] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 316] <... openat resumed>) = 3 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 312] write(3, "314572800", 9 [pid 318] <... chdir resumed>) = 0 [pid 317] <... mount resumed>) = 0 [pid 316] write(3, "1", 1 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 317] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 318] <... prctl resumed>) = 0 [pid 316] <... write resumed>) = 1 [pid 314] <... mkdir resumed>) = 0 [pid 317] <... mount resumed>) = 0 [pid 312] <... write resumed>) = 9 [pid 318] setpgid(0, 0 [pid 317] mkdir("./syz-tmp/pivot", 0777 [pid 316] close(3 [pid 314] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 312] close(3 [pid 318] <... setpgid resumed>) = 0 [pid 317] <... mkdir resumed>) = 0 [pid 316] <... close resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 312] <... close resumed>) = 0 [pid 318] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 316] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 314] write(3, "1", 1 [pid 312] mkdir("/syzcgroup/net/syz0", 0777 [pid 318] <... symlink resumed>) = 0 [pid 317] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 316] <... openat resumed>) = 3 [pid 314] <... write resumed>) = 1 [pid 318] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 316] write(3, "313524224", 9 [pid 314] close(3 [pid 312] <... mkdir resumed>) = 0 [pid 318] <... symlink resumed>) = 0 [pid 317] <... pivot_root resumed>) = 0 [pid 316] <... write resumed>) = 9 [pid 314] <... close resumed>) = 0 [pid 312] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 318] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 317] chdir("/" [pid 316] close(3 [pid 314] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 312] <... openat resumed>) = 3 [pid 318] <... symlink resumed>) = 0 [pid 317] <... chdir resumed>) = 0 [pid 316] <... close resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 312] write(3, "1", 1 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 317] umount2("./pivot", MNT_DETACH [pid 316] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 314] write(3, "313524224", 9 [pid 316] <... openat resumed>) = 3 [pid 314] <... write resumed>) = 9 [pid 312] <... write resumed>) = 1 [pid 318] <... openat resumed>) = 3 [pid 316] write(3, "314572800", 9 [pid 314] close(3 [pid 312] close(3 [pid 316] <... write resumed>) = 9 [pid 314] <... close resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 318] write(3, "1000", 4 [pid 317] <... umount2 resumed>) = 0 [pid 316] close(3 [pid 314] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 312] mkdir("./0", 0777 [pid 318] <... write resumed>) = 4 [pid 317] chroot("./newroot" [pid 316] <... close resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 312] <... mkdir resumed>) = 0 [pid 318] close(3 [pid 316] mkdir("/syzcgroup/net/syz3", 0777 [pid 314] write(3, "314572800", 9 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 318] <... close resumed>) = 0 [pid 317] <... chroot resumed>) = 0 [pid 318] symlink("/dev/binderfs", "./binderfs" [pid 316] <... mkdir resumed>) = 0 [pid 317] chdir("/" [pid 314] <... write resumed>) = 9 [pid 312] <... openat resumed>) = 3 [pid 318] <... symlink resumed>) = 0 [pid 317] <... chdir resumed>) = 0 [pid 316] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 314] close(3 [pid 312] ioctl(3, LOOP_CLR_FD [pid 318] write(1, "executing program\n", 18 [pid 317] mkdir("/dev/gadgetfs", 0777 [pid 316] <... openat resumed>) = 3 [pid 314] <... close resumed>) = 0 [pid 312] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 318] <... write resumed>) = 18 [pid 317] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 316] write(3, "1", 1 executing program [pid 314] mkdir("/syzcgroup/net/syz1", 0777 [pid 312] close(3 [pid 318] memfd_create("syzkaller", 0 [pid 317] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 316] <... write resumed>) = 1 [pid 318] <... memfd_create resumed>) = 3 [pid 316] close(3 [pid 314] <... mkdir resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 317] <... mount resumed>) = -1 ENODEV (No such device) [pid 316] <... close resumed>) = 0 [pid 314] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 318] <... mmap resumed>) = 0x7f96da85b000 [pid 317] mkdir("/dev/binderfs", 0777 [pid 316] mkdir("./0", 0777 [pid 314] <... openat resumed>) = 3 [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 314] write(3, "1", 1 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 319 attached [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 314] <... write resumed>) = 1 [pid 319] set_robust_list(0x55557fa896a0, 24 [pid 316] <... openat resumed>) = 3 [pid 314] close(3 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 2 [pid 319] <... set_robust_list resumed>) = 0 [pid 316] ioctl(3, LOOP_CLR_FD [pid 314] <... close resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 319] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 314] mkdir("./0", 0777 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 319] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] close(3 [pid 314] <... mkdir resumed>) = 0 [pid 319] chdir("./0" [pid 316] <... close resumed>) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 319] <... chdir resumed>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 314] <... openat resumed>) = 3 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] ioctl(3, LOOP_CLR_FD [pid 319] <... prctl resumed>) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... ioctl resumed>) = -1 ENXIO (No such device or address) ci2-android-6-1/strace-static-x86_64: Process 320 attached [pid 319] setpgid(0, 0 [pid 314] close(3 [pid 320] set_robust_list(0x55557fa896a0, 24 [pid 319] <... setpgid resumed>) = 0 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 2 [pid 314] <... close resumed>) = 0 [pid 320] <... set_robust_list resumed>) = 0 [pid 319] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 320] rt_sigprocmask(SIG_SETMASK, [] [pid 319] <... symlink resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 320] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 319] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 321 attached [pid 320] chdir("./0" [pid 319] <... symlink resumed>) = 0 [pid 321] set_robust_list(0x55557fa896a0, 24 [pid 320] <... chdir resumed>) = 0 [pid 319] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 2 [pid 321] <... set_robust_list resumed>) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 319] <... symlink resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 321] rt_sigprocmask(SIG_SETMASK, [] [pid 320] <... prctl resumed>) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 321] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] setpgid(0, 0 [pid 319] <... openat resumed>) = 3 [pid 321] chdir("./0" [pid 320] <... setpgid resumed>) = 0 [pid 319] write(3, "1000", 4 [pid 321] <... chdir resumed>) = 0 [pid 320] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 319] <... write resumed>) = 4 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 320] <... symlink resumed>) = 0 [pid 319] close(3 [pid 321] <... prctl resumed>) = 0 [pid 320] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 319] <... close resumed>) = 0 [pid 321] setpgid(0, 0 [pid 320] <... symlink resumed>) = 0 [pid 319] symlink("/dev/binderfs", "./binderfs" [pid 321] <... setpgid resumed>) = 0 [pid 320] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 319] <... symlink resumed>) = 0 [pid 321] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 320] <... symlink resumed>) = 0 [pid 319] write(1, "executing program\n", 18 [pid 321] <... symlink resumed>) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 319] <... write resumed>) = 18 [pid 321] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 320] <... openat resumed>) = 3 [pid 319] memfd_create("syzkaller", 0 [pid 321] <... symlink resumed>) = 0 [pid 320] write(3, "1000", 4 [pid 319] <... memfd_create resumed>) = 3 [pid 321] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 320] <... write resumed>) = 4 [pid 319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 321] <... symlink resumed>) = 0 [pid 320] close(3 [pid 319] <... mmap resumed>) = 0x7f96da85b000 executing program [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 320] <... close resumed>) = 0 [pid 317] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 321] <... openat resumed>) = 3 [pid 320] symlink("/dev/binderfs", "./binderfs" [pid 321] write(3, "1000", 4 [pid 320] <... symlink resumed>) = 0 [pid 321] <... write resumed>) = 4 executing program [pid 320] write(1, "executing program\n", 18 [pid 321] close(3 [pid 320] <... write resumed>) = 18 [pid 317] mount("binder", "/dev/binderfs", "binder", 0, "stats=global" [pid 321] <... close resumed>) = 0 [pid 320] memfd_create("syzkaller", 0 [pid 321] symlink("/dev/binderfs", "./binderfs" [pid 320] <... memfd_create resumed>) = 3 [pid 321] <... symlink resumed>) = 0 [pid 320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 321] write(1, "executing program\n", 18 [pid 320] <... mmap resumed>) = 0x7f96da85b000 executing program [pid 321] <... write resumed>) = 18 [pid 317] <... mount resumed>) = 0 [pid 321] memfd_create("syzkaller", 0) = 3 [pid 321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 24.139632][ T312] request_module fs-gadgetfs succeeded, but still no fs? [pid 317] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 317] getpid() = 1 [pid 317] mkdir("/syzcgroup/unified/syz4", 0777) = 0 [pid 317] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "32", 2) = 2 [pid 317] close(3) = 0 [pid 317] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1", 1) = 1 [pid 317] close(3) = 0 [pid 317] mkdir("/syzcgroup/cpu/syz4", 0777) = 0 [pid 317] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1", 1) = 1 [pid 317] close(3) = 0 [pid 317] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "313524224", 9) = 9 [pid 317] close(3) = 0 [pid 317] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "314572800", 9) = 9 [pid 317] close(3) = 0 [pid 317] mkdir("/syzcgroup/net/syz4", 0777) = 0 [pid 317] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1", 1) = 1 [pid 317] close(3) = 0 [pid 317] mkdir("./0", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x55557fa896a0, 24) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] chdir("./0") = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 2 [pid 322] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 322] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 322] write(3, "1000", 4 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 322] <... write resumed>) = 4 [pid 322] close(3) = 0 executing program [pid 322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 322] write(1, "executing program\n", 18) = 18 [pid 322] memfd_create("syzkaller", 0) = 3 [pid 322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 318] <... write resumed>) = 16777216 [pid 318] munmap(0x7f96da85b000, 138412032) = 0 [pid 318] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 318] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 318] close(3) = 0 [pid 318] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 318] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 320] <... write resumed>) = 16777216 [pid 322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 320] munmap(0x7f96da85b000, 138412032) = 0 [pid 320] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 24.352875][ T318] loop2: detected capacity change from 0 to 32768 [pid 320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 320] close(3) = 0 [pid 320] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 320] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 319] <... write resumed>) = 16777216 [pid 319] munmap(0x7f96da85b000, 138412032) = 0 [pid 319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 24.395628][ T320] loop3: detected capacity change from 0 to 32768 [ 24.423345][ T318] loop2: p1 p2 p3 < p5 p6 > p4 [ 24.433740][ T319] loop0: detected capacity change from 0 to 32768 [pid 319] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 319] close(3) = 0 [pid 319] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 319] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 321] <... write resumed>) = 16777216 [pid 321] munmap(0x7f96da85b000, 138412032) = 0 [pid 321] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 321] ioctl(4, LOOP_SET_FD, 3 [pid 322] <... write resumed>) = 16777216 [pid 321] <... ioctl resumed>) = 0 [pid 318] <... ioctl resumed>) = 0 [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 318] symlink("/dev/loop2p1", "./file0") = 0 [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 318] symlink("/dev/loop2p2", "./file1") = 0 [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 318] symlink("/dev/loop2p3", "./file2") = 0 [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 318] symlink("/dev/loop2p5", "./file3") = 0 [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 318] symlink("/dev/loop2p6", "./file4") = 0 [pid 318] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 318] close(4) = 0 [pid 318] close(3) = -1 EBADF (Bad file descriptor) [pid 318] close(4) = -1 EBADF (Bad file descriptor) [pid 318] close(5) = -1 EBADF (Bad file descriptor) [pid 318] close(6) = -1 EBADF (Bad file descriptor) [pid 318] close(7) = -1 EBADF (Bad file descriptor) [pid 318] close(8) = -1 EBADF (Bad file descriptor) [pid 318] close(9) = -1 EBADF (Bad file descriptor) [pid 318] close(10) = -1 EBADF (Bad file descriptor) [pid 318] close(11) = -1 EBADF (Bad file descriptor) [pid 318] close(12) = -1 EBADF (Bad file descriptor) [pid 318] close(13) = -1 EBADF (Bad file descriptor) [pid 318] close(14) = -1 EBADF (Bad file descriptor) [pid 318] close(15) = -1 EBADF (Bad file descriptor) [pid 318] close(16) = -1 EBADF (Bad file descriptor) [pid 318] close(17) = -1 EBADF (Bad file descriptor) [pid 318] close(18) = -1 EBADF (Bad file descriptor) [pid 318] close(19) = -1 EBADF (Bad file descriptor) [pid 318] close(20) = -1 EBADF (Bad file descriptor) [pid 318] close(21) = -1 EBADF (Bad file descriptor) [pid 318] close(22) = -1 EBADF (Bad file descriptor) [pid 318] close(23) = -1 EBADF (Bad file descriptor) [pid 318] close(24) = -1 EBADF (Bad file descriptor) [pid 318] close(25) = -1 EBADF (Bad file descriptor) [pid 318] close(26) = -1 EBADF (Bad file descriptor) [pid 318] close(27) = -1 EBADF (Bad file descriptor) [pid 318] close(28) = -1 EBADF (Bad file descriptor) [pid 318] close(29) = -1 EBADF (Bad file descriptor) [ 24.441661][ T318] loop2: p2 size 16777216 extends beyond EOD, truncated [ 24.460521][ T318] loop2: p4 start 1426063360 is beyond EOD, truncated [ 24.469062][ T320] loop3: p1 p2 p3 < p5 p6 > p4 [ 24.473657][ T321] loop1: detected capacity change from 0 to 32768 [ 24.474850][ T320] loop3: p2 size 16777216 extends beyond EOD, truncated [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=9 /* 0.09 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 322] munmap(0x7f96da85b000, 138412032 [pid 321] close(3) = 0 [pid 321] ioctl(4, LOOP_GET_STATUS64 [pid 315] <... restart_syscall resumed>) = 0 [pid 315] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/file4") = 0 [pid 315] umount2("./0/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/file3") = 0 [pid 315] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/file2") = 0 [pid 315] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/file1") = 0 [pid 315] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/file0" [pid 322] <... munmap resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 315] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/binderfs") = 0 [pid 315] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/cgroup.net") = 0 [pid 315] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./0/cgroup.cpu") = 0 [pid 315] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 321] <... ioctl resumed>, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 315] unlink("./0/cgroup" [pid 321] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 315] <... unlink resumed>) = 0 [pid 322] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 322] <... openat resumed>) = 4 [pid 322] ioctl(4, LOOP_SET_FD, 3 [pid 315] close(3) = 0 [pid 315] rmdir("./0") = 0 [pid 315] mkdir("./1", 0777) = 0 [ 24.503583][ T319] loop0: p1 p2 p3 < p5 p6 > p4 [ 24.513147][ T103] loop2: p1 p2 p3 < p5 p6 > p4 [ 24.520859][ T319] loop0: p2 size 16777216 extends beyond EOD, truncated [ 24.521015][ T322] loop4: detected capacity change from 0 to 32768 [ 24.530471][ T103] loop2: p2 size 16777216 extends beyond EOD, truncated [ 24.543071][ T320] loop3: p4 start 1426063360 is beyond EOD, truncated [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 322] <... ioctl resumed>) = 0 [pid 322] close(3 [pid 315] <... openat resumed>) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3 [pid 322] <... close resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 329 attached [pid 322] ioctl(4, LOOP_GET_STATUS64 [pid 329] set_robust_list(0x55557fa896a0, 24 [pid 322] <... ioctl resumed>, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 3 [pid 329] <... set_robust_list resumed>) = 0 [pid 322] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] <... ioctl resumed>) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [] [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 320] symlink("/dev/loop3p1", "./file0") = 0 [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 320] symlink("/dev/loop3p2", "./file1") = 0 [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 320] symlink("/dev/loop3p3", "./file2") = 0 [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 320] symlink("/dev/loop3p5", "./file3") = 0 [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 320] symlink("/dev/loop3p6", "./file4") = 0 [pid 320] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 320] close(4) = 0 [pid 320] close(3) = -1 EBADF (Bad file descriptor) [pid 320] close(4) = -1 EBADF (Bad file descriptor) [pid 320] close(5) = -1 EBADF (Bad file descriptor) [pid 320] close(6) = -1 EBADF (Bad file descriptor) [pid 320] close(7) = -1 EBADF (Bad file descriptor) [pid 320] close(8) = -1 EBADF (Bad file descriptor) [pid 320] close(9) = -1 EBADF (Bad file descriptor) [pid 320] close(10) = -1 EBADF (Bad file descriptor) [pid 320] close(11) = -1 EBADF (Bad file descriptor) [pid 320] close(12) = -1 EBADF (Bad file descriptor) [pid 320] close(13) = -1 EBADF (Bad file descriptor) [pid 320] close(14) = -1 EBADF (Bad file descriptor) [pid 320] close(15) = -1 EBADF (Bad file descriptor) [pid 320] close(16) = -1 EBADF (Bad file descriptor) [pid 320] close(17) = -1 EBADF (Bad file descriptor) [pid 320] close(18) = -1 EBADF (Bad file descriptor) [pid 320] close(19) = -1 EBADF (Bad file descriptor) [pid 320] close(20) = -1 EBADF (Bad file descriptor) [pid 320] close(21) = -1 EBADF (Bad file descriptor) [pid 320] close(22) = -1 EBADF (Bad file descriptor) [pid 320] close(23) = -1 EBADF (Bad file descriptor) [pid 320] close(24) = -1 EBADF (Bad file descriptor) [pid 320] close(25) = -1 EBADF (Bad file descriptor) [pid 320] close(26) = -1 EBADF (Bad file descriptor) [pid 320] close(27) = -1 EBADF (Bad file descriptor) [pid 320] close(28) = -1 EBADF (Bad file descriptor) [pid 320] close(29) = -1 EBADF (Bad file descriptor) [pid 329] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] exit_group(0) = ? [pid 329] chdir("./1" [pid 320] +++ exited with 0 +++ [pid 329] <... chdir resumed>) = 0 [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=7 /* 0.07 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [ 24.544039][ T103] loop2: p4 start 1426063360 is beyond EOD, truncated [ 24.551535][ T321] loop1: p1 p2 p3 < p5 p6 > p4 [ 24.569688][ T319] loop0: p4 start 1426063360 is beyond EOD, truncated [ 24.588617][ T321] loop1: p2 size 16777216 extends beyond EOD, truncated [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 316] <... restart_syscall resumed>) = 0 [pid 316] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/file4") = 0 [pid 316] umount2("./0/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/file3") = 0 [pid 316] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/file2") = 0 [pid 316] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/file1") = 0 [pid 316] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/file0") = 0 [pid 316] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/binderfs" [pid 329] <... symlink resumed>) = 0 [pid 329] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/binderfs") = 0 [pid 316] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/cgroup.net") = 0 [pid 316] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/cgroup.cpu" [pid 329] <... symlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 329] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 316] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 329] <... symlink resumed>) = 0 [pid 316] newfstatat(AT_FDCWD, "./0/cgroup" [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/cgroup") = 0 [pid 316] getdents64(3 [pid 329] <... openat resumed>) = 3 [pid 316] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 329] write(3, "1000", 4 [pid 316] close(3 [pid 329] <... write resumed>) = 4 [pid 316] <... close resumed>) = 0 [pid 329] close(3 [pid 316] rmdir("./0" [pid 329] <... close resumed>) = 0 [pid 316] <... rmdir resumed>) = 0 [pid 329] symlink("/dev/binderfs", "./binderfs" [pid 319] <... ioctl resumed>) = 0 [pid 316] mkdir("./1", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p1" [pid 316] <... openat resumed>) = 3 [pid 319] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 316] ioctl(3, LOOP_CLR_FD [pid 319] symlink("/dev/loop0p1", "./file0" [pid 316] <... ioctl resumed>) = 0 [pid 319] <... symlink resumed>) = 0 [pid 316] close(3 [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p2" [pid 316] <... close resumed>) = 0 [pid 319] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 319] symlink("/dev/loop0p2", "./file1" [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 319] <... symlink resumed>) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 3 [pid 319] symlink("/dev/loop0p3", "./file2" [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 319] <... symlink resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 319] symlink("/dev/loop0p5", "./file3") = 0 [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x12), ...}, 0) = 0 [pid 319] symlink("/dev/loop0p6", "./file4") = 0 [pid 319] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 319] close(4) = 0 [pid 319] close(3) = -1 EBADF (Bad file descriptor) [pid 319] close(4) = -1 EBADF (Bad file descriptor) [pid 319] close(5) = -1 EBADF (Bad file descriptor) [pid 319] close(6) = -1 EBADF (Bad file descriptor) [pid 319] close(7) = -1 EBADF (Bad file descriptor) [pid 319] close(8) = -1 EBADF (Bad file descriptor) [pid 319] close(9) = -1 EBADF (Bad file descriptor) [pid 319] close(10) = -1 EBADF (Bad file descriptor) [pid 319] close(11) = -1 EBADF (Bad file descriptor) [pid 319] close(12) = -1 EBADF (Bad file descriptor) [pid 319] close(13) = -1 EBADF (Bad file descriptor) [pid 319] close(14) = -1 EBADF (Bad file descriptor) [pid 319] close(15) = -1 EBADF (Bad file descriptor) [pid 319] close(16) = -1 EBADF (Bad file descriptor) [pid 319] close(17) = -1 EBADF (Bad file descriptor) [pid 319] close(18) = -1 EBADF (Bad file descriptor) [pid 319] close(19) = -1 EBADF (Bad file descriptor) [pid 319] close(20) = -1 EBADF (Bad file descriptor) [pid 319] close(21) = -1 EBADF (Bad file descriptor) [pid 319] close(22) = -1 EBADF (Bad file descriptor) [pid 319] close(23) = -1 EBADF (Bad file descriptor) [pid 319] close(24) = -1 EBADF (Bad file descriptor) [pid 319] close(25) = -1 EBADF (Bad file descriptor) [pid 319] close(26) = -1 EBADF (Bad file descriptor) [pid 319] close(27) = -1 EBADF (Bad file descriptor) [pid 319] close(28) = -1 EBADF (Bad file descriptor) [pid 319] close(29) = -1 EBADF (Bad file descriptor) [pid 319] exit_group(0) = ? [pid 319] +++ exited with 0 +++ ci2-android-6-1/strace-static-x86_64: Process 330 attached [pid 329] <... symlink resumed>) = 0 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 330] set_robust_list(0x55557fa896a0, 24 [pid 329] write(1, "executing program\n", 18 [pid 330] <... set_robust_list resumed>) = 0 executing program [pid 330] rt_sigprocmask(SIG_SETMASK, [] [pid 329] <... write resumed>) = 18 [pid 312] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 329] memfd_create("syzkaller", 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 321] <... ioctl resumed>) = 0 [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 321] symlink("/dev/loop1p1", "./file0") = 0 [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xf), ...}, 0) = 0 [pid 321] symlink("/dev/loop1p2", "./file1") = 0 [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x10), ...}, 0) = 0 [pid 321] symlink("/dev/loop1p3", "./file2") = 0 [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x11), ...}, 0) = 0 [pid 321] symlink("/dev/loop1p5", "./file3") = 0 [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x13), ...}, 0) = 0 [pid 321] symlink("/dev/loop1p6", "./file4") = 0 [pid 321] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 321] close(4 [pid 330] chdir("./1" [pid 329] <... memfd_create resumed>) = 3 [pid 312] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 330] <... chdir resumed>) = 0 [pid 312] fstat(3 [pid 329] <... mmap resumed>) = 0x7f96da85b000 [pid 321] <... close resumed>) = 0 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 321] close(3) = -1 EBADF (Bad file descriptor) [pid 321] close(4) = -1 EBADF (Bad file descriptor) [pid 321] close(5) = -1 EBADF (Bad file descriptor) [pid 321] close(6) = -1 EBADF (Bad file descriptor) [pid 321] close(7) = -1 EBADF (Bad file descriptor) [pid 321] close(8) = -1 EBADF (Bad file descriptor) [pid 321] close(9) = -1 EBADF (Bad file descriptor) [pid 321] close(10) = -1 EBADF (Bad file descriptor) [pid 321] close(11) = -1 EBADF (Bad file descriptor) [pid 321] close(12) = -1 EBADF (Bad file descriptor) [pid 321] close(13) = -1 EBADF (Bad file descriptor) [pid 321] close(14) = -1 EBADF (Bad file descriptor) [pid 321] close(15) = -1 EBADF (Bad file descriptor) [pid 321] close(16) = -1 EBADF (Bad file descriptor) [pid 321] close(17) = -1 EBADF (Bad file descriptor) [pid 321] close(18) = -1 EBADF (Bad file descriptor) [pid 321] close(19) = -1 EBADF (Bad file descriptor) [pid 321] close(20) = -1 EBADF (Bad file descriptor) [pid 321] close(21) = -1 EBADF (Bad file descriptor) [pid 321] close(22) = -1 EBADF (Bad file descriptor) [pid 321] close(23) = -1 EBADF (Bad file descriptor) [pid 321] close(24) = -1 EBADF (Bad file descriptor) [pid 321] close(25) = -1 EBADF (Bad file descriptor) [pid 321] close(26) = -1 EBADF (Bad file descriptor) [pid 321] close(27) = -1 EBADF (Bad file descriptor) [pid 321] close(28) = -1 EBADF (Bad file descriptor) [pid 321] close(29) = -1 EBADF (Bad file descriptor) [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 312] getdents64(3 [pid 330] <... prctl resumed>) = 0 [pid 314] <... restart_syscall resumed>) = 0 [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 330] setpgid(0, 0 [pid 312] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] <... setpgid resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./0/file4" [pid 330] <... symlink resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 330] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 314] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 330] <... symlink resumed>) = 0 [pid 312] unlink("./0/file4" [pid 330] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 314] <... openat resumed>) = 3 [pid 312] <... unlink resumed>) = 0 [pid 330] <... symlink resumed>) = 0 [pid 314] fstat(3 [pid 312] umount2("./0/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 24.603328][ T321] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 314] getdents64(3 [pid 312] newfstatat(AT_FDCWD, "./0/file3" [pid 330] <... openat resumed>) = 3 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 330] write(3, "1000", 4 [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 330] <... write resumed>) = 4 [pid 314] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] unlink("./0/file3") = 0 [pid 330] close(3 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] newfstatat(AT_FDCWD, "./0/file4" [pid 330] <... close resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] symlink("/dev/binderfs", "./binderfs" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] newfstatat(AT_FDCWD, "./0/file2" [pid 330] <... symlink resumed>) = 0 [pid 314] unlink("./0/file4" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... unlink resumed>) = 0 [pid 330] write(1, "executing program\n", 18 [pid 312] unlink("./0/file2" [pid 330] <... write resumed>) = 18 [pid 330] memfd_create("syzkaller", 0 [pid 312] <... unlink resumed>) = 0 [pid 314] umount2("./0/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] <... memfd_create resumed>) = 3 executing program [pid 312] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./0/file3" [pid 330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 312] newfstatat(AT_FDCWD, "./0/file1" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 330] <... mmap resumed>) = 0x7f96da85b000 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./0/file1" [pid 314] unlink("./0/file3") = 0 [pid 312] <... unlink resumed>) = 0 [pid 314] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./0/file2" [pid 312] newfstatat(AT_FDCWD, "./0/file0" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./0/file2" [pid 312] unlink("./0/file0") = 0 [pid 314] <... unlink resumed>) = 0 [pid 312] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./0/binderfs" [pid 314] newfstatat(AT_FDCWD, "./0/file1" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./0/binderfs" [pid 314] unlink("./0/file1" [pid 312] <... unlink resumed>) = 0 [pid 314] <... unlink resumed>) = 0 [pid 312] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./0/cgroup.net" [pid 314] newfstatat(AT_FDCWD, "./0/file0" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./0/cgroup.net" [pid 314] unlink("./0/file0" [pid 312] <... unlink resumed>) = 0 [pid 314] <... unlink resumed>) = 0 [pid 312] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./0/binderfs" [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] newfstatat(AT_FDCWD, "./0/cgroup.cpu" [pid 314] unlink("./0/binderfs" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... unlink resumed>) = 0 [pid 312] unlink("./0/cgroup.cpu" [pid 314] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] <... unlink resumed>) = 0 [pid 314] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] unlink("./0/cgroup.net" [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... unlink resumed>) = 0 [pid 312] newfstatat(AT_FDCWD, "./0/cgroup" [pid 314] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] newfstatat(AT_FDCWD, "./0/cgroup.cpu" [pid 312] unlink("./0/cgroup" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./0/cgroup.cpu" [pid 312] <... unlink resumed>) = 0 [pid 314] <... unlink resumed>) = 0 [pid 312] getdents64(3 [pid 314] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] newfstatat(AT_FDCWD, "./0/cgroup" [pid 312] close(3 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] <... close resumed>) = 0 [pid 314] unlink("./0/cgroup" [pid 312] rmdir("./0" [pid 314] <... unlink resumed>) = 0 [pid 312] <... rmdir resumed>) = 0 [pid 314] getdents64(3 [pid 312] mkdir("./1", 0777 [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 314] close(3 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 314] <... close resumed>) = 0 [pid 312] <... openat resumed>) = 3 [pid 314] rmdir("./0" [pid 312] ioctl(3, LOOP_CLR_FD [pid 314] <... rmdir resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 314] mkdir("./1", 0777 [pid 312] close(3 [pid 314] <... mkdir resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 314] <... openat resumed>) = 3 [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] ioctl(3, LOOP_CLR_FD [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 331 attached [pid 314] close(3 [pid 331] set_robust_list(0x55557fa896a0, 24) = 0 [pid 314] <... close resumed>) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 3 [pid 331] rt_sigprocmask(SIG_SETMASK, [] [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 331] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] chdir("./1" [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 331] <... chdir resumed>) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 331] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 331] symlink("/syzcgroup/net/syz0", "./cgroup.net"ci2-android-6-1/strace-static-x86_64: Process 332 attached ) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 332] set_robust_list(0x55557fa896a0, 24 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 3 [pid 332] <... set_robust_list resumed>) = 0 [pid 331] <... openat resumed>) = 3 [pid 332] rt_sigprocmask(SIG_SETMASK, [] [pid 331] write(3, "1000", 4 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] <... write resumed>) = 4 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] close(3) = 0 [pid 332] chdir("./1" [pid 331] symlink("/dev/binderfs", "./binderfs" [pid 332] <... chdir resumed>) = 0 [pid 331] <... symlink resumed>) = 0 [pid 331] write(1, "executing program\n", 18) = 18 executing program [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 331] memfd_create("syzkaller", 0 [pid 332] <... prctl resumed>) = 0 [pid 331] <... memfd_create resumed>) = 3 [pid 332] setpgid(0, 0 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 332] <... setpgid resumed>) = 0 [pid 331] <... mmap resumed>) = 0x7f96da85b000 [pid 332] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 332] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 332] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [ 24.645410][ T322] loop4: p1 p2 p3 < p5 p6 > p4 [ 24.661975][ T322] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 332] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] memfd_create("syzkaller", 0) = 3 [pid 332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 24.752773][ T336] udevd[336]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 24.753678][ T333] udevd[333]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 24.773729][ T323] udevd[323]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 24.792120][ T322] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 322] <... ioctl resumed>) = 0 [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x14), ...}, 0) = 0 [pid 322] symlink("/dev/loop4p1", "./file0") = 0 [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 322] symlink("/dev/loop4p2", "./file1") = 0 [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 322] symlink("/dev/loop4p3", "./file2") = 0 [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 322] symlink("/dev/loop4p5", "./file3") = 0 [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 322] symlink("/dev/loop4p6", "./file4") = 0 [pid 322] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 322] close(4) = 0 [pid 322] close(3) = -1 EBADF (Bad file descriptor) [pid 322] close(4) = -1 EBADF (Bad file descriptor) [pid 322] close(5) = -1 EBADF (Bad file descriptor) [pid 322] close(6) = -1 EBADF (Bad file descriptor) [pid 322] close(7) = -1 EBADF (Bad file descriptor) [pid 322] close(8) = -1 EBADF (Bad file descriptor) [pid 322] close(9) = -1 EBADF (Bad file descriptor) [pid 322] close(10) = -1 EBADF (Bad file descriptor) [pid 322] close(11) = -1 EBADF (Bad file descriptor) [pid 322] close(12) = -1 EBADF (Bad file descriptor) [pid 322] close(13) = -1 EBADF (Bad file descriptor) [pid 322] close(14) = -1 EBADF (Bad file descriptor) [pid 322] close(15) = -1 EBADF (Bad file descriptor) [pid 322] close(16) = -1 EBADF (Bad file descriptor) [pid 322] close(17) = -1 EBADF (Bad file descriptor) [pid 322] close(18) = -1 EBADF (Bad file descriptor) [pid 322] close(19) = -1 EBADF (Bad file descriptor) [pid 322] close(20) = -1 EBADF (Bad file descriptor) [pid 322] close(21) = -1 EBADF (Bad file descriptor) [pid 322] close(22) = -1 EBADF (Bad file descriptor) [pid 322] close(23) = -1 EBADF (Bad file descriptor) [pid 322] close(24) = -1 EBADF (Bad file descriptor) [pid 322] close(25) = -1 EBADF (Bad file descriptor) [pid 322] close(26) = -1 EBADF (Bad file descriptor) [pid 322] close(27) = -1 EBADF (Bad file descriptor) [pid 322] close(28) = -1 EBADF (Bad file descriptor) [pid 322] close(29) = -1 EBADF (Bad file descriptor) [pid 322] exit_group(0) = ? [pid 322] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=6 /* 0.06 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 317] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/file4") = 0 [pid 317] umount2("./0/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/file3") = 0 [pid 317] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/file2") = 0 [pid 317] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/file1") = 0 [pid 317] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/file0") = 0 [pid 317] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/binderfs") = 0 [pid 317] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/cgroup.net") = 0 [pid 317] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/cgroup.cpu") = 0 [pid 317] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./0/cgroup") = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 317] rmdir("./0") = 0 [pid 317] mkdir("./1", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x55557fa896a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] chdir("./1") = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 337] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 337] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 3 [pid 337] close(3) = 0 [pid 337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 337] write(1, "executing program\n", 18 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 337] <... write resumed>) = 18 [pid 337] memfd_create("syzkaller", 0) = 3 [pid 337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 executing program [pid 330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 24.800702][ T334] udevd[334]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 24.823196][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [pid 332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 24.891554][ T336] udevd[336]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 24.891654][ T333] udevd[333]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 24.902858][ T334] udevd[334]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 24.921564][ T323] udevd[323]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 24.932732][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [pid 329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 331] <... write resumed>) = 16777216 [pid 331] munmap(0x7f96da85b000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3 [pid 329] <... write resumed>) = 16777216 [pid 331] <... ioctl resumed>) = 0 [pid 329] munmap(0x7f96da85b000, 138412032 [pid 332] <... write resumed>) = 16777216 [pid 331] close(3) = 0 [pid 331] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 331] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 329] <... munmap resumed>) = 0 [pid 332] munmap(0x7f96da85b000, 138412032 [pid 330] <... write resumed>) = 16777216 [pid 337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 330] munmap(0x7f96da85b000, 138412032 [pid 329] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 330] <... munmap resumed>) = 0 [pid 330] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 330] ioctl(4, LOOP_SET_FD, 3 [pid 329] ioctl(4, LOOP_SET_FD, 3 [pid 330] <... ioctl resumed>) = 0 [pid 330] close(3) = 0 [pid 330] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [ 25.096342][ T331] loop0: detected capacity change from 0 to 32768 [ 25.131121][ T330] loop3: detected capacity change from 0 to 32768 [ 25.137883][ T329] loop2: detected capacity change from 0 to 32768 [pid 330] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 332] <... munmap resumed>) = 0 [pid 329] <... ioctl resumed>) = 0 [pid 332] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 329] close(3 [pid 332] <... openat resumed>) = 4 [pid 329] <... close resumed>) = 0 [pid 332] ioctl(4, LOOP_SET_FD, 3 [pid 329] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 329] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 332] <... ioctl resumed>) = 0 [pid 332] close(3) = 0 [pid 332] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 332] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 337] <... write resumed>) = 16777216 [pid 337] munmap(0x7f96da85b000, 138412032) = 0 [pid 337] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 25.145944][ T331] loop0: p1 p2 p3 < p5 p6 > p4 [ 25.154080][ T332] loop1: detected capacity change from 0 to 32768 [ 25.172769][ T331] loop0: p2 size 16777216 extends beyond EOD, truncated [ 25.183537][ T330] loop3: p1 p2 p3 < p5 p6 > p4 [pid 337] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 337] close(3) = 0 [pid 337] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 337] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 331] <... ioctl resumed>) = 0 [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 331] symlink("/dev/loop0p1", "./file0") = 0 [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 331] symlink("/dev/loop0p2", "./file1") = 0 [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 331] symlink("/dev/loop0p3", "./file2") = 0 [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 331] symlink("/dev/loop0p5", "./file3") = 0 [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 331] symlink("/dev/loop0p6", "./file4") = 0 [pid 331] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 331] close(4) = 0 [pid 331] close(3) = -1 EBADF (Bad file descriptor) [pid 331] close(4) = -1 EBADF (Bad file descriptor) [pid 330] <... ioctl resumed>) = 0 [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 330] symlink("/dev/loop3p1", "./file0") = 0 [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 330] symlink("/dev/loop3p2", "./file1") = 0 [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 330] symlink("/dev/loop3p3", "./file2") = 0 [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 330] symlink("/dev/loop3p5", "./file3") = 0 [ 25.191355][ T330] loop3: p2 size 16777216 extends beyond EOD, truncated [ 25.194207][ T337] loop4: detected capacity change from 0 to 32768 [ 25.199391][ T330] loop3: p4 start 1426063360 is beyond EOD, [ 25.206651][ T331] loop0: p4 start 1426063360 is beyond EOD, [ 25.207550][ T332] loop1: p1 p2 p3 < p5 p6 > p4 [ 25.212844][ T331] truncated [ 25.226794][ T330] truncated [ 25.230146][ T329] loop2: p1 p2 p3 < p5 p6 > p4 [ 25.230863][ T332] loop1: p2 size 16777216 extends beyond EOD, truncated [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 330] symlink("/dev/loop3p6", "./file4") = 0 [pid 330] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 330] close(4) = 0 [pid 330] close(3) = -1 EBADF (Bad file descriptor) [pid 330] close(4) = -1 EBADF (Bad file descriptor) [pid 330] close(5) = -1 EBADF (Bad file descriptor) [pid 330] close(6) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 331] close(5) = -1 EBADF (Bad file descriptor) [pid 331] close(6) = -1 EBADF (Bad file descriptor) [pid 331] close(7) = -1 EBADF (Bad file descriptor) [pid 331] close(8) = -1 EBADF (Bad file descriptor) [pid 331] close(9) = -1 EBADF (Bad file descriptor) [pid 331] close(10) = -1 EBADF (Bad file descriptor) [pid 331] close(11) = -1 EBADF (Bad file descriptor) [pid 331] close(12) = -1 EBADF (Bad file descriptor) [pid 331] close(13) = -1 EBADF (Bad file descriptor) [pid 331] close(14) = -1 EBADF (Bad file descriptor) [pid 331] close(15) = -1 EBADF (Bad file descriptor) [pid 331] close(16) = -1 EBADF (Bad file descriptor) [pid 331] close(17) = -1 EBADF (Bad file descriptor) [pid 331] close(18) = -1 EBADF (Bad file descriptor) [pid 331] close(19) = -1 EBADF (Bad file descriptor) [pid 331] close(20) = -1 EBADF (Bad file descriptor) [pid 316] <... restart_syscall resumed>) = 0 [pid 316] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] close(21 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] newfstatat(AT_FDCWD, "./1/file4" [pid 331] close(22 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] unlink("./1/file4" [pid 331] close(23 [pid 316] <... unlink resumed>) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] umount2("./1/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] close(24 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] newfstatat(AT_FDCWD, "./1/file3" [pid 331] close(25 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] unlink("./1/file3" [pid 331] close(26 [pid 316] <... unlink resumed>) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] close(27 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] newfstatat(AT_FDCWD, "./1/file2" [pid 331] close(28 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] unlink("./1/file2" [pid 331] close(29 [pid 316] <... unlink resumed>) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] exit_group(0 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 331] <... exit_group resumed>) = ? [pid 316] newfstatat(AT_FDCWD, "./1/file1" [pid 331] +++ exited with 0 +++ [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./1/file1") = 0 [pid 316] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./1/file0" [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./1/file0") = 0 [pid 316] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./1/binderfs") = 0 [pid 316] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] <... restart_syscall resumed>) = 0 [pid 316] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./1/cgroup.net") = 0 [pid 316] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] unlink("./1/cgroup.cpu") = 0 [pid 312] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 316] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] <... openat resumed>) = 3 [pid 316] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] fstat(3 [pid 316] unlink("./1/cgroup") = 0 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] getdents64(3 [ 25.236132][ T329] loop2: p2 size 16777216 extends beyond EOD, truncated [ 25.259776][ T329] loop2: p4 start 1426063360 is beyond EOD, truncated [ 25.267514][ T332] loop1: p4 start 1426063360 is beyond EOD, truncated [ 25.276670][ T337] loop4: p1 p2 p3 < p5 p6 > p4 [pid 316] close(3) = 0 [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 332] <... ioctl resumed>) = 0 [pid 316] rmdir("./1" [pid 312] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] <... rmdir resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] mkdir("./2", 0777 [pid 312] newfstatat(AT_FDCWD, "./1/file4" [pid 316] <... mkdir resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 312] unlink("./1/file4" [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p1" [pid 316] <... openat resumed>) = 3 [pid 312] <... unlink resumed>) = 0 [pid 332] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 316] ioctl(3, LOOP_CLR_FD [pid 312] umount2("./1/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] symlink("/dev/loop1p1", "./file0" [pid 316] <... ioctl resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] <... symlink resumed>) = 0 [pid 316] close(3 [pid 312] newfstatat(AT_FDCWD, "./1/file3" [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p2" [pid 316] <... close resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 332] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 312] unlink("./1/file3" [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 312] <... unlink resumed>) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-6-1/strace-static-x86_64: Process 340 attached [pid 332] symlink("/dev/loop1p2", "./file1" [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] set_robust_list(0x55557fa896a0, 24 [pid 332] <... symlink resumed>) = 0 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 4 [pid 312] newfstatat(AT_FDCWD, "./1/file2" [pid 340] <... set_robust_list resumed>) = 0 [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p3" [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] unlink("./1/file2" [pid 340] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... unlink resumed>) = 0 [pid 340] chdir("./2" [pid 312] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... chdir resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] newfstatat(AT_FDCWD, "./1/file1" [pid 340] <... prctl resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] setpgid(0, 0 [pid 312] unlink("./1/file1" [pid 340] <... setpgid resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 340] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 312] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... symlink resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 312] newfstatat(AT_FDCWD, "./1/file0" [pid 340] <... symlink resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 312] unlink("./1/file0" [pid 340] <... symlink resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... openat resumed>) = 3 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] write(3, "1000", 4 [pid 312] newfstatat(AT_FDCWD, "./1/binderfs" [pid 340] <... write resumed>) = 4 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] close(3 [pid 312] unlink("./1/binderfs" [pid 340] <... close resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 340] symlink("/dev/binderfs", "./binderfs" [pid 312] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... symlink resumed>) = 0 [pid 332] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xf), ...}, 0) = 0 [pid 329] <... ioctl resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] write(1, "executing program\n", 18 [pid 332] symlink("/dev/loop1p3", "./file2" executing program [pid 312] newfstatat(AT_FDCWD, "./1/cgroup.net" [pid 340] <... write resumed>) = 18 [pid 332] <... symlink resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] memfd_create("syzkaller", 0 [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p4" [pid 312] unlink("./1/cgroup.net" [pid 340] <... memfd_create resumed>) = 3 [pid 332] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 312] <... unlink resumed>) = 0 [pid 340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p5" [pid 312] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... mmap resumed>) = 0x7f96da85b000 [ 25.304504][ T337] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 332] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x10), ...}, 0) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] symlink("/dev/loop1p5", "./file3" [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p1" [pid 312] newfstatat(AT_FDCWD, "./1/cgroup.cpu" [pid 332] <... symlink resumed>) = 0 [pid 329] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p6" [pid 329] symlink("/dev/loop2p1", "./file0" [pid 312] unlink("./1/cgroup.cpu" [pid 332] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x11), ...}, 0) = 0 [pid 329] <... symlink resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 332] symlink("/dev/loop1p6", "./file4" [pid 312] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p2" [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] <... symlink resumed>) = 0 [pid 312] newfstatat(AT_FDCWD, "./1/cgroup" [pid 332] newfstatat(AT_FDCWD, "/dev/loop1p7" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 332] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 312] unlink("./1/cgroup" [pid 332] close(4 [pid 312] <... unlink resumed>) = 0 [pid 332] <... close resumed>) = 0 [pid 312] getdents64(3 [pid 332] close(3 [pid 329] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] symlink("/dev/loop2p2", "./file1" [pid 312] close(3 [pid 332] close(4 [pid 312] <... close resumed>) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... symlink resumed>) = 0 [pid 312] rmdir("./1" [pid 332] close(5 [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p3" [pid 312] <... rmdir resumed>) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 312] mkdir("./2", 0777 [pid 332] close(6 [pid 329] symlink("/dev/loop2p3", "./file2" [pid 312] <... mkdir resumed>) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 332] close(7 [pid 329] <... symlink resumed>) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p4" [pid 332] close(8) = -1 EBADF (Bad file descriptor) [pid 329] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 332] close(9 [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p5" [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... newfstatat resumed>, {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x14), ...}, 0) = 0 [pid 332] close(10 [pid 329] symlink("/dev/loop2p5", "./file3" [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(11 [pid 329] <... symlink resumed>) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(12 [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p6" [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x15), ...}, 0) = 0 [pid 332] close(13 [pid 329] symlink("/dev/loop2p6", "./file4" [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(14 [pid 329] <... symlink resumed>) = 0 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] newfstatat(AT_FDCWD, "/dev/loop2p7" [pid 332] close(15) = -1 EBADF (Bad file descriptor) [pid 329] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 332] close(16 [pid 329] close(4 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = 0 [pid 332] close(17 [pid 329] close(3 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(18 [pid 329] close(4 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(19 [pid 329] close(5 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(20 [pid 329] close(6 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(21 [pid 329] close(7 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(22 [pid 329] close(8 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(23 [pid 329] close(9 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(24 [pid 329] close(10 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(25 [pid 329] close(11 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(26 [pid 329] close(12 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(27 [pid 329] close(13 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(28 [pid 329] close(14 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(29 [pid 329] close(15 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0 [pid 329] close(16 [pid 312] <... openat resumed>) = 3 [pid 332] <... exit_group resumed>) = ? [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] ioctl(3, LOOP_CLR_FD [pid 332] +++ exited with 0 +++ [pid 329] close(17 [pid 312] <... ioctl resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 329] close(18 [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] close(19 [pid 312] close(3 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] close(20 [pid 312] <... close resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] close(21 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 329] close(22 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 342 attached [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] set_robust_list(0x55557fa896a0, 24 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 4 [pid 342] <... set_robust_list resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 342] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 342] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 342] chdir("./2") = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] close(23 [pid 314] <... restart_syscall resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] close(24) = -1 EBADF (Bad file descriptor) [pid 314] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 329] close(25 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 329] close(26 [pid 342] setpgid(0, 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... openat resumed>) = 3 [pid 342] <... setpgid resumed>) = 0 [pid 329] close(27 [pid 314] fstat(3 [pid 342] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 342] <... symlink resumed>) = 0 [pid 329] close(28 [pid 314] getdents64(3 [pid 342] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... symlink resumed>) = 0 [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 329] close(29 [pid 342] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 342] <... symlink resumed>) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 329] exit_group(0 [pid 342] <... openat resumed>) = 3 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] write(3, "1000", 4 [pid 329] <... exit_group resumed>) = ? [pid 314] newfstatat(AT_FDCWD, "./1/file4" [pid 342] <... write resumed>) = 4 [pid 342] close(3) = 0 [pid 329] +++ exited with 0 +++ [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs" [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=11 /* 0.11 s */} --- [pid 314] unlink("./1/file4" [pid 342] <... symlink resumed>) = 0 [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...> executing program [pid 342] write(1, "executing program\n", 18 [pid 314] <... unlink resumed>) = 0 [pid 342] <... write resumed>) = 18 [pid 342] memfd_create("syzkaller", 0 [pid 314] umount2("./1/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 342] <... memfd_create resumed>) = 3 [pid 342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] <... mmap resumed>) = 0x7f96da85b000 [pid 314] newfstatat(AT_FDCWD, "./1/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... restart_syscall resumed>) = 0 [pid 314] unlink("./1/file3") = 0 [pid 315] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] newfstatat(AT_FDCWD, "./1/file2" [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] unlink("./1/file2" [pid 315] newfstatat(AT_FDCWD, "./1/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... unlink resumed>) = 0 [pid 315] unlink("./1/file4") = 0 [pid 314] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./1/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./1/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] newfstatat(AT_FDCWD, "./1/file1" [pid 315] unlink("./1/file3") = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] unlink("./1/file1" [pid 315] newfstatat(AT_FDCWD, "./1/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... unlink resumed>) = 0 [pid 315] unlink("./1/file2") = 0 [pid 314] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./1/file1" [pid 314] newfstatat(AT_FDCWD, "./1/file0" [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./1/file1" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 314] unlink("./1/file0" [pid 315] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... unlink resumed>) = 0 [pid 315] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] unlink("./1/file0") = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./1/binderfs" [pid 315] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./1/binderfs") = 0 [pid 314] unlink("./1/binderfs" [ 25.379065][ T337] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 315] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... unlink resumed>) = 0 [pid 315] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] unlink("./1/cgroup.net") = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./1/cgroup.net" [pid 315] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./1/cgroup.cpu") = 0 [pid 314] unlink("./1/cgroup.net" [pid 315] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... unlink resumed>) = 0 [pid 315] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] unlink("./1/cgroup") = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] newfstatat(AT_FDCWD, "./1/cgroup.cpu" [pid 315] close(3) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] rmdir("./1") = 0 [pid 314] unlink("./1/cgroup.cpu" [pid 315] mkdir("./2", 0777) = 0 [pid 314] <... unlink resumed>) = 0 [pid 337] <... ioctl resumed>) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 314] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p1" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x12), ...}, 0) = 0 [pid 314] newfstatat(AT_FDCWD, "./1/cgroup" [pid 337] symlink("/dev/loop4p1", "./file0") = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p2" [pid 314] unlink("./1/cgroup" [pid 337] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x13), ...}, 0) = 0 [pid 337] symlink("/dev/loop4p2", "./file1" [pid 314] <... unlink resumed>) = 0 [pid 337] <... symlink resumed>) = 0 [pid 314] getdents64(3 [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x16), ...}, 0) = 0 [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 337] symlink("/dev/loop4p3", "./file2" [pid 314] close(3 [pid 337] <... symlink resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p4" [pid 314] rmdir("./1" [pid 337] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 314] <... rmdir resumed>) = 0 [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p5" [pid 314] mkdir("./2", 0777 [pid 337] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 337] symlink("/dev/loop4p5", "./file3" [pid 314] <... mkdir resumed>) = 0 [pid 337] <... symlink resumed>) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p6" [pid 314] <... openat resumed>) = 3 [pid 337] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 314] ioctl(3, LOOP_CLR_FD [pid 337] symlink("/dev/loop4p6", "./file4" [pid 314] <... ioctl resumed>) = 0 [pid 337] <... symlink resumed>) = 0 [pid 314] close(3 [pid 337] newfstatat(AT_FDCWD, "/dev/loop4p7" [pid 315] <... openat resumed>) = 3 [pid 315] ioctl(3, LOOP_CLR_FD [pid 314] <... close resumed>) = 0 [pid 337] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 337] close(4 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 337] <... close resumed>) = 0 [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 337] close(3 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 4 ci2-android-6-1/strace-static-x86_64: Process 343 attached [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] close(4 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 343] set_robust_list(0x55557fa896a0, 24) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [] [pid 337] close(5 [pid 343] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] chdir("./2" [pid 337] close(6 [pid 343] <... chdir resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 337] close(7 [pid 343] <... prctl resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] setpgid(0, 0 [pid 337] close(8 [pid 343] <... setpgid resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 337] close(9 [pid 343] <... symlink resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 337] close(10 [pid 343] <... symlink resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 337] close(11 [pid 343] <... symlink resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 337] close(12 [pid 343] <... openat resumed>) = 3 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] write(3, "1000", 4 [pid 337] close(13 [pid 343] <... write resumed>) = 4 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] close(3 [pid 337] close(14 [pid 343] <... close resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] symlink("/dev/binderfs", "./binderfs" [pid 337] close(15 [pid 343] <... symlink resumed>) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] write(1, "executing program\n", 18 [pid 337] close(16 [pid 343] <... write resumed>) = 18 executing program [pid 343] memfd_create("syzkaller", 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... memfd_create resumed>) = 3 [pid 337] close(17) = -1 EBADF (Bad file descriptor) [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 337] close(18 [pid 343] <... mmap resumed>) = 0x7f96da85b000 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] close(19) = -1 EBADF (Bad file descriptor) [pid 337] close(20) = -1 EBADF (Bad file descriptor) [pid 337] close(21) = -1 EBADF (Bad file descriptor) [pid 337] close(22) = -1 EBADF (Bad file descriptor) [pid 337] close(23) = -1 EBADF (Bad file descriptor) [pid 337] close(24) = -1 EBADF (Bad file descriptor) [pid 337] close(25) = -1 EBADF (Bad file descriptor) [pid 337] close(26) = -1 EBADF (Bad file descriptor) [pid 337] close(27) = -1 EBADF (Bad file descriptor) [pid 337] close(28) = -1 EBADF (Bad file descriptor) [pid 337] close(29) = -1 EBADF (Bad file descriptor) [pid 337] exit_group(0) = ? [pid 337] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=7 /* 0.07 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 317] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/file4") = 0 [pid 317] umount2("./1/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/file3") = 0 [pid 317] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/file2") = 0 [pid 317] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/file1") = 0 [pid 317] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/file0") = 0 [pid 317] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/binderfs") = 0 [pid 317] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/cgroup.net") = 0 [pid 317] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/cgroup.cpu") = 0 [pid 317] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./1/cgroup") = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 317] rmdir("./1") = 0 [pid 317] mkdir("./2", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x55557fa896a0, 24 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 4 [pid 344] <... set_robust_list resumed>) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 344] rt_sigprocmask(SIG_SETMASK, [] [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 344] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 344] chdir("./2") = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 344] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 344] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 344] write(1, "executing program\n", 18) = 18 [pid 344] memfd_create("syzkaller", 0) = 3 [pid 344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 25.542528][ T336] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [pid 340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 315] <... ioctl resumed>) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 345 attached , child_tidptr=0x55557fa89690) = 4 [pid 345] set_robust_list(0x55557fa896a0, 24 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 345] <... set_robust_list resumed>) = 0 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] chdir("./2") = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 345] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 345] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 [pid 345] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 345] write(1, "executing program\n", 18) = 18 [pid 345] memfd_create("syzkaller", 0) = 3 [pid 345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 340] <... write resumed>) = 16777216 [pid 340] munmap(0x7f96da85b000, 138412032) = 0 [pid 340] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 340] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 340] close(3) = 0 [pid 340] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 340] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 342] <... write resumed>) = 16777216 [pid 342] munmap(0x7f96da85b000, 138412032 [pid 345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 342] <... munmap resumed>) = 0 [pid 342] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 342] close(3) = 0 [pid 342] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 342] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 343] <... write resumed>) = 16777216 [pid 343] munmap(0x7f96da85b000, 138412032 [pid 344] <... write resumed>) = 16777216 [pid 343] <... munmap resumed>) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 344] munmap(0x7f96da85b000, 138412032 [pid 343] close(3) = 0 [pid 343] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 343] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 344] <... munmap resumed>) = 0 [pid 344] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 344] close(3) = 0 [pid 344] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 344] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 340] <... ioctl resumed>) = 0 [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 340] symlink("/dev/loop3p1", "./file0") = 0 [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 340] symlink("/dev/loop3p2", "./file1") = 0 [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 340] symlink("/dev/loop3p3", "./file2") = 0 [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 340] symlink("/dev/loop3p5", "./file3") = 0 [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 340] symlink("/dev/loop3p6", "./file4") = 0 [pid 340] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 340] close(4) = 0 [pid 340] close(3) = -1 EBADF (Bad file descriptor) [pid 340] close(4) = -1 EBADF (Bad file descriptor) [pid 340] close(5) = -1 EBADF (Bad file descriptor) [pid 340] close(6) = -1 EBADF (Bad file descriptor) [pid 340] close(7) = -1 EBADF (Bad file descriptor) [pid 340] close(8) = -1 EBADF (Bad file descriptor) [pid 340] close(9) = -1 EBADF (Bad file descriptor) [pid 340] close(10) = -1 EBADF (Bad file descriptor) [pid 340] close(11) = -1 EBADF (Bad file descriptor) [pid 340] close(12) = -1 EBADF (Bad file descriptor) [pid 340] close(13) = -1 EBADF (Bad file descriptor) [pid 340] close(14) = -1 EBADF (Bad file descriptor) [pid 340] close(15) = -1 EBADF (Bad file descriptor) [pid 340] close(16) = -1 EBADF (Bad file descriptor) [pid 340] close(17) = -1 EBADF (Bad file descriptor) [pid 340] close(18) = -1 EBADF (Bad file descriptor) [pid 340] close(19) = -1 EBADF (Bad file descriptor) [pid 340] close(20) = -1 EBADF (Bad file descriptor) [pid 340] close(21) = -1 EBADF (Bad file descriptor) [pid 340] close(22) = -1 EBADF (Bad file descriptor) [pid 340] close(23) = -1 EBADF (Bad file descriptor) [pid 340] close(24) = -1 EBADF (Bad file descriptor) [pid 340] close(25) = -1 EBADF (Bad file descriptor) [pid 340] close(26) = -1 EBADF (Bad file descriptor) [pid 340] close(27) = -1 EBADF (Bad file descriptor) [pid 340] close(28) = -1 EBADF (Bad file descriptor) [pid 340] close(29) = -1 EBADF (Bad file descriptor) [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=7 /* 0.07 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/file4") = 0 [pid 316] umount2("./2/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 25.822814][ T340] loop3: p1 p2 p3 < p5 p6 > p4 [ 25.832198][ T340] loop3: p2 size 16777216 extends beyond EOD, truncated [ 25.850300][ T340] loop3: p4 start 1426063360 is beyond EOD, truncated [ 25.859506][ T342] loop0: p1 p2 p3 < p5 p6 > p4 [ 25.865734][ T342] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 316] newfstatat(AT_FDCWD, "./2/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/file3") = 0 [pid 316] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/file2") = 0 [pid 316] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/file1") = 0 [pid 316] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/file0") = 0 [pid 316] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/binderfs") = 0 [pid 316] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/cgroup.net") = 0 [pid 316] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/cgroup.cpu") = 0 [pid 316] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./2/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./2") = 0 [pid 316] mkdir("./3", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x55557fa896a0, 24 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 5 [pid 346] <... set_robust_list resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 346] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 346] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 346] chdir("./3") = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 346] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 346] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 346] write(1, "executing program\n", 18) = 18 executing program [pid 346] memfd_create("syzkaller", 0) = 3 [pid 346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 342] <... ioctl resumed>) = 0 [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 342] symlink("/dev/loop0p1", "./file0") = 0 [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 342] symlink("/dev/loop0p2", "./file1") = 0 [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 342] symlink("/dev/loop0p3", "./file2") = 0 [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 342] symlink("/dev/loop0p5", "./file3") = 0 [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 342] symlink("/dev/loop0p6", "./file4") = 0 [pid 342] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 342] close(4) = 0 [pid 342] close(3) = -1 EBADF (Bad file descriptor) [pid 342] close(4) = -1 EBADF (Bad file descriptor) [pid 342] close(5) = -1 EBADF (Bad file descriptor) [pid 342] close(6) = -1 EBADF (Bad file descriptor) [pid 342] close(7) = -1 EBADF (Bad file descriptor) [pid 342] close(8) = -1 EBADF (Bad file descriptor) [pid 342] close(9) = -1 EBADF (Bad file descriptor) [pid 342] close(10) = -1 EBADF (Bad file descriptor) [pid 342] close(11) = -1 EBADF (Bad file descriptor) [pid 342] close(12) = -1 EBADF (Bad file descriptor) [pid 342] close(13) = -1 EBADF (Bad file descriptor) [pid 342] close(14) = -1 EBADF (Bad file descriptor) [pid 342] close(15) = -1 EBADF (Bad file descriptor) [pid 342] close(16) = -1 EBADF (Bad file descriptor) [pid 342] close(17) = -1 EBADF (Bad file descriptor) [pid 342] close(18) = -1 EBADF (Bad file descriptor) [pid 342] close(19) = -1 EBADF (Bad file descriptor) [pid 342] close(20) = -1 EBADF (Bad file descriptor) [pid 342] close(21) = -1 EBADF (Bad file descriptor) [pid 342] close(22) = -1 EBADF (Bad file descriptor) [pid 342] close(23) = -1 EBADF (Bad file descriptor) [pid 342] close(24) = -1 EBADF (Bad file descriptor) [pid 342] close(25) = -1 EBADF (Bad file descriptor) [pid 342] close(26) = -1 EBADF (Bad file descriptor) [pid 342] close(27) = -1 EBADF (Bad file descriptor) [pid 342] close(28) = -1 EBADF (Bad file descriptor) [pid 342] close(29) = -1 EBADF (Bad file descriptor) [ 25.914759][ T342] loop0: p4 start 1426063360 is beyond EOD, truncated [ 25.935918][ T344] loop4: p1 p2 p3 < p5 p6 > p4 [ 25.936202][ T343] loop1: p1 p2 p3 < p5 p6 > p4 [ 25.951360][ T344] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=10 /* 0.10 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 345] <... write resumed>) = 16777216 [pid 312] <... restart_syscall resumed>) = 0 [pid 312] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 345] munmap(0x7f96da85b000, 138412032 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/file4") = 0 [pid 312] umount2("./2/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/file3") = 0 [pid 312] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/file2") = 0 [pid 312] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/file1") = 0 [pid 312] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/file0") = 0 [pid 312] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/binderfs") = 0 [pid 312] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/cgroup.net") = 0 [pid 312] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/cgroup.cpu") = 0 [pid 312] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./2/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./2") = 0 [pid 312] mkdir("./3", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 347 attached [pid 345] <... munmap resumed>) = 0 [pid 347] set_robust_list(0x55557fa896a0, 24 [pid 345] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 5 [pid 347] <... set_robust_list resumed>) = 0 [pid 345] <... openat resumed>) = 4 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 345] ioctl(4, LOOP_SET_FD, 3 [pid 347] rt_sigprocmask(SIG_SETMASK, [] [pid 345] <... ioctl resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 347] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 345] close(3 [pid 347] chdir("./3" [pid 345] <... close resumed>) = 0 [pid 347] <... chdir resumed>) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 345] ioctl(4, LOOP_GET_STATUS64 [pid 347] <... prctl resumed>) = 0 [pid 345] <... ioctl resumed>, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 347] setpgid(0, 0 [pid 345] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 347] <... setpgid resumed>) = 0 [pid 347] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 347] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 347] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 347] write(1, "executing program\n", 18) = 18 [pid 347] memfd_create("syzkaller", 0) = 3 [pid 347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 26.004210][ T344] loop4: p4 start 1426063360 is beyond EOD, truncated [ 26.012523][ T343] loop1: p2 size 16777216 extends beyond EOD, truncated [ 26.031139][ T343] loop1: p4 start 1426063360 is beyond EOD, truncated [ 26.046873][ T345] loop2: p1 p2 p3 < p5 p6 > p4 [pid 344] <... ioctl resumed>) = 0 [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 344] symlink("/dev/loop4p1", "./file0") = 0 [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 344] symlink("/dev/loop4p2", "./file1") = 0 [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 344] symlink("/dev/loop4p3", "./file2") = 0 [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 344] symlink("/dev/loop4p5", "./file3") = 0 [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 344] symlink("/dev/loop4p6", "./file4") = 0 [pid 344] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 344] close(4) = 0 [pid 344] close(3) = -1 EBADF (Bad file descriptor) [pid 344] close(4) = -1 EBADF (Bad file descriptor) [pid 344] close(5) = -1 EBADF (Bad file descriptor) [pid 344] close(6) = -1 EBADF (Bad file descriptor) [pid 344] close(7) = -1 EBADF (Bad file descriptor) [pid 344] close(8) = -1 EBADF (Bad file descriptor) [pid 344] close(9) = -1 EBADF (Bad file descriptor) [pid 344] close(10) = -1 EBADF (Bad file descriptor) [pid 344] close(11) = -1 EBADF (Bad file descriptor) [pid 344] close(12) = -1 EBADF (Bad file descriptor) [pid 344] close(13) = -1 EBADF (Bad file descriptor) [pid 344] close(14 [pid 343] <... ioctl resumed>) = 0 [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] close(15) = -1 EBADF (Bad file descriptor) [pid 344] close(16) = -1 EBADF (Bad file descriptor) [pid 344] close(17) = -1 EBADF (Bad file descriptor) [pid 344] close(18) = -1 EBADF (Bad file descriptor) [pid 344] close(19 [pid 343] symlink("/dev/loop1p1", "./file0") = 0 [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 343] symlink("/dev/loop1p2", "./file1") = 0 [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 343] symlink("/dev/loop1p3", "./file2") = 0 [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 343] symlink("/dev/loop1p5", "./file3") = 0 [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xf), ...}, 0) = 0 [pid 343] symlink("/dev/loop1p6", "./file4") = 0 [pid 343] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 343] close(4) = 0 [pid 343] close(3) = -1 EBADF (Bad file descriptor) [pid 343] close(4) = -1 EBADF (Bad file descriptor) [pid 343] close(5) = -1 EBADF (Bad file descriptor) [pid 343] close(6) = -1 EBADF (Bad file descriptor) [pid 343] close(7) = -1 EBADF (Bad file descriptor) [pid 343] close(8) = -1 EBADF (Bad file descriptor) [pid 343] close(9) = -1 EBADF (Bad file descriptor) [pid 343] close(10) = -1 EBADF (Bad file descriptor) [pid 343] close(11) = -1 EBADF (Bad file descriptor) [pid 343] close(12) = -1 EBADF (Bad file descriptor) [pid 343] close(13) = -1 EBADF (Bad file descriptor) [pid 343] close(14) = -1 EBADF (Bad file descriptor) [pid 343] close(15) = -1 EBADF (Bad file descriptor) [pid 343] close(16) = -1 EBADF (Bad file descriptor) [pid 343] close(17) = -1 EBADF (Bad file descriptor) [pid 343] close(18) = -1 EBADF (Bad file descriptor) [pid 343] close(19) = -1 EBADF (Bad file descriptor) [pid 343] close(20) = -1 EBADF (Bad file descriptor) [pid 343] close(21) = -1 EBADF (Bad file descriptor) [pid 343] close(22) = -1 EBADF (Bad file descriptor) [pid 343] close(23) = -1 EBADF (Bad file descriptor) [pid 343] close(24) = -1 EBADF (Bad file descriptor) [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] close(20) = -1 EBADF (Bad file descriptor) [pid 343] close(25 [pid 344] close(21 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] close(26 [pid 344] close(22 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] close(27) = -1 EBADF (Bad file descriptor) [pid 344] close(23 [pid 343] close(28) = -1 EBADF (Bad file descriptor) [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] close(29 [pid 344] close(24 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] close(25) = -1 EBADF (Bad file descriptor) [pid 343] exit_group(0 [pid 344] close(26 [pid 343] <... exit_group resumed>) = ? [pid 344] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 344] close(27) = -1 EBADF (Bad file descriptor) [pid 344] close(28) = -1 EBADF (Bad file descriptor) [pid 344] close(29) = -1 EBADF (Bad file descriptor) [pid 344] exit_group(0 [pid 343] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=5 /* 0.05 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 344] <... exit_group resumed>) = ? [pid 344] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 314] <... restart_syscall resumed>) = 0 [pid 317] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./2/file4") = 0 [pid 317] umount2("./2/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] newfstatat(AT_FDCWD, "./2/file3" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 317] unlink("./2/file3" [pid 314] <... openat resumed>) = 3 [ 26.060736][ T345] loop2: p2 size 16777216 extends beyond EOD, truncated [pid 317] <... unlink resumed>) = 0 [pid 314] fstat(3 [pid 317] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] getdents64(3 [pid 317] newfstatat(AT_FDCWD, "./2/file2" [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] unlink("./2/file2" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] <... unlink resumed>) = 0 [pid 314] newfstatat(AT_FDCWD, "./2/file4" [pid 317] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] unlink("./2/file4" [pid 317] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... unlink resumed>) = 0 [pid 317] unlink("./2/file1" [pid 314] umount2("./2/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] newfstatat(AT_FDCWD, "./2/file3" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./2/file0" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./2/file3" [pid 317] unlink("./2/file0") = 0 [pid 314] <... unlink resumed>) = 0 [pid 317] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./2/binderfs" [pid 314] newfstatat(AT_FDCWD, "./2/file2" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./2/binderfs" [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] <... unlink resumed>) = 0 [pid 314] unlink("./2/file2" [pid 317] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... unlink resumed>) = 0 [pid 317] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] unlink("./2/cgroup.net" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] <... unlink resumed>) = 0 [pid 314] newfstatat(AT_FDCWD, "./2/file1" [pid 317] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./2/cgroup.cpu" [pid 314] unlink("./2/file1" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./2/cgroup.cpu" [pid 314] <... unlink resumed>) = 0 [pid 314] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./2/file0") = 0 [pid 314] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] newfstatat(AT_FDCWD, "./2/binderfs" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./2/binderfs" [pid 317] newfstatat(AT_FDCWD, "./2/cgroup" [pid 314] <... unlink resumed>) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] unlink("./2/cgroup" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] <... unlink resumed>) = 0 [pid 314] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] getdents64(3 [pid 314] unlink("./2/cgroup.net" [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 314] <... unlink resumed>) = 0 [pid 314] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] rmdir("./2" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./2/cgroup.cpu" [pid 317] <... rmdir resumed>) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] mkdir("./3", 0777 [pid 314] unlink("./2/cgroup.cpu") = 0 [pid 317] <... mkdir resumed>) = 0 [pid 314] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./2/cgroup" [pid 317] <... openat resumed>) = 3 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] ioctl(3, LOOP_CLR_FD [pid 314] unlink("./2/cgroup") = 0 [pid 314] getdents64(3 [pid 317] <... ioctl resumed>) = 0 [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3 [pid 314] close(3) = 0 [pid 345] <... ioctl resumed>) = 0 [pid 317] <... close resumed>) = 0 [pid 314] rmdir("./2" [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 345] symlink("/dev/loop2p1", "./file0") = 0 [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x10), ...}, 0) = 0 [pid 345] symlink("/dev/loop2p2", "./file1") = 0 [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x11), ...}, 0) = 0 [pid 345] symlink("/dev/loop2p3", "./file2") = 0 [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x12), ...}, 0) = 0 [pid 345] symlink("/dev/loop2p5", "./file3") = 0 [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 345] symlink("/dev/loop2p6", "./file4") = 0 [pid 345] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 345] close(4) = 0 [pid 345] close(3) = -1 EBADF (Bad file descriptor) [pid 317] rt_sigprocmask(SIG_BLOCK, ~[] [pid 345] close(4) = -1 EBADF (Bad file descriptor) [pid 345] close(5) = -1 EBADF (Bad file descriptor) [pid 345] close(6 [pid 317] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] <... rmdir resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(7 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] mkdir("./3", 0777 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(8) = -1 EBADF (Bad file descriptor) [pid 345] close(9ci2-android-6-1/strace-static-x86_64: Process 348 attached ) = -1 EBADF (Bad file descriptor) [pid 314] <... mkdir resumed>) = 0 [pid 348] set_robust_list(0x55557fa896a0, 24 [pid 345] close(10 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 5 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 348] <... set_robust_list resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] rt_sigprocmask(SIG_SETMASK, [] [pid 345] close(11 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... openat resumed>) = 3 [pid 348] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] chdir("./3" [pid 345] close(12 [pid 348] <... chdir resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 345] close(13 [pid 348] <... prctl resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] setpgid(0, 0 [pid 345] close(14 [pid 348] <... setpgid resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 345] close(15 [pid 348] <... symlink resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 345] close(16 [pid 348] <... symlink resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 345] close(17 [pid 348] <... symlink resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 345] close(18 [pid 348] <... openat resumed>) = 3 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] write(3, "1000", 4 [pid 345] close(19 [pid 348] <... write resumed>) = 4 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(3 [pid 345] close(20 [pid 348] <... close resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] symlink("/dev/binderfs", "./binderfs" [pid 345] close(21 [pid 348] <... symlink resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 348] write(1, "executing program\n", 18 [pid 345] close(22 [pid 348] <... write resumed>) = 18 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] memfd_create("syzkaller", 0 [pid 345] close(23 [pid 348] <... memfd_create resumed>) = 3 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 345] close(24 [pid 348] <... mmap resumed>) = 0x7f96da85b000 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(25 [pid 314] ioctl(3, LOOP_CLR_FD [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(26 [pid 314] <... ioctl resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(27 [pid 314] close(3 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(28 [pid 314] <... close resumed>) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(29 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 345] exit_group(0) = ? [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 345] +++ exited with 0 +++ ci2-android-6-1/strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x55557fa896a0, 24 [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 5 [pid 349] <... set_robust_list resumed>) = 0 [ 26.130159][ T345] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 349] chdir("./3") = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 349] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 349] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 [pid 349] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] memfd_create("syzkaller", 0) = 3 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 315] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/file4") = 0 [pid 315] umount2("./2/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/file3") = 0 [pid 315] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/file2") = 0 [pid 315] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/file1") = 0 [pid 315] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/file0") = 0 [pid 315] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/binderfs") = 0 [pid 315] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/cgroup.net") = 0 [pid 315] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/cgroup.cpu") = 0 [pid 315] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./2/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./2") = 0 [pid 315] mkdir("./3", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 5 ci2-android-6-1/strace-static-x86_64: Process 350 attached [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 350] set_robust_list(0x55557fa896a0, 24 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] <... set_robust_list resumed>) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] chdir("./3") = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 350] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 350] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 [pid 350] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] memfd_create("syzkaller", 0) = 3 [pid 350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 346] <... write resumed>) = 16777216 [pid 346] munmap(0x7f96da85b000, 138412032) = 0 [pid 346] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 346] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 346] close(3) = 0 [pid 346] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 346] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 347] <... write resumed>) = 16777216 [pid 347] munmap(0x7f96da85b000, 138412032) = 0 [pid 347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 347] close(3) = 0 [pid 347] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [ 26.492558][ T346] loop3: p1 p2 p3 < p5 p6 > p4 [ 26.498442][ T346] loop3: p2 size 16777216 extends beyond EOD, truncated [ 26.513106][ T347] loop0: p1 p2 p3 < p5 p6 > p4 [ 26.528407][ T346] loop3: p4 start 1426063360 is beyond EOD, truncated [ 26.535914][ T347] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 347] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 349] <... write resumed>) = 16777216 [pid 349] munmap(0x7f96da85b000, 138412032) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 349] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 346] <... ioctl resumed>) = 0 [pid 349] close(3 [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p1" [pid 349] <... close resumed>) = 0 [pid 346] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 349] ioctl(4, LOOP_GET_STATUS64 [pid 346] symlink("/dev/loop3p1", "./file0" [pid 349] <... ioctl resumed>, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 349] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 346] <... symlink resumed>) = 0 [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 346] symlink("/dev/loop3p2", "./file1") = 0 [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 346] symlink("/dev/loop3p3", "./file2") = 0 [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 346] symlink("/dev/loop3p5", "./file3") = 0 [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 346] symlink("/dev/loop3p6", "./file4") = 0 [pid 346] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 346] close(4) = 0 [pid 346] close(3) = -1 EBADF (Bad file descriptor) [pid 346] close(4) = -1 EBADF (Bad file descriptor) [pid 346] close(5) = -1 EBADF (Bad file descriptor) [pid 346] close(6) = -1 EBADF (Bad file descriptor) [pid 346] close(7) = -1 EBADF (Bad file descriptor) [pid 346] close(8) = -1 EBADF (Bad file descriptor) [pid 346] close(9) = -1 EBADF (Bad file descriptor) [pid 346] close(10) = -1 EBADF (Bad file descriptor) [pid 346] close(11) = -1 EBADF (Bad file descriptor) [pid 346] close(12) = -1 EBADF (Bad file descriptor) [pid 346] close(13) = -1 EBADF (Bad file descriptor) [pid 346] close(14) = -1 EBADF (Bad file descriptor) [pid 346] close(15) = -1 EBADF (Bad file descriptor) [pid 346] close(16) = -1 EBADF (Bad file descriptor) [pid 346] close(17) = -1 EBADF (Bad file descriptor) [pid 346] close(18) = -1 EBADF (Bad file descriptor) [pid 346] close(19) = -1 EBADF (Bad file descriptor) [pid 346] close(20) = -1 EBADF (Bad file descriptor) [pid 346] close(21) = -1 EBADF (Bad file descriptor) [pid 346] close(22) = -1 EBADF (Bad file descriptor) [pid 346] close(23) = -1 EBADF (Bad file descriptor) [pid 346] close(24) = -1 EBADF (Bad file descriptor) [pid 346] close(25) = -1 EBADF (Bad file descriptor) [pid 346] close(26) = -1 EBADF (Bad file descriptor) [pid 346] close(27) = -1 EBADF (Bad file descriptor) [pid 346] close(28) = -1 EBADF (Bad file descriptor) [pid 346] close(29) = -1 EBADF (Bad file descriptor) [pid 346] exit_group(0) = ? [pid 346] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=7 /* 0.07 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/file4") = 0 [pid 316] umount2("./3/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/file3") = 0 [pid 316] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/file2") = 0 [pid 316] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/file1") = 0 [pid 316] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/file0") = 0 [pid 316] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/binderfs") = 0 [pid 316] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/cgroup.net") = 0 [pid 316] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] <... write resumed>) = 16777216 [pid 316] unlink("./3/cgroup.cpu") = 0 [pid 316] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./3/cgroup" [pid 350] munmap(0x7f96da85b000, 138412032 [pid 316] <... unlink resumed>) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./3") = 0 [pid 316] mkdir("./4", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 350] <... munmap resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 350] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 348] <... write resumed>) = 16777216 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 351 attached [pid 350] <... openat resumed>) = 4 [pid 348] munmap(0x7f96da85b000, 138412032 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 6 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] set_robust_list(0x55557fa896a0, 24 [pid 348] <... munmap resumed>) = 0 [pid 351] <... set_robust_list resumed>) = 0 [pid 350] ioctl(4, LOOP_SET_FD, 3 [pid 348] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 351] rt_sigprocmask(SIG_SETMASK, [] [pid 348] <... openat resumed>) = 4 [pid 351] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] <... ioctl resumed>) = 0 [pid 348] ioctl(4, LOOP_SET_FD, 3 [pid 347] <... ioctl resumed>) = 0 [pid 351] chdir("./4" [pid 350] close(3 [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p1" [pid 351] <... chdir resumed>) = 0 [pid 350] <... close resumed>) = 0 [pid 347] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 350] ioctl(4, LOOP_GET_STATUS64 [pid 347] symlink("/dev/loop0p1", "./file0" [pid 351] <... prctl resumed>) = 0 [pid 350] <... ioctl resumed>, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 347] <... symlink resumed>) = 0 [pid 351] setpgid(0, 0 [pid 350] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p2" [pid 351] <... setpgid resumed>) = 0 [pid 348] <... ioctl resumed>) = 0 [pid 347] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 351] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 348] close(3 [pid 347] symlink("/dev/loop0p2", "./file1" [pid 351] <... symlink resumed>) = 0 [pid 348] <... close resumed>) = 0 [pid 347] <... symlink resumed>) = 0 [pid 351] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 348] ioctl(4, LOOP_GET_STATUS64 [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p3" [pid 351] <... symlink resumed>) = 0 [pid 348] <... ioctl resumed>, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 347] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 351] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 348] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 347] symlink("/dev/loop0p3", "./file2" [pid 351] <... symlink resumed>) = 0 [pid 347] <... symlink resumed>) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p4" [pid 351] <... openat resumed>) = 3 [pid 347] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 351] write(3, "1000", 4 [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p5" [pid 351] <... write resumed>) = 4 [pid 347] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 351] close(3 [pid 347] symlink("/dev/loop0p5", "./file3" [pid 351] <... close resumed>) = 0 [pid 347] <... symlink resumed>) = 0 [pid 351] symlink("/dev/binderfs", "./binderfs" [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p6" [pid 351] <... symlink resumed>) = 0 [pid 347] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 351] write(1, "executing program\n", 18 executing program [pid 347] symlink("/dev/loop0p6", "./file4" [pid 351] <... write resumed>) = 18 [pid 347] <... symlink resumed>) = 0 [pid 351] memfd_create("syzkaller", 0 [pid 347] newfstatat(AT_FDCWD, "/dev/loop0p7" [pid 351] <... memfd_create resumed>) = 3 [pid 347] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 347] close(4 [pid 351] <... mmap resumed>) = 0x7f96da85b000 [pid 347] <... close resumed>) = 0 [pid 347] close(3) = -1 EBADF (Bad file descriptor) [pid 347] close(4) = -1 EBADF (Bad file descriptor) [pid 347] close(5) = -1 EBADF (Bad file descriptor) [pid 347] close(6) = -1 EBADF (Bad file descriptor) [pid 347] close(7) = -1 EBADF (Bad file descriptor) [pid 347] close(8) = -1 EBADF (Bad file descriptor) [pid 347] close(9) = -1 EBADF (Bad file descriptor) [pid 347] close(10) = -1 EBADF (Bad file descriptor) [pid 347] close(11) = -1 EBADF (Bad file descriptor) [pid 347] close(12) = -1 EBADF (Bad file descriptor) [pid 347] close(13) = -1 EBADF (Bad file descriptor) [pid 347] close(14) = -1 EBADF (Bad file descriptor) [pid 347] close(15) = -1 EBADF (Bad file descriptor) [pid 347] close(16) = -1 EBADF (Bad file descriptor) [pid 347] close(17) = -1 EBADF (Bad file descriptor) [pid 347] close(18) = -1 EBADF (Bad file descriptor) [pid 347] close(19) = -1 EBADF (Bad file descriptor) [pid 347] close(20) = -1 EBADF (Bad file descriptor) [pid 347] close(21) = -1 EBADF (Bad file descriptor) [pid 347] close(22) = -1 EBADF (Bad file descriptor) [pid 347] close(23) = -1 EBADF (Bad file descriptor) [pid 347] close(24) = -1 EBADF (Bad file descriptor) [pid 347] close(25) = -1 EBADF (Bad file descriptor) [pid 347] close(26) = -1 EBADF (Bad file descriptor) [pid 347] close(27) = -1 EBADF (Bad file descriptor) [pid 347] close(28) = -1 EBADF (Bad file descriptor) [pid 347] close(29) = -1 EBADF (Bad file descriptor) [pid 347] exit_group(0) = ? [pid 347] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [ 26.571538][ T347] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 312] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/file4") = 0 [pid 312] umount2("./3/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/file3") = 0 [pid 312] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/file2") = 0 [pid 312] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/file1") = 0 [pid 312] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/file0") = 0 [pid 312] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/binderfs") = 0 [pid 312] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/cgroup.net") = 0 [pid 312] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/cgroup.cpu") = 0 [pid 312] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./3/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./3") = 0 [pid 312] mkdir("./4", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x55557fa896a0, 24 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 6 [pid 352] <... set_robust_list resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 352] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 352] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 352] chdir("./4") = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 352] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 352] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 352] write(1, "executing program\n", 18) = 18 executing program [pid 352] memfd_create("syzkaller", 0) = 3 [pid 352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 26.612650][ T349] loop1: p1 p2 p3 < p5 p6 > p4 [ 26.637717][ T349] loop1: p2 size 16777216 extends beyond EOD, truncated [ 26.660360][ T349] loop1: p4 start 1426063360 is beyond EOD, truncated [ 26.669727][ T350] loop2: p1 p2 p3 < p5 p6 > p4 [ 26.674642][ T348] loop4: p1 p2 p3 < p5 p6 > p4 [ 26.680538][ T350] loop2: p2 size 16777216 extends beyond EOD, truncated [pid 349] <... ioctl resumed>) = 0 [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 349] symlink("/dev/loop1p1", "./file0") = 0 [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 349] symlink("/dev/loop1p2", "./file1") = 0 [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 349] symlink("/dev/loop1p3", "./file2") = 0 [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 349] symlink("/dev/loop1p5", "./file3") = 0 [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 349] symlink("/dev/loop1p6", "./file4") = 0 [pid 349] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 349] close(4) = 0 [pid 349] close(3) = -1 EBADF (Bad file descriptor) [pid 349] close(4) = -1 EBADF (Bad file descriptor) [pid 349] close(5) = -1 EBADF (Bad file descriptor) [pid 349] close(6) = -1 EBADF (Bad file descriptor) [pid 349] close(7) = -1 EBADF (Bad file descriptor) [pid 349] close(8) = -1 EBADF (Bad file descriptor) [pid 349] close(9) = -1 EBADF (Bad file descriptor) [pid 349] close(10) = -1 EBADF (Bad file descriptor) [pid 349] close(11) = -1 EBADF (Bad file descriptor) [pid 349] close(12) = -1 EBADF (Bad file descriptor) [pid 349] close(13) = -1 EBADF (Bad file descriptor) [pid 349] close(14) = -1 EBADF (Bad file descriptor) [pid 349] close(15) = -1 EBADF (Bad file descriptor) [pid 349] close(16) = -1 EBADF (Bad file descriptor) [pid 349] close(17) = -1 EBADF (Bad file descriptor) [pid 349] close(18) = -1 EBADF (Bad file descriptor) [pid 349] close(19) = -1 EBADF (Bad file descriptor) [pid 349] close(20) = -1 EBADF (Bad file descriptor) [pid 349] close(21) = -1 EBADF (Bad file descriptor) [pid 349] close(22) = -1 EBADF (Bad file descriptor) [pid 349] close(23) = -1 EBADF (Bad file descriptor) [pid 349] close(24) = -1 EBADF (Bad file descriptor) [pid 349] close(25) = -1 EBADF (Bad file descriptor) [pid 349] close(26) = -1 EBADF (Bad file descriptor) [pid 349] close(27) = -1 EBADF (Bad file descriptor) [pid 349] close(28) = -1 EBADF (Bad file descriptor) [pid 351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 349] close(29) = -1 EBADF (Bad file descriptor) [pid 349] exit_group(0) = ? [pid 349] +++ exited with 0 +++ [ 26.687816][ T348] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=7 /* 0.07 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 314] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/file4") = 0 [pid 314] umount2("./3/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/file3") = 0 [pid 314] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/file2") = 0 [pid 314] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/file1") = 0 [pid 314] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/file0") = 0 [pid 314] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/binderfs") = 0 [pid 314] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/cgroup.net") = 0 [pid 314] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/cgroup.cpu") = 0 [pid 314] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./3/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./3") = 0 [pid 314] mkdir("./4", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 314] ioctl(3, LOOP_CLR_FD) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 6 ci2-android-6-1/strace-static-x86_64: Process 353 attached [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 353] set_robust_list(0x55557fa896a0, 24 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 353] <... set_robust_list resumed>) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] chdir("./4") = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 353] setpgid(0, 0) = 0 [pid 353] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 353] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 353] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 353] close(3) = 0 [pid 353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 353] write(1, "executing program\n", 18) = 18 executing program [pid 353] memfd_create("syzkaller", 0) = 3 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 350] <... ioctl resumed>) = 0 [ 26.729059][ T350] loop2: p4 start 1426063360 is beyond EOD, truncated [ 26.737527][ T348] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 350] symlink("/dev/loop2p1", "./file0") = 0 [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 350] symlink("/dev/loop2p2", "./file1") = 0 [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 350] symlink("/dev/loop2p3", "./file2") = 0 [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 350] symlink("/dev/loop2p5", "./file3") = 0 [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 350] symlink("/dev/loop2p6", "./file4") = 0 [pid 350] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 350] close(4) = 0 [pid 350] close(3) = -1 EBADF (Bad file descriptor) [pid 350] close(4) = -1 EBADF (Bad file descriptor) [pid 350] close(5) = -1 EBADF (Bad file descriptor) [pid 350] close(6) = -1 EBADF (Bad file descriptor) [pid 350] close(7) = -1 EBADF (Bad file descriptor) [pid 350] close(8) = -1 EBADF (Bad file descriptor) [pid 350] close(9) = -1 EBADF (Bad file descriptor) [pid 350] close(10) = -1 EBADF (Bad file descriptor) [pid 350] close(11) = -1 EBADF (Bad file descriptor) [pid 350] close(12) = -1 EBADF (Bad file descriptor) [pid 350] close(13) = -1 EBADF (Bad file descriptor) [pid 350] close(14) = -1 EBADF (Bad file descriptor) [pid 350] close(15) = -1 EBADF (Bad file descriptor) [pid 350] close(16) = -1 EBADF (Bad file descriptor) [pid 350] close(17) = -1 EBADF (Bad file descriptor) [pid 350] close(18) = -1 EBADF (Bad file descriptor) [pid 350] close(19) = -1 EBADF (Bad file descriptor) [pid 350] close(20) = -1 EBADF (Bad file descriptor) [pid 350] close(21) = -1 EBADF (Bad file descriptor) [pid 350] close(22) = -1 EBADF (Bad file descriptor) [pid 350] close(23) = -1 EBADF (Bad file descriptor) [pid 350] close(24) = -1 EBADF (Bad file descriptor) [pid 350] close(25) = -1 EBADF (Bad file descriptor) [pid 350] close(26) = -1 EBADF (Bad file descriptor) [pid 350] close(27) = -1 EBADF (Bad file descriptor) [pid 350] close(28) = -1 EBADF (Bad file descriptor) [pid 350] close(29) = -1 EBADF (Bad file descriptor) [pid 350] exit_group(0 [pid 348] <... ioctl resumed>) = 0 [pid 350] <... exit_group resumed>) = ? [pid 350] +++ exited with 0 +++ [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 348] symlink("/dev/loop4p1", "./file0") = 0 [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 348] symlink("/dev/loop4p2", "./file1") = 0 [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 348] symlink("/dev/loop4p3", "./file2" [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- [pid 348] <... symlink resumed>) = 0 [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 348] symlink("/dev/loop4p5", "./file3") = 0 [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 348] symlink("/dev/loop4p6", "./file4") = 0 [pid 348] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 348] close(4) = 0 [pid 348] close(3) = -1 EBADF (Bad file descriptor) [pid 348] close(4) = -1 EBADF (Bad file descriptor) [pid 348] close(5) = -1 EBADF (Bad file descriptor) [pid 348] close(6) = -1 EBADF (Bad file descriptor) [pid 348] close(7) = -1 EBADF (Bad file descriptor) [pid 348] close(8) = -1 EBADF (Bad file descriptor) [pid 348] close(9) = -1 EBADF (Bad file descriptor) [pid 348] close(10) = -1 EBADF (Bad file descriptor) [pid 348] close(11) = -1 EBADF (Bad file descriptor) [pid 348] close(12) = -1 EBADF (Bad file descriptor) [pid 348] close(13) = -1 EBADF (Bad file descriptor) [pid 348] close(14) = -1 EBADF (Bad file descriptor) [pid 348] close(15) = -1 EBADF (Bad file descriptor) [pid 348] close(16) = -1 EBADF (Bad file descriptor) [pid 348] close(17) = -1 EBADF (Bad file descriptor) [pid 348] close(18) = -1 EBADF (Bad file descriptor) [pid 348] close(19) = -1 EBADF (Bad file descriptor) [pid 348] close(20) = -1 EBADF (Bad file descriptor) [pid 348] close(21) = -1 EBADF (Bad file descriptor) [pid 348] close(22) = -1 EBADF (Bad file descriptor) [pid 348] close(23) = -1 EBADF (Bad file descriptor) [pid 348] close(24) = -1 EBADF (Bad file descriptor) [pid 348] close(25) = -1 EBADF (Bad file descriptor) [pid 348] close(26) = -1 EBADF (Bad file descriptor) [pid 348] close(27) = -1 EBADF (Bad file descriptor) [pid 348] close(28) = -1 EBADF (Bad file descriptor) [pid 348] close(29) = -1 EBADF (Bad file descriptor) [pid 348] exit_group(0) = ? [pid 348] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [ 26.798922][ T103] loop2: p1 p2 p3 < p5 p6 > p4 [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 317] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 317] <... openat resumed>) = 3 [pid 317] fstat(3 [pid 315] <... openat resumed>) = 3 [pid 317] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] fstat(3 [pid 317] getdents64(3 [pid 315] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] getdents64(3 [pid 317] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./3/file4" [pid 315] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] unlink("./3/file4" [pid 315] newfstatat(AT_FDCWD, "./3/file4" [pid 317] <... unlink resumed>) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] umount2("./3/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] unlink("./3/file4" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./3/file3" [pid 315] <... unlink resumed>) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] umount2("./3/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] unlink("./3/file3" [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] <... unlink resumed>) = 0 [pid 315] newfstatat(AT_FDCWD, "./3/file3" [pid 317] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] unlink("./3/file3" [pid 317] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] unlink("./3/file2" [pid 315] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] newfstatat(AT_FDCWD, "./3/file2" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./3/file1" [pid 315] unlink("./3/file2" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] unlink("./3/file1" [pid 315] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] newfstatat(AT_FDCWD, "./3/file1" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./3/file0" [pid 315] unlink("./3/file1" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] unlink("./3/file0" [pid 315] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] newfstatat(AT_FDCWD, "./3/file0" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./3/binderfs" [pid 315] unlink("./3/file0" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] unlink("./3/binderfs" [pid 315] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] newfstatat(AT_FDCWD, "./3/binderfs" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./3/cgroup.net" [pid 315] unlink("./3/binderfs" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] unlink("./3/cgroup.net" [pid 315] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] newfstatat(AT_FDCWD, "./3/cgroup.net" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./3/cgroup.cpu" [pid 315] unlink("./3/cgroup.net" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] unlink("./3/cgroup.cpu" [pid 315] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... unlink resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] newfstatat(AT_FDCWD, "./3/cgroup.cpu" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] newfstatat(AT_FDCWD, "./3/cgroup" [pid 315] unlink("./3/cgroup.cpu" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./3/cgroup" [pid 315] <... unlink resumed>) = 0 [pid 317] <... unlink resumed>) = 0 [pid 315] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] getdents64(3 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] newfstatat(AT_FDCWD, "./3/cgroup" [pid 317] close(3) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] rmdir("./3" [pid 315] unlink("./3/cgroup" [pid 317] <... rmdir resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] mkdir("./4", 0777 [pid 315] getdents64(3 [pid 317] <... mkdir resumed>) = 0 [pid 315] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 315] close(3 [pid 317] <... openat resumed>) = 3 [pid 315] <... close resumed>) = 0 [pid 317] ioctl(3, LOOP_CLR_FD [pid 315] rmdir("./3") = 0 [pid 315] mkdir("./4", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 315] <... openat resumed>) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x55557fa896a0, 24 [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 6 [pid 354] <... set_robust_list resumed>) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 354] chdir("./4") = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 354] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 354] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 [pid 354] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] memfd_create("syzkaller", 0) = 3 [pid 354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 26.821918][ T103] loop2: p2 size 16777216 extends beyond EOD, truncated [ 26.852574][ T103] loop2: p4 start 1426063360 is beyond EOD, truncated [ 26.924417][ T324] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [pid 353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 352] <... write resumed>) = 16777216 [pid 351] <... write resumed>) = 16777216 [pid 351] munmap(0x7f96da85b000, 138412032) = 0 [pid 351] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 351] close(3) = 0 [pid 351] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 351] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 352] munmap(0x7f96da85b000, 138412032) = 0 [pid 317] <... ioctl resumed>) = 0 [pid 352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 352] close(3) = 0 [pid 352] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 352] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 6 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x55557fa896a0, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] chdir("./4") = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 355] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 355] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 355] write(1, "executing program\n", 18) = 18 [pid 355] memfd_create("syzkaller", 0) = 3 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 351] <... ioctl resumed>) = 0 [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 351] symlink("/dev/loop3p1", "./file0") = 0 [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 351] symlink("/dev/loop3p2", "./file1") = 0 [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 351] symlink("/dev/loop3p3", "./file2") = 0 [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 351] symlink("/dev/loop3p5", "./file3") = 0 [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 351] symlink("/dev/loop3p6", "./file4") = 0 [pid 351] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 351] close(4) = 0 [pid 351] close(3) = -1 EBADF (Bad file descriptor) [pid 351] close(4) = -1 EBADF (Bad file descriptor) [pid 351] close(5) = -1 EBADF (Bad file descriptor) [pid 351] close(6) = -1 EBADF (Bad file descriptor) [pid 351] close(7) = -1 EBADF (Bad file descriptor) [pid 351] close(8) = -1 EBADF (Bad file descriptor) [pid 351] close(9) = -1 EBADF (Bad file descriptor) [pid 351] close(10) = -1 EBADF (Bad file descriptor) [pid 351] close(11) = -1 EBADF (Bad file descriptor) [pid 351] close(12) = -1 EBADF (Bad file descriptor) [pid 351] close(13) = -1 EBADF (Bad file descriptor) [pid 351] close(14) = -1 EBADF (Bad file descriptor) [pid 351] close(15) = -1 EBADF (Bad file descriptor) [pid 351] close(16) = -1 EBADF (Bad file descriptor) [pid 351] close(17) = -1 EBADF (Bad file descriptor) [pid 351] close(18) = -1 EBADF (Bad file descriptor) [pid 351] close(19) = -1 EBADF (Bad file descriptor) [pid 351] close(20) = -1 EBADF (Bad file descriptor) [pid 351] close(21) = -1 EBADF (Bad file descriptor) [pid 351] close(22) = -1 EBADF (Bad file descriptor) [pid 351] close(23) = -1 EBADF (Bad file descriptor) [pid 351] close(24) = -1 EBADF (Bad file descriptor) [pid 351] close(25) = -1 EBADF (Bad file descriptor) [pid 351] close(26) = -1 EBADF (Bad file descriptor) [pid 351] close(27) = -1 EBADF (Bad file descriptor) [pid 351] close(28) = -1 EBADF (Bad file descriptor) [pid 351] close(29) = -1 EBADF (Bad file descriptor) [pid 351] exit_group(0) = ? [pid 351] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- [ 27.033396][ T351] loop3: p1 p2 p3 < p5 p6 > p4 [ 27.043769][ T351] loop3: p2 size 16777216 extends beyond EOD, truncated [ 27.070635][ T351] loop3: p4 start 1426063360 is beyond EOD, truncated [ 27.074072][ T352] loop0: p1 p2 p3 < p5 p6 > p4 [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/file4") = 0 [pid 316] umount2("./4/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/file3") = 0 [pid 316] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/file2") = 0 [pid 316] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/file1") = 0 [pid 316] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/file0") = 0 [pid 316] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/binderfs") = 0 [pid 316] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/cgroup.net") = 0 [pid 316] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/cgroup.cpu") = 0 [pid 316] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./4/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./4") = 0 [pid 316] mkdir("./5", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x55557fa896a0, 24 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 7 [pid 356] <... set_robust_list resumed>) = 0 [pid 356] rt_sigprocmask(SIG_SETMASK, [] [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 356] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 356] chdir("./5") = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 356] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 356] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 356] write(1, "executing program\n", 18) = 18 [pid 356] memfd_create("syzkaller", 0) = 3 executing program [pid 356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 27.107637][ T352] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 353] <... write resumed>) = 16777216 [pid 353] munmap(0x7f96da85b000, 138412032 [pid 352] <... ioctl resumed>) = 0 [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 352] symlink("/dev/loop0p1", "./file0") = 0 [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 352] symlink("/dev/loop0p2", "./file1") = 0 [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 352] symlink("/dev/loop0p3", "./file2") = 0 [pid 353] <... munmap resumed>) = 0 [pid 353] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 353] close(3) = 0 [pid 353] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 352] symlink("/dev/loop0p5", "./file3") = 0 [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 352] symlink("/dev/loop0p6", "./file4") = 0 [pid 352] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 352] close(4) = 0 [pid 352] close(3) = -1 EBADF (Bad file descriptor) [pid 352] close(4) = -1 EBADF (Bad file descriptor) [pid 352] close(5) = -1 EBADF (Bad file descriptor) [pid 352] close(6) = -1 EBADF (Bad file descriptor) [pid 352] close(7) = -1 EBADF (Bad file descriptor) [pid 352] close(8) = -1 EBADF (Bad file descriptor) [pid 352] close(9) = -1 EBADF (Bad file descriptor) [pid 352] close(10) = -1 EBADF (Bad file descriptor) [pid 352] close(11) = -1 EBADF (Bad file descriptor) [pid 352] close(12) = -1 EBADF (Bad file descriptor) [pid 352] close(13) = -1 EBADF (Bad file descriptor) [pid 352] close(14) = -1 EBADF (Bad file descriptor) [pid 352] close(15) = -1 EBADF (Bad file descriptor) [pid 352] close(16) = -1 EBADF (Bad file descriptor) [pid 352] close(17) = -1 EBADF (Bad file descriptor) [pid 352] close(18) = -1 EBADF (Bad file descriptor) [pid 352] close(19) = -1 EBADF (Bad file descriptor) [pid 352] close(20) = -1 EBADF (Bad file descriptor) [pid 352] close(21) = -1 EBADF (Bad file descriptor) [pid 352] close(22) = -1 EBADF (Bad file descriptor) [pid 352] close(23) = -1 EBADF (Bad file descriptor) [pid 352] close(24) = -1 EBADF (Bad file descriptor) [pid 352] close(25) = -1 EBADF (Bad file descriptor) [pid 352] close(26) = -1 EBADF (Bad file descriptor) [pid 352] close(27) = -1 EBADF (Bad file descriptor) [pid 352] close(28) = -1 EBADF (Bad file descriptor) [pid 352] close(29) = -1 EBADF (Bad file descriptor) [pid 352] exit_group(0) = ? [pid 353] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 352] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 312] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/file4") = 0 [pid 312] umount2("./4/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/file3") = 0 [pid 312] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/file2") = 0 [pid 312] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/file1") = 0 [pid 312] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/file0") = 0 [pid 312] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/binderfs") = 0 [pid 312] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/cgroup.net") = 0 [pid 312] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/cgroup.cpu") = 0 [pid 312] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./4/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./4") = 0 [pid 312] mkdir("./5", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [ 27.158156][ T352] loop0: p4 start 1426063360 is beyond EOD, truncated [ 27.215765][ T353] loop1: p1 p2 p3 < p5 p6 > p4 [ 27.228705][ T353] loop1: p2 size 16777216 extends beyond EOD, truncated [pid 312] ioctl(3, LOOP_CLR_FD [pid 353] <... ioctl resumed>) = 0 [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 353] symlink("/dev/loop1p1", "./file0" [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 353] <... symlink resumed>) = 0 [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 353] symlink("/dev/loop1p2", "./file1") = 0 [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 353] symlink("/dev/loop1p3", "./file2") = 0 [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 353] symlink("/dev/loop1p5", "./file3") = 0 [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 353] symlink("/dev/loop1p6", "./file4") = 0 [pid 353] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 353] close(4) = 0 [pid 353] close(3) = -1 EBADF (Bad file descriptor) [pid 353] close(4) = -1 EBADF (Bad file descriptor) [pid 353] close(5) = -1 EBADF (Bad file descriptor) [pid 353] close(6) = -1 EBADF (Bad file descriptor) [pid 353] close(7) = -1 EBADF (Bad file descriptor) [pid 353] close(8) = -1 EBADF (Bad file descriptor) [pid 353] close(9) = -1 EBADF (Bad file descriptor) [pid 353] close(10) = -1 EBADF (Bad file descriptor) [pid 353] close(11) = -1 EBADF (Bad file descriptor) [pid 353] close(12) = -1 EBADF (Bad file descriptor) [pid 353] close(13) = -1 EBADF (Bad file descriptor) [pid 353] close(14) = -1 EBADF (Bad file descriptor) [pid 353] close(15) = -1 EBADF (Bad file descriptor) [pid 353] close(16) = -1 EBADF (Bad file descriptor) [pid 353] close(17) = -1 EBADF (Bad file descriptor) [pid 353] close(18) = -1 EBADF (Bad file descriptor) [pid 353] close(19) = -1 EBADF (Bad file descriptor) [pid 353] close(20) = -1 EBADF (Bad file descriptor) [pid 353] close(21) = -1 EBADF (Bad file descriptor) [pid 353] close(22) = -1 EBADF (Bad file descriptor) [pid 353] close(23) = -1 EBADF (Bad file descriptor) [pid 353] close(24) = -1 EBADF (Bad file descriptor) [pid 353] close(25) = -1 EBADF (Bad file descriptor) [pid 353] close(26) = -1 EBADF (Bad file descriptor) [pid 353] close(27) = -1 EBADF (Bad file descriptor) [pid 353] close(28) = -1 EBADF (Bad file descriptor) [pid 353] close(29) = -1 EBADF (Bad file descriptor) [pid 353] exit_group(0) = ? [pid 353] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=8 /* 0.08 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 354] <... write resumed>) = 16777216 [pid 354] munmap(0x7f96da85b000, 138412032 [pid 314] <... restart_syscall resumed>) = 0 [pid 314] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/file4") = 0 [pid 314] umount2("./4/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/file3") = 0 [pid 314] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 354] <... munmap resumed>) = 0 [pid 314] unlink("./4/file2" [pid 354] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 314] <... unlink resumed>) = 0 [pid 314] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 354] <... openat resumed>) = 4 [pid 314] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 354] ioctl(4, LOOP_SET_FD, 3 [pid 314] unlink("./4/file1") = 0 [pid 314] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 354] <... ioctl resumed>) = 0 [pid 314] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/file0") = 0 [pid 314] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/binderfs") = 0 [pid 314] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/cgroup.net") = 0 [pid 314] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/cgroup.cpu") = 0 [pid 314] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./4/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./4") = 0 [pid 314] mkdir("./5", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 314] ioctl(3, LOOP_CLR_FD) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 27.257585][ T353] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x55557fa896a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 7 [pid 357] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 357] chdir("./5" [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 357] <... chdir resumed>) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 357] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 357] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 354] close(3 [pid 357] <... symlink resumed>) = 0 [pid 354] <... close resumed>) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 354] ioctl(4, LOOP_GET_STATUS64 [pid 357] <... openat resumed>) = 3 [pid 354] <... ioctl resumed>, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 357] write(3, "1000", 4 [pid 354] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 357] <... write resumed>) = 4 [pid 357] close(3) = 0 [pid 357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 357] write(1, "executing program\n", 18) = 18 [pid 357] memfd_create("syzkaller", 0) = 3 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 executing program [pid 312] <... ioctl resumed>) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x55557fa896a0, 24 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 7 [pid 358] <... set_robust_list resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 358] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 358] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 358] chdir("./5") = 0 [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 358] setpgid(0, 0) = 0 [pid 358] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 358] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 358] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 358] write(3, "1000", 4) = 4 [pid 358] close(3) = 0 [pid 358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 358] write(1, "executing program\n", 18) = 18 executing program [pid 358] memfd_create("syzkaller", 0) = 3 [pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 27.336923][ T354] loop2: p1 p2 p3 < p5 p6 > p4 [pid 356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 354] <... ioctl resumed>) = 0 [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 354] symlink("/dev/loop2p1", "./file0") = 0 [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 354] symlink("/dev/loop2p2", "./file1") = 0 [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 354] symlink("/dev/loop2p3", "./file2") = 0 [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 354] symlink("/dev/loop2p5", "./file3") = 0 [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 354] symlink("/dev/loop2p6", "./file4") = 0 [pid 354] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 354] close(4) = 0 [pid 354] close(3) = -1 EBADF (Bad file descriptor) [pid 354] close(4) = -1 EBADF (Bad file descriptor) [pid 354] close(5) = -1 EBADF (Bad file descriptor) [pid 354] close(6) = -1 EBADF (Bad file descriptor) [pid 354] close(7) = -1 EBADF (Bad file descriptor) [pid 354] close(8) = -1 EBADF (Bad file descriptor) [pid 354] close(9) = -1 EBADF (Bad file descriptor) [pid 354] close(10) = -1 EBADF (Bad file descriptor) [pid 354] close(11) = -1 EBADF (Bad file descriptor) [pid 354] close(12) = -1 EBADF (Bad file descriptor) [pid 354] close(13) = -1 EBADF (Bad file descriptor) [pid 354] close(14) = -1 EBADF (Bad file descriptor) [pid 354] close(15) = -1 EBADF (Bad file descriptor) [pid 354] close(16) = -1 EBADF (Bad file descriptor) [pid 354] close(17) = -1 EBADF (Bad file descriptor) [pid 354] close(18) = -1 EBADF (Bad file descriptor) [pid 354] close(19) = -1 EBADF (Bad file descriptor) [pid 354] close(20) = -1 EBADF (Bad file descriptor) [pid 354] close(21) = -1 EBADF (Bad file descriptor) [pid 354] close(22) = -1 EBADF (Bad file descriptor) [pid 354] close(23) = -1 EBADF (Bad file descriptor) [pid 354] close(24) = -1 EBADF (Bad file descriptor) [pid 354] close(25) = -1 EBADF (Bad file descriptor) [pid 354] close(26) = -1 EBADF (Bad file descriptor) [pid 354] close(27) = -1 EBADF (Bad file descriptor) [pid 354] close(28) = -1 EBADF (Bad file descriptor) [pid 354] close(29) = -1 EBADF (Bad file descriptor) [pid 354] exit_group(0) = ? [pid 354] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/file4") = 0 [pid 315] umount2("./4/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/file3") = 0 [pid 315] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/file2") = 0 [pid 315] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/file1") = 0 [pid 315] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/file0") = 0 [pid 315] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/binderfs") = 0 [pid 315] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/cgroup.net") = 0 [pid 315] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/cgroup.cpu") = 0 [pid 315] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./4/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./4") = 0 [pid 315] mkdir("./5", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x55557fa896a0, 24 [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 7 [pid 359] <... set_robust_list resumed>) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 359] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 359] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 359] chdir("./5") = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 359] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 359] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 355] <... write resumed>) = 16777216 [pid 359] <... symlink resumed>) = 0 [pid 355] munmap(0x7f96da85b000, 138412032 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 355] <... munmap resumed>) = 0 [pid 359] write(1, "executing program\n", 18) = 18 [pid 359] memfd_create("syzkaller", 0 executing program [pid 355] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 359] <... memfd_create resumed>) = 3 [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 355] <... openat resumed>) = 4 [pid 359] <... mmap resumed>) = 0x7f96da85b000 [ 27.362353][ T354] loop2: p2 size 16777216 extends beyond EOD, truncated [ 27.390229][ T354] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 355] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 355] close(3) = 0 [pid 355] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 355] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 356] <... write resumed>) = 16777216 [pid 356] munmap(0x7f96da85b000, 138412032) = 0 [pid 356] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 356] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 356] close(3) = 0 [pid 356] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [ 27.493602][ T355] loop4: p1 p2 p3 < p5 p6 > p4 [ 27.506248][ T355] loop4: p2 size 16777216 extends beyond EOD, truncated [ 27.533075][ T355] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 356] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 355] <... ioctl resumed>) = 0 [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 355] symlink("/dev/loop4p1", "./file0") = 0 [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 355] symlink("/dev/loop4p2", "./file1") = 0 [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 355] symlink("/dev/loop4p3", "./file2") = 0 [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 355] symlink("/dev/loop4p5", "./file3") = 0 [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 355] symlink("/dev/loop4p6", "./file4") = 0 [pid 355] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 355] close(4) = 0 [pid 355] close(3) = -1 EBADF (Bad file descriptor) [pid 355] close(4) = -1 EBADF (Bad file descriptor) [pid 355] close(5) = -1 EBADF (Bad file descriptor) [pid 355] close(6) = -1 EBADF (Bad file descriptor) [pid 355] close(7) = -1 EBADF (Bad file descriptor) [pid 355] close(8) = -1 EBADF (Bad file descriptor) [pid 355] close(9) = -1 EBADF (Bad file descriptor) [pid 355] close(10) = -1 EBADF (Bad file descriptor) [pid 355] close(11) = -1 EBADF (Bad file descriptor) [pid 355] close(12) = -1 EBADF (Bad file descriptor) [pid 355] close(13) = -1 EBADF (Bad file descriptor) [pid 355] close(14) = -1 EBADF (Bad file descriptor) [pid 355] close(15) = -1 EBADF (Bad file descriptor) [pid 355] close(16) = -1 EBADF (Bad file descriptor) [pid 355] close(17) = -1 EBADF (Bad file descriptor) [pid 355] close(18) = -1 EBADF (Bad file descriptor) [pid 355] close(19) = -1 EBADF (Bad file descriptor) [pid 355] close(20) = -1 EBADF (Bad file descriptor) [pid 355] close(21) = -1 EBADF (Bad file descriptor) [pid 355] close(22) = -1 EBADF (Bad file descriptor) [pid 355] close(23) = -1 EBADF (Bad file descriptor) [pid 355] close(24) = -1 EBADF (Bad file descriptor) [pid 355] close(25) = -1 EBADF (Bad file descriptor) [pid 355] close(26) = -1 EBADF (Bad file descriptor) [pid 355] close(27) = -1 EBADF (Bad file descriptor) [pid 355] close(28) = -1 EBADF (Bad file descriptor) [pid 355] close(29) = -1 EBADF (Bad file descriptor) [pid 355] exit_group(0) = ? [pid 355] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=7 /* 0.07 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 317] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 27.559874][ T356] loop3: p1 p2 p3 < p5 p6 > p4 [ 27.565461][ T356] loop3: p2 size 16777216 extends beyond EOD, truncated [pid 317] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/file4") = 0 [pid 317] umount2("./4/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/file3") = 0 [pid 317] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/file2") = 0 [pid 317] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/file1") = 0 [pid 317] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/file0") = 0 [pid 317] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/binderfs") = 0 [pid 317] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/cgroup.net") = 0 [pid 317] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/cgroup.cpu") = 0 [pid 317] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./4/cgroup") = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 317] rmdir("./4") = 0 [pid 317] mkdir("./5", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 7 ci2-android-6-1/strace-static-x86_64: Process 360 attached [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 360] set_robust_list(0x55557fa896a0, 24 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 360] <... set_robust_list resumed>) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] chdir("./5") = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 360] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 360] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] <... ioctl resumed>) = 0 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 360] write(1, "executing program\n", 18 [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p1" [pid 360] <... write resumed>) = 18 executing program [pid 360] memfd_create("syzkaller", 0) = 3 [pid 360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 357] <... write resumed>) = 16777216 [pid 356] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 356] symlink("/dev/loop3p1", "./file0") = 0 [pid 357] munmap(0x7f96da85b000, 138412032 [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 356] symlink("/dev/loop3p2", "./file1") = 0 [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [ 27.601576][ T356] loop3: p4 start 1426063360 is beyond EOD, truncated [pid 356] symlink("/dev/loop3p3", "./file2") = 0 [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p5" [pid 357] <... munmap resumed>) = 0 [pid 356] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 356] symlink("/dev/loop3p5", "./file3") = 0 [pid 357] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p6" [pid 357] <... openat resumed>) = 4 [pid 356] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 356] symlink("/dev/loop3p6", "./file4" [pid 357] ioctl(4, LOOP_SET_FD, 3 [pid 356] <... symlink resumed>) = 0 [pid 357] <... ioctl resumed>) = 0 [pid 356] newfstatat(AT_FDCWD, "/dev/loop3p7" [pid 357] close(3 [pid 356] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 357] <... close resumed>) = 0 [pid 356] close(4 [pid 357] ioctl(4, LOOP_GET_STATUS64 [pid 356] <... close resumed>) = 0 [pid 357] <... ioctl resumed>, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 356] close(3 [pid 357] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 356] close(4) = -1 EBADF (Bad file descriptor) [pid 356] close(5) = -1 EBADF (Bad file descriptor) [pid 356] close(6) = -1 EBADF (Bad file descriptor) [pid 356] close(7) = -1 EBADF (Bad file descriptor) [pid 356] close(8) = -1 EBADF (Bad file descriptor) [pid 356] close(9) = -1 EBADF (Bad file descriptor) [pid 356] close(10) = -1 EBADF (Bad file descriptor) [pid 356] close(11) = -1 EBADF (Bad file descriptor) [pid 359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 356] close(12) = -1 EBADF (Bad file descriptor) [pid 356] close(13) = -1 EBADF (Bad file descriptor) [pid 356] close(14) = -1 EBADF (Bad file descriptor) [pid 356] close(15) = -1 EBADF (Bad file descriptor) [pid 356] close(16) = -1 EBADF (Bad file descriptor) [pid 356] close(17) = -1 EBADF (Bad file descriptor) [pid 356] close(18) = -1 EBADF (Bad file descriptor) [pid 356] close(19) = -1 EBADF (Bad file descriptor) [pid 356] close(20) = -1 EBADF (Bad file descriptor) [pid 356] close(21) = -1 EBADF (Bad file descriptor) [pid 356] close(22) = -1 EBADF (Bad file descriptor) [pid 356] close(23) = -1 EBADF (Bad file descriptor) [pid 356] close(24) = -1 EBADF (Bad file descriptor) [pid 356] close(25) = -1 EBADF (Bad file descriptor) [pid 356] close(26) = -1 EBADF (Bad file descriptor) [pid 356] close(27) = -1 EBADF (Bad file descriptor) [pid 356] close(28) = -1 EBADF (Bad file descriptor) [pid 356] close(29) = -1 EBADF (Bad file descriptor) [pid 356] exit_group(0) = ? [pid 356] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/file4") = 0 [pid 316] umount2("./5/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/file3") = 0 [pid 316] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/file2") = 0 [pid 316] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/file1") = 0 [pid 316] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/file0") = 0 [pid 316] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/binderfs") = 0 [pid 316] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/cgroup.net") = 0 [pid 316] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/cgroup.cpu") = 0 [pid 316] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./5/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./5") = 0 [pid 316] mkdir("./6", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 8 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x55557fa896a0, 24) = 0 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] chdir("./6") = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 361] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 361] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 361] write(1, "executing program\n", 18) = 18 [pid 361] memfd_create("syzkaller", 0) = 3 [pid 361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 358] <... write resumed>) = 16777216 [ 27.704909][ T357] loop1: p1 p2 p3 < p5 p6 > p4 [ 27.711771][ T357] loop1: p2 size 16777216 extends beyond EOD, truncated [pid 358] munmap(0x7f96da85b000, 138412032) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 358] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 358] close(3) = 0 [pid 358] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 358] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 357] <... ioctl resumed>) = 0 [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 357] symlink("/dev/loop1p1", "./file0") = 0 [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 357] symlink("/dev/loop1p2", "./file1") = 0 [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 357] symlink("/dev/loop1p3", "./file2") = 0 [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 357] symlink("/dev/loop1p5", "./file3") = 0 [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 357] symlink("/dev/loop1p6", "./file4") = 0 [pid 357] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 357] close(4) = 0 [pid 357] close(3) = -1 EBADF (Bad file descriptor) [pid 357] close(4) = -1 EBADF (Bad file descriptor) [pid 357] close(5) = -1 EBADF (Bad file descriptor) [pid 357] close(6) = -1 EBADF (Bad file descriptor) [pid 357] close(7) = -1 EBADF (Bad file descriptor) [ 27.755088][ T357] loop1: p4 start 1426063360 is beyond EOD, truncated [ 27.793302][ T358] loop0: p1 p2 p3 < p5 p6 > p4 [pid 357] close(8) = -1 EBADF (Bad file descriptor) [pid 357] close(9) = -1 EBADF (Bad file descriptor) [pid 357] close(10) = -1 EBADF (Bad file descriptor) [pid 357] close(11) = -1 EBADF (Bad file descriptor) [pid 357] close(12) = -1 EBADF (Bad file descriptor) [pid 357] close(13) = -1 EBADF (Bad file descriptor) [pid 357] close(14) = -1 EBADF (Bad file descriptor) [pid 357] close(15) = -1 EBADF (Bad file descriptor) [pid 357] close(16) = -1 EBADF (Bad file descriptor) [pid 357] close(17) = -1 EBADF (Bad file descriptor) [pid 357] close(18) = -1 EBADF (Bad file descriptor) [pid 357] close(19) = -1 EBADF (Bad file descriptor) [pid 357] close(20) = -1 EBADF (Bad file descriptor) [pid 357] close(21) = -1 EBADF (Bad file descriptor) [pid 357] close(22) = -1 EBADF (Bad file descriptor) [pid 357] close(23) = -1 EBADF (Bad file descriptor) [pid 357] close(24) = -1 EBADF (Bad file descriptor) [pid 357] close(25) = -1 EBADF (Bad file descriptor) [pid 357] close(26) = -1 EBADF (Bad file descriptor) [pid 357] close(27) = -1 EBADF (Bad file descriptor) [pid 357] close(28) = -1 EBADF (Bad file descriptor) [pid 357] close(29) = -1 EBADF (Bad file descriptor) [pid 357] exit_group(0) = ? [pid 357] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=9 /* 0.09 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 314] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/file4") = 0 [pid 314] umount2("./5/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/file3") = 0 [pid 314] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/file2") = 0 [pid 314] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/file1") = 0 [pid 314] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/file0") = 0 [pid 314] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/binderfs") = 0 [pid 314] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/cgroup.net") = 0 [pid 314] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/cgroup.cpu") = 0 [pid 314] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./5/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./5") = 0 [pid 314] mkdir("./6", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 314] ioctl(3, LOOP_CLR_FD) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 362 attached , child_tidptr=0x55557fa89690) = 8 [pid 362] set_robust_list(0x55557fa896a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 362] chdir("./6") = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [ 27.801657][ T358] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 362] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 362] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 362] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 362] write(1, "executing program\n", 18) = 18 executing program [pid 362] memfd_create("syzkaller", 0) = 3 [pid 362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 358] <... ioctl resumed>) = 0 [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 358] symlink("/dev/loop0p1", "./file0") = 0 [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 358] symlink("/dev/loop0p2", "./file1") = 0 [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 358] symlink("/dev/loop0p3", "./file2") = 0 [ 27.833530][ T358] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 358] symlink("/dev/loop0p5", "./file3") = 0 [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 358] symlink("/dev/loop0p6", "./file4") = 0 [pid 358] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 358] close(4) = 0 [pid 358] close(3) = -1 EBADF (Bad file descriptor) [pid 358] close(4) = -1 EBADF (Bad file descriptor) [pid 358] close(5) = -1 EBADF (Bad file descriptor) [pid 358] close(6) = -1 EBADF (Bad file descriptor) [pid 358] close(7) = -1 EBADF (Bad file descriptor) [pid 358] close(8) = -1 EBADF (Bad file descriptor) [pid 358] close(9) = -1 EBADF (Bad file descriptor) [pid 358] close(10) = -1 EBADF (Bad file descriptor) [pid 358] close(11) = -1 EBADF (Bad file descriptor) [pid 358] close(12) = -1 EBADF (Bad file descriptor) [pid 358] close(13) = -1 EBADF (Bad file descriptor) [pid 358] close(14) = -1 EBADF (Bad file descriptor) [pid 358] close(15) = -1 EBADF (Bad file descriptor) [pid 358] close(16) = -1 EBADF (Bad file descriptor) [pid 358] close(17) = -1 EBADF (Bad file descriptor) [pid 358] close(18) = -1 EBADF (Bad file descriptor) [pid 358] close(19) = -1 EBADF (Bad file descriptor) [pid 358] close(20) = -1 EBADF (Bad file descriptor) [pid 358] close(21) = -1 EBADF (Bad file descriptor) [pid 358] close(22) = -1 EBADF (Bad file descriptor) [pid 358] close(23) = -1 EBADF (Bad file descriptor) [pid 358] close(24) = -1 EBADF (Bad file descriptor) [pid 358] close(25) = -1 EBADF (Bad file descriptor) [pid 358] close(26) = -1 EBADF (Bad file descriptor) [pid 358] close(27) = -1 EBADF (Bad file descriptor) [pid 358] close(28) = -1 EBADF (Bad file descriptor) [pid 358] close(29) = -1 EBADF (Bad file descriptor) [pid 358] exit_group(0) = ? [pid 358] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 359] <... write resumed>) = 16777216 [pid 359] munmap(0x7f96da85b000, 138412032) = 0 [pid 312] <... restart_syscall resumed>) = 0 [pid 312] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/file4") = 0 [pid 312] umount2("./5/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/file3") = 0 [pid 312] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/file2") = 0 [pid 312] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/file1") = 0 [pid 312] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/file0") = 0 [pid 312] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/binderfs") = 0 [pid 312] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/cgroup.net") = 0 [pid 312] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/cgroup.cpu") = 0 [pid 312] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./5/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./5") = 0 [pid 312] mkdir("./6", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 359] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 359] close(3) = 0 [pid 359] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 359] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 312] <... openat resumed>) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 363 attached , child_tidptr=0x55557fa89690) = 8 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] set_robust_list(0x55557fa896a0, 24) = 0 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] chdir("./6") = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 363] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 363] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 363] write(1, "executing program\n", 18) = 18 [pid 363] memfd_create("syzkaller", 0) = 3 [pid 363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 27.907418][ T103] loop0: p1 p2 p3 < p5 p6 > p4 [ 27.915697][ T103] loop0: p2 size 16777216 extends beyond EOD, truncated [ 27.938501][ T103] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 360] <... write resumed>) = 16777216 [pid 360] munmap(0x7f96da85b000, 138412032) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 360] close(3) = 0 [pid 360] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 360] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 359] <... ioctl resumed>) = 0 [pid 363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 359] symlink("/dev/loop2p1", "./file0") = 0 [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 359] symlink("/dev/loop2p2", "./file1") = 0 [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 359] symlink("/dev/loop2p3", "./file2") = 0 [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 359] symlink("/dev/loop2p5", "./file3") = 0 [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [ 28.012780][ T359] loop2: p1 p2 p3 < p5 p6 > p4 [ 28.022224][ T359] loop2: p2 size 16777216 extends beyond EOD, truncated [ 28.042313][ T359] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 359] symlink("/dev/loop2p6", "./file4") = 0 [pid 359] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 359] close(4) = 0 [pid 359] close(3) = -1 EBADF (Bad file descriptor) [pid 359] close(4) = -1 EBADF (Bad file descriptor) [pid 359] close(5) = -1 EBADF (Bad file descriptor) [pid 359] close(6) = -1 EBADF (Bad file descriptor) [pid 359] close(7) = -1 EBADF (Bad file descriptor) [pid 359] close(8) = -1 EBADF (Bad file descriptor) [pid 359] close(9) = -1 EBADF (Bad file descriptor) [pid 359] close(10) = -1 EBADF (Bad file descriptor) [pid 359] close(11) = -1 EBADF (Bad file descriptor) [pid 359] close(12) = -1 EBADF (Bad file descriptor) [pid 359] close(13) = -1 EBADF (Bad file descriptor) [pid 359] close(14) = -1 EBADF (Bad file descriptor) [pid 359] close(15) = -1 EBADF (Bad file descriptor) [pid 359] close(16) = -1 EBADF (Bad file descriptor) [pid 359] close(17) = -1 EBADF (Bad file descriptor) [pid 359] close(18) = -1 EBADF (Bad file descriptor) [pid 359] close(19) = -1 EBADF (Bad file descriptor) [pid 359] close(20) = -1 EBADF (Bad file descriptor) [pid 359] close(21) = -1 EBADF (Bad file descriptor) [pid 359] close(22) = -1 EBADF (Bad file descriptor) [pid 359] close(23) = -1 EBADF (Bad file descriptor) [pid 359] close(24) = -1 EBADF (Bad file descriptor) [pid 359] close(25) = -1 EBADF (Bad file descriptor) [pid 359] close(26) = -1 EBADF (Bad file descriptor) [pid 359] close(27) = -1 EBADF (Bad file descriptor) [pid 359] close(28) = -1 EBADF (Bad file descriptor) [pid 359] close(29) = -1 EBADF (Bad file descriptor) [pid 359] exit_group(0) = ? [pid 359] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 361] <... write resumed>) = 16777216 [pid 361] munmap(0x7f96da85b000, 138412032 [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 361] <... munmap resumed>) = 0 [pid 361] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 315] <... restart_syscall resumed>) = 0 [pid 361] <... openat resumed>) = 4 [pid 361] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 361] close(3 [pid 315] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 361] <... close resumed>) = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 361] ioctl(4, LOOP_GET_STATUS64 [pid 315] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 361] <... ioctl resumed>, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 361] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 315] <... openat resumed>) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/file4") = 0 [pid 315] umount2("./5/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/file3") = 0 [pid 315] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/file2") = 0 [pid 315] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/file1") = 0 [pid 315] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/file0") = 0 [pid 315] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/binderfs") = 0 [pid 315] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/cgroup.net") = 0 [pid 315] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/cgroup.cpu") = 0 [pid 315] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./5/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./5") = 0 [pid 315] mkdir("./6", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x55557fa896a0, 24 [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 8 [pid 364] <... set_robust_list resumed>) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 364] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] chdir("./6") = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 364] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 364] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 364] write(1, "executing program\n", 18) = 18 [pid 364] memfd_create("syzkaller", 0) = 3 [pid 364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 executing program [ 28.114412][ T360] loop4: p1 p2 p3 < p5 p6 > p4 [ 28.122871][ T360] loop4: p2 size 16777216 extends beyond EOD, truncated [ 28.131407][ T360] loop4: p4 start 1426063360 is beyond EOD, truncated [ 28.153082][ T361] loop3: p1 p2 p3 < p5 p6 > p4 [pid 360] <... ioctl resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 360] symlink("/dev/loop4p1", "./file0") = 0 [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 360] symlink("/dev/loop4p2", "./file1") = 0 [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 360] symlink("/dev/loop4p3", "./file2") = 0 [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 360] symlink("/dev/loop4p5", "./file3") = 0 [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 360] symlink("/dev/loop4p6", "./file4") = 0 [pid 360] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 360] close(4) = 0 [pid 360] close(3) = -1 EBADF (Bad file descriptor) [pid 360] close(4) = -1 EBADF (Bad file descriptor) [pid 360] close(5) = -1 EBADF (Bad file descriptor) [pid 360] close(6) = -1 EBADF (Bad file descriptor) [pid 360] close(7) = -1 EBADF (Bad file descriptor) [pid 360] close(8) = -1 EBADF (Bad file descriptor) [pid 360] close(9) = -1 EBADF (Bad file descriptor) [pid 360] close(10) = -1 EBADF (Bad file descriptor) [pid 360] close(11) = -1 EBADF (Bad file descriptor) [pid 360] close(12) = -1 EBADF (Bad file descriptor) [pid 360] close(13) = -1 EBADF (Bad file descriptor) [pid 360] close(14) = -1 EBADF (Bad file descriptor) [pid 360] close(15) = -1 EBADF (Bad file descriptor) [pid 360] close(16) = -1 EBADF (Bad file descriptor) [pid 360] close(17) = -1 EBADF (Bad file descriptor) [pid 360] close(18) = -1 EBADF (Bad file descriptor) [pid 360] close(19) = -1 EBADF (Bad file descriptor) [pid 360] close(20) = -1 EBADF (Bad file descriptor) [pid 360] close(21) = -1 EBADF (Bad file descriptor) [pid 360] close(22) = -1 EBADF (Bad file descriptor) [pid 360] close(23) = -1 EBADF (Bad file descriptor) [pid 360] close(24) = -1 EBADF (Bad file descriptor) [pid 360] close(25) = -1 EBADF (Bad file descriptor) [pid 360] close(26) = -1 EBADF (Bad file descriptor) [pid 360] close(27) = -1 EBADF (Bad file descriptor) [pid 360] close(28) = -1 EBADF (Bad file descriptor) [pid 360] close(29) = -1 EBADF (Bad file descriptor) [pid 360] exit_group(0) = ? [pid 360] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 361] <... ioctl resumed>) = 0 [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 361] symlink("/dev/loop3p1", "./file0") = 0 [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 361] symlink("/dev/loop3p2", "./file1") = 0 [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p3" [pid 362] <... write resumed>) = 16777216 [pid 361] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 361] symlink("/dev/loop3p3", "./file2" [pid 362] munmap(0x7f96da85b000, 138412032 [pid 361] <... symlink resumed>) = 0 [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p5" [pid 317] <... restart_syscall resumed>) = 0 [pid 361] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 317] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/file4") = 0 [pid 317] umount2("./5/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/file3") = 0 [pid 317] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/file2") = 0 [pid 317] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/file1") = 0 [pid 317] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 361] symlink("/dev/loop3p5", "./file3" [pid 317] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 361] <... symlink resumed>) = 0 [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p6" [pid 317] unlink("./5/file0" [pid 361] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xf), ...}, 0) = 0 [pid 361] symlink("/dev/loop3p6", "./file4" [pid 317] <... unlink resumed>) = 0 [pid 317] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 361] <... symlink resumed>) = 0 [pid 361] newfstatat(AT_FDCWD, "/dev/loop3p7" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 361] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 317] newfstatat(AT_FDCWD, "./5/binderfs" [pid 361] close(4 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/binderfs") = 0 [pid 317] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/cgroup.net") = 0 [pid 317] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/cgroup.cpu" [pid 361] <... close resumed>) = 0 [pid 317] <... unlink resumed>) = 0 [pid 317] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./5/cgroup") = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 317] rmdir("./5") = 0 [pid 317] mkdir("./6", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 362] <... munmap resumed>) = 0 [pid 361] close(3) = -1 EBADF (Bad file descriptor) [pid 361] close(4) = -1 EBADF (Bad file descriptor) [pid 361] close(5) = -1 EBADF (Bad file descriptor) [pid 361] close(6 [pid 362] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... openat resumed>) = 4 [pid 361] close(7) = -1 EBADF (Bad file descriptor) [pid 362] ioctl(4, LOOP_SET_FD, 3 [pid 361] close(8 [pid 362] <... ioctl resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] close(3 [pid 361] close(9 [pid 362] <... close resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] ioctl(4, LOOP_GET_STATUS64 [pid 361] close(10 [pid 362] <... ioctl resumed>, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 361] close(11) = -1 EBADF (Bad file descriptor) [pid 361] close(12) = -1 EBADF (Bad file descriptor) [pid 361] close(13) = -1 EBADF (Bad file descriptor) [pid 361] close(14) = -1 EBADF (Bad file descriptor) [pid 361] close(15) = -1 EBADF (Bad file descriptor) [pid 361] close(16) = -1 EBADF (Bad file descriptor) [pid 361] close(17) = -1 EBADF (Bad file descriptor) [pid 361] close(18) = -1 EBADF (Bad file descriptor) [pid 361] close(19) = -1 EBADF (Bad file descriptor) [pid 361] close(20) = -1 EBADF (Bad file descriptor) [pid 361] close(21) = -1 EBADF (Bad file descriptor) [pid 361] close(22) = -1 EBADF (Bad file descriptor) [pid 361] close(23) = -1 EBADF (Bad file descriptor) [pid 361] close(24) = -1 EBADF (Bad file descriptor) [pid 361] close(25) = -1 EBADF (Bad file descriptor) [pid 361] close(26) = -1 EBADF (Bad file descriptor) [pid 361] close(27) = -1 EBADF (Bad file descriptor) [pid 361] close(28) = -1 EBADF (Bad file descriptor) [pid 361] close(29) = -1 EBADF (Bad file descriptor) [pid 361] exit_group(0) = ? [pid 361] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [ 28.159525][ T361] loop3: p2 size 16777216 extends beyond EOD, truncated [ 28.172168][ T361] loop3: p4 start 1426063360 is beyond EOD, truncated [ 28.189590][ T103] loop4: p1 p2 p3 < p5 p6 > p4 [ 28.198865][ T103] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/file4") = 0 [pid 316] umount2("./6/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/file3") = 0 [pid 316] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/file2") = 0 [pid 316] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/file1") = 0 [pid 316] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/file0") = 0 [pid 316] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/binderfs") = 0 [pid 316] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/cgroup.net") = 0 [pid 316] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/cgroup.cpu") = 0 [pid 316] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./6/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./6") = 0 [pid 316] mkdir("./7", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD [pid 363] <... write resumed>) = 16777216 [pid 363] munmap(0x7f96da85b000, 138412032) = 0 [pid 363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 363] close(3) = 0 [pid 317] <... openat resumed>) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 363] ioctl(4, LOOP_GET_STATUS64ci2-android-6-1/strace-static-x86_64: Process 365 attached [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 8 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] set_robust_list(0x55557fa896a0, 24 [pid 363] <... ioctl resumed>, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 365] <... set_robust_list resumed>) = 0 [pid 363] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] chdir("./6") = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 365] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 365] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 365] write(1, "executing program\n", 18) = 18 [pid 365] memfd_create("syzkaller", 0) = 3 [pid 365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 28.231216][ T103] loop4: p4 start 1426063360 is beyond EOD, truncated [ 28.273441][ T362] loop1: p1 p2 p3 < p5 p6 > p4 [ 28.282344][ T363] loop0: p1 p2 p3 < p5 p6 > p4 [ 28.287531][ T362] loop1: p2 size 16777216 extends beyond EOD, truncated [ 28.294684][ T363] loop0: p2 size 16777216 extends beyond EOD, truncated [ 28.312599][ T363] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 363] <... ioctl resumed>) = 0 [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 363] symlink("/dev/loop0p1", "./file0") = 0 [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 363] symlink("/dev/loop0p2", "./file1") = 0 [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 363] symlink("/dev/loop0p3", "./file2") = 0 [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 363] symlink("/dev/loop0p5", "./file3") = 0 [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 363] symlink("/dev/loop0p6", "./file4") = 0 [pid 363] newfstatat(AT_FDCWD, "/dev/loop0p7" [pid 362] <... ioctl resumed>) = 0 [pid 363] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p1" [pid 363] close(4 [pid 362] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 363] <... close resumed>) = 0 [pid 362] symlink("/dev/loop1p1", "./file0") = 0 [pid 363] close(3 [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p2" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 363] close(4 [pid 362] symlink("/dev/loop1p2", "./file1" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... symlink resumed>) = 0 [pid 363] close(5 [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p3" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(6 [pid 362] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] symlink("/dev/loop1p3", "./file2" [pid 363] close(7 [pid 362] <... symlink resumed>) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(8 [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p4" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 363] close(9 [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p5" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(10 [pid 362] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(11) = -1 EBADF (Bad file descriptor) [pid 362] symlink("/dev/loop1p5", "./file3" [pid 363] close(12 [pid 362] <... symlink resumed>) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(13 [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p6" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(14 [pid 362] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(15 [pid 362] symlink("/dev/loop1p6", "./file4" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(16 [pid 362] <... symlink resumed>) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(17 [pid 362] newfstatat(AT_FDCWD, "/dev/loop1p7" [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(18) = -1 EBADF (Bad file descriptor) [pid 362] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 363] close(19) = -1 EBADF (Bad file descriptor) [pid 362] close(4 [pid 363] close(20) = -1 EBADF (Bad file descriptor) [pid 363] close(21 [pid 362] <... close resumed>) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(22 [pid 362] close(3 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(23) = -1 EBADF (Bad file descriptor) [pid 362] close(4 [pid 363] close(24) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(25) = -1 EBADF (Bad file descriptor) [pid 362] close(5 [pid 363] close(26) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(27) = -1 EBADF (Bad file descriptor) [pid 362] close(6 [pid 363] close(28) = -1 EBADF (Bad file descriptor) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(29) = -1 EBADF (Bad file descriptor) [pid 362] close(7 [pid 363] exit_group(0 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... exit_group resumed>) = ? [pid 363] +++ exited with 0 +++ [pid 362] close(8 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=5 /* 0.05 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] close(9) = -1 EBADF (Bad file descriptor) [pid 362] close(10) = -1 EBADF (Bad file descriptor) [pid 362] close(11) = -1 EBADF (Bad file descriptor) [pid 362] close(12) = -1 EBADF (Bad file descriptor) [pid 362] close(13) = -1 EBADF (Bad file descriptor) [pid 362] close(14) = -1 EBADF (Bad file descriptor) [pid 362] close(15) = -1 EBADF (Bad file descriptor) [pid 362] close(16) = -1 EBADF (Bad file descriptor) [pid 362] close(17) = -1 EBADF (Bad file descriptor) [pid 362] close(18) = -1 EBADF (Bad file descriptor) [pid 362] close(19) = -1 EBADF (Bad file descriptor) [pid 362] close(20) = -1 EBADF (Bad file descriptor) [pid 362] close(21) = -1 EBADF (Bad file descriptor) [pid 362] close(22) = -1 EBADF (Bad file descriptor) [pid 362] close(23) = -1 EBADF (Bad file descriptor) [pid 362] close(24) = -1 EBADF (Bad file descriptor) [pid 362] close(25) = -1 EBADF (Bad file descriptor) [pid 362] close(26) = -1 EBADF (Bad file descriptor) [pid 362] close(27) = -1 EBADF (Bad file descriptor) [pid 362] close(28) = -1 EBADF (Bad file descriptor) [pid 362] close(29) = -1 EBADF (Bad file descriptor) [pid 362] exit_group(0) = ? [pid 362] +++ exited with 0 +++ [pid 365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 312] <... restart_syscall resumed>) = 0 [pid 312] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/file4") = 0 [pid 312] umount2("./6/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/file3") = 0 [pid 312] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/file2") = 0 [pid 312] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/file1") = 0 [pid 312] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/file0") = 0 [pid 312] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/binderfs") = 0 [pid 312] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/cgroup.net") = 0 [pid 312] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/cgroup.cpu") = 0 [pid 312] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./6/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./6") = 0 [pid 312] mkdir("./7", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 314] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/file4") = 0 [pid 314] umount2("./6/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 28.319713][ T362] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 314] newfstatat(AT_FDCWD, "./6/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/file3") = 0 [pid 314] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/file2") = 0 [pid 314] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/file1") = 0 [pid 314] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/file0") = 0 [pid 314] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/binderfs") = 0 [pid 314] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/cgroup.net") = 0 [pid 314] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/cgroup.cpu") = 0 [pid 314] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./6/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./6") = 0 [pid 314] mkdir("./7", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 314] ioctl(3, LOOP_CLR_FD [pid 316] <... ioctl resumed>) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 9 ci2-android-6-1/strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x55557fa896a0, 24 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 366] <... set_robust_list resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] chdir("./7") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 366] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 366] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 366] write(1, "executing program\n", 18) = 18 [pid 366] memfd_create("syzkaller", 0) = 3 [pid 366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 365] <... write resumed>) = 16777216 [pid 312] <... ioctl resumed>) = 0 [pid 365] munmap(0x7f96da85b000, 138412032) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 365] close(3) = 0 [pid 365] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 365] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 9 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x55557fa896a0, 24) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] chdir("./7") = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 367] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 367] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 367] write(1, "executing program\n", 18) = 18 [pid 367] memfd_create("syzkaller", 0) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 364] <... write resumed>) = 16777216 [ 28.433663][ T103] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.452072][ T103] Buffer I/O error on dev loop1, logical block 0, async page read [pid 364] munmap(0x7f96da85b000, 138412032) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 364] close(3) = 0 [ 28.478803][ T103] loop1: unable to read partition table [ 28.484577][ T103] loop1: partition table beyond EOD, truncated [ 28.502642][ T365] loop4: p1 p2 p3 < p5 p6 > p4 [ 28.508275][ T365] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 364] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 364] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 365] <... ioctl resumed>) = 0 [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 365] symlink("/dev/loop4p1", "./file0") = 0 [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 365] symlink("/dev/loop4p2", "./file1") = 0 [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 365] symlink("/dev/loop4p3", "./file2") = 0 [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 365] symlink("/dev/loop4p5", "./file3") = 0 [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 365] symlink("/dev/loop4p6", "./file4") = 0 [pid 365] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 365] close(4) = 0 [pid 365] close(3) = -1 EBADF (Bad file descriptor) [pid 365] close(4) = -1 EBADF (Bad file descriptor) [pid 365] close(5) = -1 EBADF (Bad file descriptor) [pid 365] close(6) = -1 EBADF (Bad file descriptor) [pid 365] close(7) = -1 EBADF (Bad file descriptor) [pid 365] close(8) = -1 EBADF (Bad file descriptor) [pid 365] close(9) = -1 EBADF (Bad file descriptor) [pid 365] close(10) = -1 EBADF (Bad file descriptor) [ 28.530898][ T365] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 365] close(11) = -1 EBADF (Bad file descriptor) [pid 365] close(12) = -1 EBADF (Bad file descriptor) [pid 365] close(13) = -1 EBADF (Bad file descriptor) [pid 365] close(14) = -1 EBADF (Bad file descriptor) [pid 365] close(15) = -1 EBADF (Bad file descriptor) [pid 365] close(16) = -1 EBADF (Bad file descriptor) [pid 365] close(17) = -1 EBADF (Bad file descriptor) [pid 365] close(18) = -1 EBADF (Bad file descriptor) [pid 365] close(19) = -1 EBADF (Bad file descriptor) [pid 365] close(20) = -1 EBADF (Bad file descriptor) [pid 365] close(21) = -1 EBADF (Bad file descriptor) [pid 365] close(22) = -1 EBADF (Bad file descriptor) [pid 365] close(23) = -1 EBADF (Bad file descriptor) [pid 365] close(24) = -1 EBADF (Bad file descriptor) [pid 365] close(25) = -1 EBADF (Bad file descriptor) [pid 365] close(26) = -1 EBADF (Bad file descriptor) [pid 365] close(27) = -1 EBADF (Bad file descriptor) [pid 365] close(28) = -1 EBADF (Bad file descriptor) [pid 365] close(29) = -1 EBADF (Bad file descriptor) [pid 365] exit_group(0) = ? [pid 365] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=8 /* 0.08 s */} --- [pid 317] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/file4") = 0 [pid 317] umount2("./6/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/file3") = 0 [pid 317] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/file2") = 0 [pid 317] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/file1") = 0 [pid 317] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/file0") = 0 [pid 317] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/binderfs") = 0 [pid 317] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/cgroup.net") = 0 [pid 317] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/cgroup.cpu") = 0 [pid 317] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./6/cgroup") = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 317] rmdir("./6") = 0 [pid 317] mkdir("./7", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 317] ioctl(3, LOOP_CLR_FD [pid 314] <... ioctl resumed>) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x55557fa896a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] chdir("./7" [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 9 [pid 368] <... chdir resumed>) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 368] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] memfd_create("syzkaller", 0) = 3 [pid 368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 28.573307][ T364] loop2: p1 p2 p3 < p5 p6 > p4 [ 28.578637][ T364] loop2: p2 size 16777216 extends beyond EOD, truncated [ 28.608392][ T364] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 364] <... ioctl resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 364] symlink("/dev/loop2p1", "./file0") = 0 [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 364] symlink("/dev/loop2p2", "./file1") = 0 [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 364] symlink("/dev/loop2p3", "./file2") = 0 [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 364] symlink("/dev/loop2p5", "./file3") = 0 [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 364] symlink("/dev/loop2p6", "./file4") = 0 [pid 364] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 364] close(4) = 0 [pid 364] close(3) = -1 EBADF (Bad file descriptor) [pid 364] close(4) = -1 EBADF (Bad file descriptor) [pid 364] close(5) = -1 EBADF (Bad file descriptor) [pid 364] close(6) = -1 EBADF (Bad file descriptor) [pid 364] close(7) = -1 EBADF (Bad file descriptor) [pid 364] close(8) = -1 EBADF (Bad file descriptor) [pid 364] close(9) = -1 EBADF (Bad file descriptor) [pid 364] close(10) = -1 EBADF (Bad file descriptor) [pid 364] close(11) = -1 EBADF (Bad file descriptor) [pid 364] close(12) = -1 EBADF (Bad file descriptor) [pid 364] close(13) = -1 EBADF (Bad file descriptor) [pid 364] close(14) = -1 EBADF (Bad file descriptor) [pid 364] close(15) = -1 EBADF (Bad file descriptor) [pid 364] close(16) = -1 EBADF (Bad file descriptor) [pid 364] close(17) = -1 EBADF (Bad file descriptor) [pid 364] close(18) = -1 EBADF (Bad file descriptor) [pid 364] close(19) = -1 EBADF (Bad file descriptor) [pid 364] close(20) = -1 EBADF (Bad file descriptor) [pid 364] close(21) = -1 EBADF (Bad file descriptor) [pid 364] close(22) = -1 EBADF (Bad file descriptor) [pid 364] close(23) = -1 EBADF (Bad file descriptor) [pid 364] close(24) = -1 EBADF (Bad file descriptor) [pid 364] close(25) = -1 EBADF (Bad file descriptor) [pid 364] close(26) = -1 EBADF (Bad file descriptor) [pid 364] close(27) = -1 EBADF (Bad file descriptor) [pid 364] close(28) = -1 EBADF (Bad file descriptor) [pid 364] close(29) = -1 EBADF (Bad file descriptor) [pid 364] exit_group(0) = ? [pid 364] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/file4") = 0 [pid 315] umount2("./6/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/file3") = 0 [pid 315] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/file2") = 0 [pid 315] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/file1") = 0 [pid 315] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/file0") = 0 [pid 315] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/binderfs") = 0 [pid 315] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/cgroup.net") = 0 [pid 315] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/cgroup.cpu") = 0 [pid 315] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./6/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./6") = 0 [pid 315] mkdir("./7", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 317] <... ioctl resumed>) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 9 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x55557fa896a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] chdir("./7") = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 369] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 369] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3 [pid 315] <... openat resumed>) = 3 [pid 315] ioctl(3, LOOP_CLR_FD [pid 369] <... close resumed>) = 0 [pid 369] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 369] write(1, "executing program\n", 18) = 18 [pid 369] memfd_create("syzkaller", 0) = 3 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 367] <... write resumed>) = 16777216 [pid 367] munmap(0x7f96da85b000, 138412032) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 367] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 367] close(3) = 0 [pid 367] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [ 28.673974][ T103] loop2: p1 p2 p3 < p5 p6 > p4 [ 28.682358][ T103] loop2: p2 size 16777216 extends beyond EOD, truncated [ 28.700319][ T103] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 367] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 366] <... write resumed>) = 16777216 [pid 366] munmap(0x7f96da85b000, 138412032) = 0 [pid 366] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 366] close(3) = 0 [pid 366] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 366] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 28.802377][ T341] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.813529][ T366] loop3: p1 p2 p3 < p5 p6 > p4 [ 28.814136][ T367] loop0: p1 p2 p3 < p5 p6 > p4 [ 28.822251][ T366] loop3: p2 size 16777216 extends beyond EOD, truncated [pid 368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 366] <... ioctl resumed>) = 0 [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 366] symlink("/dev/loop3p1", "./file0") = 0 [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 366] symlink("/dev/loop3p2", "./file1") = 0 [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 366] symlink("/dev/loop3p3", "./file2") = 0 [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 366] symlink("/dev/loop3p5", "./file3") = 0 [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 366] symlink("/dev/loop3p6", "./file4") = 0 [pid 366] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 366] close(4) = 0 [pid 366] close(3) = -1 EBADF (Bad file descriptor) [pid 366] close(4) = -1 EBADF (Bad file descriptor) [pid 366] close(5) = -1 EBADF (Bad file descriptor) [pid 366] close(6) = -1 EBADF (Bad file descriptor) [pid 366] close(7) = -1 EBADF (Bad file descriptor) [pid 366] close(8) = -1 EBADF (Bad file descriptor) [pid 366] close(9) = -1 EBADF (Bad file descriptor) [pid 366] close(10) = -1 EBADF (Bad file descriptor) [pid 366] close(11) = -1 EBADF (Bad file descriptor) [pid 366] close(12) = -1 EBADF (Bad file descriptor) [pid 366] close(13) = -1 EBADF (Bad file descriptor) [pid 366] close(14) = -1 EBADF (Bad file descriptor) [pid 366] close(15) = -1 EBADF (Bad file descriptor) [pid 366] close(16) = -1 EBADF (Bad file descriptor) [pid 366] close(17) = -1 EBADF (Bad file descriptor) [pid 366] close(18) = -1 EBADF (Bad file descriptor) [pid 366] close(19) = -1 EBADF (Bad file descriptor) [pid 366] close(20) = -1 EBADF (Bad file descriptor) [pid 366] close(21) = -1 EBADF (Bad file descriptor) [pid 366] close(22) = -1 EBADF (Bad file descriptor) [pid 366] close(23) = -1 EBADF (Bad file descriptor) [pid 366] close(24) = -1 EBADF (Bad file descriptor) [pid 366] close(25) = -1 EBADF (Bad file descriptor) [pid 366] close(26) = -1 EBADF (Bad file descriptor) [pid 366] close(27) = -1 EBADF (Bad file descriptor) [pid 366] close(28) = -1 EBADF (Bad file descriptor) [pid 366] close(29) = -1 EBADF (Bad file descriptor) [pid 366] exit_group(0) = ? [pid 366] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=9 /* 0.09 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/file4") = 0 [pid 316] umount2("./7/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/file3") = 0 [pid 316] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/file2") = 0 [pid 316] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/file1") = 0 [pid 316] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/file0") = 0 [pid 316] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/binderfs") = 0 [pid 316] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/cgroup.net") = 0 [pid 316] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/cgroup.cpu") = 0 [pid 316] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./7/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./7") = 0 [pid 316] mkdir("./8", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 370 attached , child_tidptr=0x55557fa89690) = 10 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 370] set_robust_list(0x55557fa896a0, 24 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 370] <... set_robust_list resumed>) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] chdir("./8") = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 370] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 370] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] write(1, "executing program\n", 18) = 18 executing program [pid 370] memfd_create("syzkaller", 0) = 3 [pid 370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 28.847649][ T366] loop3: p4 start 1426063360 is beyond EOD, truncated [ 28.860523][ T367] loop0: p2 size 16777216 extends beyond EOD, truncated [ 28.888702][ T367] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 315] <... ioctl resumed>) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 9 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x55557fa896a0, 24) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] chdir("./7") = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] <... write resumed>) = 16777216 [pid 371] setpgid(0, 0) = 0 [pid 371] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 371] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 371] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 [pid 371] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 371] write(1, "executing program\n", 18) = 18 [pid 371] memfd_create("syzkaller", 0) = 3 [pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 369] munmap(0x7f96da85b000, 138412032 [pid 367] <... ioctl resumed>) = 0 [pid 369] <... munmap resumed>) = 0 [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p1" [pid 369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 367] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 369] <... openat resumed>) = 4 [pid 369] ioctl(4, LOOP_SET_FD, 3 [pid 367] symlink("/dev/loop0p1", "./file0") = 0 [pid 369] <... ioctl resumed>) = 0 [pid 369] close(3 [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p2" [pid 369] <... close resumed>) = 0 [pid 367] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 369] ioctl(4, LOOP_GET_STATUS64 [pid 367] symlink("/dev/loop0p2", "./file1" [pid 369] <... ioctl resumed>, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 369] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 367] <... symlink resumed>) = 0 [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 367] symlink("/dev/loop0p3", "./file2") = 0 [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 367] symlink("/dev/loop0p5", "./file3") = 0 [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 367] symlink("/dev/loop0p6", "./file4") = 0 [pid 367] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 367] close(4) = 0 [pid 367] close(3) = -1 EBADF (Bad file descriptor) [pid 367] close(4) = -1 EBADF (Bad file descriptor) [pid 367] close(5) = -1 EBADF (Bad file descriptor) [pid 367] close(6) = -1 EBADF (Bad file descriptor) [pid 367] close(7) = -1 EBADF (Bad file descriptor) [pid 367] close(8) = -1 EBADF (Bad file descriptor) [pid 367] close(9) = -1 EBADF (Bad file descriptor) [pid 367] close(10) = -1 EBADF (Bad file descriptor) [pid 367] close(11) = -1 EBADF (Bad file descriptor) [pid 367] close(12) = -1 EBADF (Bad file descriptor) [pid 367] close(13) = -1 EBADF (Bad file descriptor) [pid 367] close(14) = -1 EBADF (Bad file descriptor) [pid 367] close(15) = -1 EBADF (Bad file descriptor) [pid 367] close(16) = -1 EBADF (Bad file descriptor) [pid 367] close(17) = -1 EBADF (Bad file descriptor) [pid 367] close(18) = -1 EBADF (Bad file descriptor) [pid 367] close(19) = -1 EBADF (Bad file descriptor) [pid 367] close(20) = -1 EBADF (Bad file descriptor) [pid 367] close(21) = -1 EBADF (Bad file descriptor) [pid 367] close(22) = -1 EBADF (Bad file descriptor) [pid 367] close(23) = -1 EBADF (Bad file descriptor) [pid 367] close(24) = -1 EBADF (Bad file descriptor) [pid 367] close(25) = -1 EBADF (Bad file descriptor) [pid 367] close(26) = -1 EBADF (Bad file descriptor) [pid 367] close(27) = -1 EBADF (Bad file descriptor) [pid 367] close(28) = -1 EBADF (Bad file descriptor) [pid 367] close(29) = -1 EBADF (Bad file descriptor) [pid 367] exit_group(0) = ? [pid 367] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 368] <... write resumed>) = 16777216 [pid 312] <... restart_syscall resumed>) = 0 [pid 312] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/file4") = 0 [pid 312] umount2("./7/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/file3") = 0 [pid 312] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/file2") = 0 [pid 312] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/file1") = 0 [pid 312] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/file0") = 0 [pid 312] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/binderfs") = 0 [pid 312] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/cgroup.net") = 0 [pid 312] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/cgroup.cpu") = 0 [pid 312] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./7/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./7") = 0 [pid 312] mkdir("./8", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 372 attached , child_tidptr=0x55557fa89690) = 10 [pid 372] set_robust_list(0x55557fa896a0, 24 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] munmap(0x7f96da85b000, 138412032) = 0 [pid 368] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 368] close(3 [pid 372] <... set_robust_list resumed>) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] chdir("./8") = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 372] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 372] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 372] write(1, "executing program\n", 18) = 18 executing program [pid 372] memfd_create("syzkaller", 0) = 3 [pid 372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 368] <... close resumed>) = 0 [pid 368] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [ 28.982625][ T369] loop4: p1 p2 p3 < p5 p6 > p4 [ 28.988329][ T369] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 368] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 369] <... ioctl resumed>) = 0 [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 369] symlink("/dev/loop4p1", "./file0") = 0 [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 369] symlink("/dev/loop4p2", "./file1") = 0 [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 369] symlink("/dev/loop4p3", "./file2") = 0 [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 369] symlink("/dev/loop4p5", "./file3") = 0 [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 369] symlink("/dev/loop4p6", "./file4") = 0 [pid 369] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 369] close(4 [pid 370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 29.042461][ T369] loop4: p4 start 1426063360 is beyond EOD, truncated [ 29.065543][ T103] loop4: p1 p2 p3 < p5 p6 > p4 [ 29.072551][ T103] loop4: p2 size 16777216 extends beyond EOD, truncated [ 29.073714][ T368] loop1: p1 p2 p3 < p5 p6 > p4 [ 29.084971][ T103] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 369] <... close resumed>) = 0 [pid 369] close(3) = -1 EBADF (Bad file descriptor) [pid 369] close(4) = -1 EBADF (Bad file descriptor) [pid 369] close(5) = -1 EBADF (Bad file descriptor) [pid 369] close(6) = -1 EBADF (Bad file descriptor) [pid 369] close(7) = -1 EBADF (Bad file descriptor) [pid 369] close(8) = -1 EBADF (Bad file descriptor) [pid 369] close(9) = -1 EBADF (Bad file descriptor) [pid 369] close(10) = -1 EBADF (Bad file descriptor) [pid 369] close(11) = -1 EBADF (Bad file descriptor) [pid 369] close(12) = -1 EBADF (Bad file descriptor) [pid 369] close(13) = -1 EBADF (Bad file descriptor) [pid 369] close(14) = -1 EBADF (Bad file descriptor) [pid 369] close(15) = -1 EBADF (Bad file descriptor) [pid 369] close(16) = -1 EBADF (Bad file descriptor) [pid 369] close(17) = -1 EBADF (Bad file descriptor) [pid 369] close(18) = -1 EBADF (Bad file descriptor) [pid 369] close(19) = -1 EBADF (Bad file descriptor) [pid 369] close(20) = -1 EBADF (Bad file descriptor) [pid 369] close(21) = -1 EBADF (Bad file descriptor) [pid 369] close(22) = -1 EBADF (Bad file descriptor) [pid 369] close(23) = -1 EBADF (Bad file descriptor) [pid 369] close(24) = -1 EBADF (Bad file descriptor) [pid 369] close(25) = -1 EBADF (Bad file descriptor) [pid 369] close(26) = -1 EBADF (Bad file descriptor) [pid 369] close(27) = -1 EBADF (Bad file descriptor) [pid 369] close(28) = -1 EBADF (Bad file descriptor) [pid 369] close(29) = -1 EBADF (Bad file descriptor) [pid 369] exit_group(0) = ? [pid 369] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 317] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./7/file4") = 0 [pid 317] umount2("./7/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./7/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./7/file3") = 0 [pid 317] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./7/file2") = 0 [pid 317] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./7/file1") = 0 [pid 317] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./7/file0" [pid 368] <... ioctl resumed>) = 0 [pid 317] <... unlink resumed>) = 0 [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 368] symlink("/dev/loop1p1", "./file0") = 0 [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 368] symlink("/dev/loop1p2", "./file1") = 0 [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 368] symlink("/dev/loop1p3", "./file2") = 0 [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 368] symlink("/dev/loop1p5", "./file3") = 0 [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 368] symlink("/dev/loop1p6", "./file4") = 0 [pid 368] newfstatat(AT_FDCWD, "/dev/loop1p7" [pid 317] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./7/binderfs" [pid 368] close(4 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 368] <... close resumed>) = 0 [pid 317] unlink("./7/binderfs" [pid 368] close(3) = -1 EBADF (Bad file descriptor) [pid 317] <... unlink resumed>) = 0 [pid 368] close(4 [pid 317] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] close(5 [pid 317] newfstatat(AT_FDCWD, "./7/cgroup.net" [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 368] close(6 [pid 317] unlink("./7/cgroup.net" [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 368] close(7 [pid 317] <... unlink resumed>) = 0 [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] close(8 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] newfstatat(AT_FDCWD, "./7/cgroup.cpu" [pid 368] close(9) = -1 EBADF (Bad file descriptor) [pid 368] close(10) = -1 EBADF (Bad file descriptor) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 368] close(11 [pid 317] unlink("./7/cgroup.cpu" [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 368] close(12) = -1 EBADF (Bad file descriptor) [pid 317] <... unlink resumed>) = 0 [pid 368] close(13 [pid 317] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] close(14 [pid 317] newfstatat(AT_FDCWD, "./7/cgroup" [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 368] close(15) = -1 EBADF (Bad file descriptor) [pid 317] unlink("./7/cgroup" [pid 368] close(16) = -1 EBADF (Bad file descriptor) [pid 317] <... unlink resumed>) = 0 [pid 368] close(17 [pid 317] getdents64(3 [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 368] close(18 [pid 317] close(3 [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = 0 [pid 368] close(19 [pid 317] rmdir("./7" [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 368] close(20 [pid 317] <... rmdir resumed>) = 0 [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] mkdir("./8", 0777 [pid 368] close(21) = -1 EBADF (Bad file descriptor) [pid 317] <... mkdir resumed>) = 0 [pid 368] close(22 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... openat resumed>) = 3 [pid 368] close(23 [pid 317] ioctl(3, LOOP_CLR_FD [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... ioctl resumed>) = 0 [pid 368] close(24 [pid 317] close(3 [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = 0 [pid 368] close(25 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[] [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 368] close(26 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 368] close(27) = -1 EBADF (Bad file descriptor) [pid 368] close(28) = -1 EBADF (Bad file descriptor) [pid 368] close(29) = -1 EBADF (Bad file descriptor) [pid 368] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 373 attached [pid 368] +++ exited with 0 +++ [pid 373] set_robust_list(0x55557fa896a0, 24 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 10 [pid 373] <... set_robust_list resumed>) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [] [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 373] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 373] chdir("./8") = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 373] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 373] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 [pid 373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- executing program [pid 373] write(1, "executing program\n", 18) = 18 [pid 373] memfd_create("syzkaller", 0) = 3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 314] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 373] <... mmap resumed>) = 0x7f96da85b000 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 29.098771][ T368] loop1: p2 size 16777216 extends beyond EOD, truncated [ 29.122088][ T368] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 314] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/file4") = 0 [pid 314] umount2("./7/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/file3") = 0 [pid 314] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/file2") = 0 [pid 314] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/file1") = 0 [pid 314] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/file0" [pid 372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/file0") = 0 [pid 314] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/binderfs") = 0 [pid 314] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/cgroup.net") = 0 [pid 314] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/cgroup.cpu") = 0 [pid 314] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./7/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./7") = 0 [pid 314] mkdir("./8", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 314] ioctl(3, LOOP_CLR_FD [pid 371] <... write resumed>) = 16777216 [pid 371] munmap(0x7f96da85b000, 138412032) = 0 [pid 371] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 371] close(3) = 0 [pid 371] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 371] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 370] <... write resumed>) = 16777216 [pid 370] munmap(0x7f96da85b000, 138412032) = 0 [pid 370] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 370] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 370] close(3) = 0 [pid 370] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 370] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 372] <... write resumed>) = 16777216 [pid 372] munmap(0x7f96da85b000, 138412032) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 372] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 372] close(3) = 0 [pid 372] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [ 29.312877][ T371] loop2: p1 p2 p3 < p5 p6 > p4 [ 29.323676][ T370] loop3: p1 p2 p3 < p5 p6 > p4 [ 29.324402][ T371] loop2: p2 size 16777216 extends beyond EOD, truncated [ 29.335713][ T370] loop3: p2 size 16777216 extends beyond EOD, truncated [ 29.343319][ T372] loop0: p1 p2 p3 < p5 p6 > p4 [ 29.352164][ T372] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 372] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 371] <... ioctl resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x55557fa896a0, 24 [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 10 [pid 374] <... set_robust_list resumed>) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] chdir("./8") = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 374] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 374] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] write(1, "executing program\n", 18) = 18 executing program [pid 374] memfd_create("syzkaller", 0) = 3 [pid 374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p1" [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] <... ioctl resumed>) = 0 [pid 371] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 370] <... ioctl resumed>) = 0 [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p1" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p1" [pid 370] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 372] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 370] symlink("/dev/loop3p1", "./file0" [pid 372] symlink("/dev/loop0p1", "./file0" [pid 370] <... symlink resumed>) = 0 [pid 372] <... symlink resumed>) = 0 [pid 371] symlink("/dev/loop2p1", "./file0" [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p2" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p2" [pid 370] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 372] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 370] symlink("/dev/loop3p2", "./file1" [pid 372] symlink("/dev/loop0p2", "./file1" [pid 370] <... symlink resumed>) = 0 [pid 372] <... symlink resumed>) = 0 [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p3" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p3" [pid 370] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 372] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 370] symlink("/dev/loop3p3", "./file2" [pid 372] symlink("/dev/loop0p3", "./file2" [pid 370] <... symlink resumed>) = 0 [pid 372] <... symlink resumed>) = 0 [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p4" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p4" [pid 370] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 372] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p5" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p5" [pid 370] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 372] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 370] symlink("/dev/loop3p5", "./file3" [pid 372] symlink("/dev/loop0p5", "./file3" [pid 370] <... symlink resumed>) = 0 [pid 372] <... symlink resumed>) = 0 [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p6" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p6" [pid 370] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 372] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 370] symlink("/dev/loop3p6", "./file4" [pid 372] symlink("/dev/loop0p6", "./file4" [pid 370] <... symlink resumed>) = 0 [pid 372] <... symlink resumed>) = 0 [pid 370] newfstatat(AT_FDCWD, "/dev/loop3p7" [pid 372] newfstatat(AT_FDCWD, "/dev/loop0p7" [pid 370] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 372] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 370] close(4 [pid 372] close(4 [pid 371] <... symlink resumed>) = 0 [pid 370] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p2" [pid 370] close(3 [pid 372] close(3 [pid 371] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] symlink("/dev/loop2p2", "./file1" [pid 370] close(4 [pid 372] close(4 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(5 [pid 372] close(5 [pid 371] <... symlink resumed>) = 0 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(6 [pid 372] close(6 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(7 [pid 372] close(7 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(8 [pid 372] close(8 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(9 [pid 372] close(9 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(10 [pid 372] close(10 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(11 [pid 372] close(11 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(12 [pid 372] close(12 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(13 [pid 372] close(13 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(14 [pid 372] close(14 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(15 [pid 372] close(15 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(16 [pid 372] close(16 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(17 [pid 372] close(17 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(18 [pid 372] close(18 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(19 [pid 372] close(19 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(20 [pid 372] close(20 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(21 [pid 372] close(21 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(22 [pid 372] close(22 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(23 [pid 372] close(23 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(24 [pid 372] close(24 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(25 [pid 372] close(25 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(26 [pid 372] close(26 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(27 [pid 372] close(27 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(28 [pid 372] close(28 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] close(29 [pid 372] close(29 [pid 370] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] exit_group(0 [pid 372] exit_group(0 [pid 370] <... exit_group resumed>) = ? [ 29.354076][ T371] loop2: p4 start 1426063360 is beyond EOD, truncated [ 29.366912][ T370] loop3: p4 start 1426063360 is beyond EOD, truncated [ 29.374326][ T372] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 372] <... exit_group resumed>) = ? [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p3" [pid 370] +++ exited with 0 +++ [pid 372] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 371] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- [pid 371] symlink("/dev/loop2p3", "./file2" [pid 316] <... restart_syscall resumed>) = 0 [pid 316] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] <... symlink resumed>) = 0 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/file4") = 0 [pid 316] umount2("./8/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/file3") = 0 [pid 316] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/file2") = 0 [pid 316] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/file1") = 0 [pid 316] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/file0") = 0 [pid 316] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/binderfs") = 0 [pid 316] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/cgroup.net") = 0 [pid 316] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/cgroup.cpu") = 0 [pid 316] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p4" [pid 316] newfstatat(AT_FDCWD, "./8/cgroup" [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./8/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./8") = 0 [pid 316] mkdir("./9", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 373] <... write resumed>) = 16777216 [pid 371] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p5" [pid 312] <... openat resumed>) = 3 [pid 371] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 312] fstat(3 [pid 371] symlink("/dev/loop2p5", "./file3" [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 371] <... symlink resumed>) = 0 [pid 312] getdents64(3 [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p6" [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 371] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 373] munmap(0x7f96da85b000, 138412032 [pid 371] symlink("/dev/loop2p6", "./file4" [pid 312] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 373] <... munmap resumed>) = 0 [pid 371] <... symlink resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "/dev/loop2p7" [pid 312] newfstatat(AT_FDCWD, "./8/file4" [pid 371] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] close(4 [pid 312] unlink("./8/file4" [pid 371] <... close resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 312] umount2("./8/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./8/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./8/file3") = 0 [pid 373] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 312] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 4 [pid 373] ioctl(4, LOOP_SET_FD, 3 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./8/file2") = 0 [pid 312] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] close(3 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./8/file1" [pid 371] close(4 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] unlink("./8/file1" [pid 371] close(5 [pid 312] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] close(6 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./8/file0" [pid 371] close(7 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] unlink("./8/file0" [pid 371] close(8 [pid 312] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] close(9 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./8/binderfs" [pid 371] close(10 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] unlink("./8/binderfs" [pid 371] close(11 [pid 312] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] close(12 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./8/cgroup.net" [pid 371] close(13 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] unlink("./8/cgroup.net" [pid 371] close(14 [pid 312] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] close(15 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./8/cgroup.cpu" [pid 371] close(16 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] unlink("./8/cgroup.cpu" [pid 371] close(17 [pid 312] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] close(18 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./8/cgroup" [pid 371] close(19 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] unlink("./8/cgroup" [pid 371] close(20 [pid 312] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] getdents64(3 [pid 371] close(21 [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(3 [pid 371] close(22 [pid 312] <... close resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] rmdir("./8" [pid 371] close(23 [pid 312] <... rmdir resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] mkdir("./9", 0777 [pid 371] close(24 [pid 312] <... mkdir resumed>) = 0 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 371] close(25 [pid 312] <... openat resumed>) = 3 [pid 371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] ioctl(3, LOOP_CLR_FD [pid 371] close(26) = -1 EBADF (Bad file descriptor) [pid 371] close(27) = -1 EBADF (Bad file descriptor) [pid 371] close(28) = -1 EBADF (Bad file descriptor) [pid 371] close(29) = -1 EBADF (Bad file descriptor) [pid 371] exit_group(0) = ? [pid 371] +++ exited with 0 +++ [pid 316] <... openat resumed>) = 3 [pid 316] ioctl(3, LOOP_CLR_FD [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=9 /* 0.09 s */} --- [pid 373] <... ioctl resumed>) = 0 [pid 373] close(3) = 0 [pid 373] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 373] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 315] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/file4") = 0 [pid 315] umount2("./7/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/file3") = 0 [pid 315] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/file2") = 0 [pid 315] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/file1") = 0 [pid 374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 315] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/file0") = 0 [pid 315] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/binderfs") = 0 [pid 315] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/cgroup.net") = 0 [pid 315] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/cgroup.cpu") = 0 [pid 315] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./7/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./7") = 0 [pid 315] mkdir("./8", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [ 29.405561][ T103] loop3: p1 p2 p3 < p5 p6 > p4 [ 29.422760][ T103] loop3: p2 size 16777216 extends beyond EOD, truncated [ 29.431482][ T103] loop3: p4 start 1426063360 is beyond EOD, truncated [ 29.442208][ T373] set_capacity_and_notify: 32 callbacks suppressed [ 29.442221][ T373] loop4: detected capacity change from 0 to 32768 [pid 315] ioctl(3, LOOP_CLR_FD [pid 374] <... write resumed>) = 16777216 [pid 374] munmap(0x7f96da85b000, 138412032) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 374] ioctl(4, LOOP_SET_FD, 3) = 0 [ 29.493987][ T373] loop4: p1 p2 p3 < p5 p6 > p4 [ 29.504569][ T103] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.513932][ T103] Buffer I/O error on dev loop0, logical block 0, async page read [ 29.514496][ T373] loop4: p2 size 16777216 extends beyond EOD, truncated [ 29.522961][ T103] loop0: unable to read partition table [ 29.534773][ T374] loop1: detected capacity change from 0 to 32768 [pid 374] close(3) = 0 [pid 374] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [ 29.541570][ T103] loop0: partition table beyond EOD, truncated [pid 374] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 373] <... ioctl resumed>) = 0 [pid 316] <... ioctl resumed>) = 0 [ 29.565175][ T373] loop4: p4 start 1426063360 is beyond EOD, truncated [ 29.603984][ T374] loop1: p1 p2 p3 < p5 p6 > p4 [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 316] close(3 [pid 373] symlink("/dev/loop4p1", "./file0" [pid 316] <... close resumed>) = 0 [pid 373] <... symlink resumed>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p2" [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 373] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] symlink("/dev/loop4p2", "./file1") = 0 [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 373] symlink("/dev/loop4p3", "./file2") = 0 [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p4"ci2-android-6-1/strace-static-x86_64: Process 375 attached , 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 11 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 375] set_robust_list(0x55557fa896a0, 24 [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p5" [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 375] <... set_robust_list resumed>) = 0 [pid 373] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 373] symlink("/dev/loop4p5", "./file3" [pid 375] rt_sigprocmask(SIG_SETMASK, [] [pid 373] <... symlink resumed>) = 0 [pid 375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 375] chdir("./9") = 0 [pid 373] symlink("/dev/loop4p6", "./file4" [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] <... symlink resumed>) = 0 [pid 373] newfstatat(AT_FDCWD, "/dev/loop4p7" [pid 375] <... prctl resumed>) = 0 [pid 373] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 375] setpgid(0, 0) = 0 [pid 373] close(4) = 0 [pid 373] close(3 [pid 375] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... symlink resumed>) = 0 [pid 373] close(4 [pid 375] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 373] close(5 [pid 375] <... symlink resumed>) = 0 [pid 375] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 373] close(6 [pid 375] <... symlink resumed>) = 0 [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 373] close(7 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... openat resumed>) = 3 [pid 373] close(8 [pid 375] write(3, "1000", 4 [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... write resumed>) = 4 [pid 373] close(9 [pid 375] close(3 [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... close resumed>) = 0 [pid 373] close(10 [pid 375] symlink("/dev/binderfs", "./binderfs" [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... symlink resumed>) = 0 [pid 373] close(11 [pid 375] write(1, "executing program\n", 18 [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... write resumed>) = 18 [pid 373] close(12 [pid 375] memfd_create("syzkaller", 0 [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... memfd_create resumed>) = 3 [pid 373] close(13 [pid 375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 373] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 375] <... mmap resumed>) = 0x7f96da85b000 [pid 373] close(14) = -1 EBADF (Bad file descriptor) [pid 373] close(15) = -1 EBADF (Bad file descriptor) [pid 373] close(16) = -1 EBADF (Bad file descriptor) [pid 373] close(17) = -1 EBADF (Bad file descriptor) [pid 373] close(18) = -1 EBADF (Bad file descriptor) [pid 373] close(19) = -1 EBADF (Bad file descriptor) [pid 373] close(20) = -1 EBADF (Bad file descriptor) [pid 373] close(21) = -1 EBADF (Bad file descriptor) [pid 373] close(22) = -1 EBADF (Bad file descriptor) [pid 373] close(23) = -1 EBADF (Bad file descriptor) [pid 373] close(24) = -1 EBADF (Bad file descriptor) [pid 373] close(25) = -1 EBADF (Bad file descriptor) [pid 373] close(26) = -1 EBADF (Bad file descriptor) [pid 373] close(27) = -1 EBADF (Bad file descriptor) [pid 373] close(28) = -1 EBADF (Bad file descriptor) [pid 373] close(29) = -1 EBADF (Bad file descriptor) [pid 373] exit_group(0) = ? [pid 373] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=11 /* 0.11 s */} --- [ 29.611354][ T374] loop1: p2 size 16777216 extends beyond EOD, truncated [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] <... ioctl resumed>) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./8/file4") = 0 [pid 317] umount2("./8/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./8/file3") = 0 [pid 317] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./8/file2") = 0 [pid 317] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./8/file1") = 0 [pid 317] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./8/file0") = 0 [pid 317] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 10 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./8/binderfs" [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 317] <... unlink resumed>) = 0 [pid 317] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./8/cgroup.net"ci2-android-6-1/strace-static-x86_64: Process 376 attached , {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 376] set_robust_list(0x55557fa896a0, 24 [pid 317] unlink("./8/cgroup.net" [pid 376] <... set_robust_list resumed>) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] <... unlink resumed>) = 0 [pid 317] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 376] chdir("./8" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... chdir resumed>) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 317] newfstatat(AT_FDCWD, "./8/cgroup.cpu" [pid 376] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 376] <... symlink resumed>) = 0 [pid 376] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 317] unlink("./8/cgroup.cpu") = 0 [pid 376] <... symlink resumed>) = 0 [pid 376] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 317] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 376] <... symlink resumed>) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... openat resumed>) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 317] newfstatat(AT_FDCWD, "./8/cgroup" [pid 376] symlink("/dev/binderfs", "./binderfs" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 376] <... symlink resumed>) = 0 [pid 317] unlink("./8/cgroup" [pid 376] write(1, "executing program\n", 18) = 18 executing program [pid 317] <... unlink resumed>) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 376] memfd_create("syzkaller", 0 [pid 317] close(3) = 0 [pid 317] rmdir("./8" [pid 376] <... memfd_create resumed>) = 3 [pid 317] <... rmdir resumed>) = 0 [pid 376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 317] mkdir("./9", 0777 [pid 376] <... mmap resumed>) = 0x7f96da85b000 [pid 317] <... mkdir resumed>) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 374] <... ioctl resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p1" [pid 317] <... openat resumed>) = 3 [pid 374] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 317] ioctl(3, LOOP_CLR_FD [pid 374] symlink("/dev/loop1p1", "./file0" [pid 317] <... ioctl resumed>) = 0 [pid 374] <... symlink resumed>) = 0 [pid 317] close(3 [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p2" [pid 317] <... close resumed>) = 0 [pid 374] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[] [pid 374] symlink("/dev/loop1p2", "./file1" [pid 317] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 374] <... symlink resumed>) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p3"ci2-android-6-1/strace-static-x86_64: Process 377 attached , {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 11 [pid 377] set_robust_list(0x55557fa896a0, 24 [pid 374] symlink("/dev/loop1p3", "./file2") = 0 [pid 377] <... set_robust_list resumed>) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 377] rt_sigprocmask(SIG_SETMASK, [] [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p4" [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 377] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 374] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 377] chdir("./9" [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p5" [pid 377] <... chdir resumed>) = 0 [pid 374] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] symlink("/dev/loop1p5", "./file3" [pid 377] <... prctl resumed>) = 0 [pid 374] <... symlink resumed>) = 0 [pid 377] setpgid(0, 0) = 0 [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p6" [pid 377] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 374] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 377] <... symlink resumed>) = 0 [pid 374] symlink("/dev/loop1p6", "./file4" [pid 377] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 374] <... symlink resumed>) = 0 [pid 377] <... symlink resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "/dev/loop1p7" [pid 377] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 374] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 377] <... symlink resumed>) = 0 [pid 374] close(4 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 374] close(3 [pid 377] write(3, "1000", 4 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... write resumed>) = 4 [pid 374] close(4 [pid 377] close(3 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = 0 [pid 374] close(5 [pid 377] symlink("/dev/binderfs", "./binderfs" [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... symlink resumed>) = 0 [pid 374] close(6 executing program [ 29.646965][ T374] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 377] write(1, "executing program\n", 18) = 18 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... ioctl resumed>) = 0 [pid 374] close(7 [pid 377] memfd_create("syzkaller", 0 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(3 [pid 374] close(8 [pid 377] <... memfd_create resumed>) = 3 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] close(9 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] close(10 [pid 377] <... mmap resumed>) = 0x7f96da85b000 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] close(11 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 11 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x55557fa896a0, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] chdir("./9") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 378] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 378] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] write(1, "executing program\n", 18) = 18 [pid 378] memfd_create("syzkaller", 0) = 3 [pid 378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] close(12) = -1 EBADF (Bad file descriptor) [pid 374] close(13) = -1 EBADF (Bad file descriptor) [pid 374] close(14) = -1 EBADF (Bad file descriptor) [pid 374] close(15) = -1 EBADF (Bad file descriptor) [pid 374] close(16) = -1 EBADF (Bad file descriptor) [pid 374] close(17) = -1 EBADF (Bad file descriptor) [pid 374] close(18) = -1 EBADF (Bad file descriptor) [pid 374] close(19) = -1 EBADF (Bad file descriptor) [pid 374] close(20) = -1 EBADF (Bad file descriptor) [pid 374] close(21) = -1 EBADF (Bad file descriptor) [pid 374] close(22) = -1 EBADF (Bad file descriptor) [pid 374] close(23) = -1 EBADF (Bad file descriptor) [pid 374] close(24) = -1 EBADF (Bad file descriptor) [pid 374] close(25) = -1 EBADF (Bad file descriptor) [pid 374] close(26) = -1 EBADF (Bad file descriptor) [pid 374] close(27) = -1 EBADF (Bad file descriptor) [pid 374] close(28) = -1 EBADF (Bad file descriptor) executing program [pid 374] close(29) = -1 EBADF (Bad file descriptor) [pid 374] exit_group(0) = ? [pid 374] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=6 /* 0.06 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 314] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/file4") = 0 [pid 314] umount2("./8/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/file3") = 0 [pid 314] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/file2") = 0 [pid 314] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/file1") = 0 [pid 314] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/file0") = 0 [pid 314] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/binderfs") = 0 [pid 314] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/cgroup.net") = 0 [pid 314] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/cgroup.cpu") = 0 [pid 314] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./8/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./8") = 0 [pid 314] mkdir("./9", 0777) = 0 [ 29.706563][ T103] loop1: p1 p2 p3 < p5 p6 > p4 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 314] <... openat resumed>) = 3 [pid 314] ioctl(3, LOOP_CLR_FD) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x55557fa896a0, 24 [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 11 [pid 379] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 379] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 379] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 379] chdir("./9") = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 379] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 379] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 379] write(1, "executing program\n", 18) = 18 [pid 379] memfd_create("syzkaller", 0) = 3 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 29.743196][ T103] loop1: p2 size 16777216 extends beyond EOD, truncated [ 29.781946][ T103] loop1: p4 start 1426063360 is beyond EOD, truncated [ 29.823303][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 29.826362][ T341] udevd[341]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 29.843850][ T328] udevd[328]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 29.854711][ T324] udevd[324]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [pid 377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 375] <... write resumed>) = 16777216 [pid 375] munmap(0x7f96da85b000, 138412032) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 29.865579][ T335] udevd[335]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [pid 375] ioctl(4, LOOP_SET_FD, 3 [pid 378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 375] <... ioctl resumed>) = 0 [pid 375] close(3) = 0 [ 29.912573][ T375] loop3: detected capacity change from 0 to 32768 [ 29.937055][ T324] udevd[324]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 29.937885][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [pid 375] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [ 29.947748][ T336] udevd[336]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 29.967290][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 29.987897][ T341] udevd[341]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [pid 375] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [ 30.012900][ T375] loop3: p1 p2 p3 < p5 p6 > p4 [ 30.019640][ T375] loop3: p2 size 16777216 extends beyond EOD, truncated [pid 379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 375] <... ioctl resumed>) = 0 [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 375] symlink("/dev/loop3p1", "./file0") = 0 [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 375] symlink("/dev/loop3p2", "./file1") = 0 [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 375] symlink("/dev/loop3p3", "./file2") = 0 [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 375] symlink("/dev/loop3p5", "./file3") = 0 [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 375] symlink("/dev/loop3p6", "./file4") = 0 [pid 375] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 375] close(4) = 0 [pid 375] close(3) = -1 EBADF (Bad file descriptor) [pid 375] close(4) = -1 EBADF (Bad file descriptor) [pid 375] close(5) = -1 EBADF (Bad file descriptor) [pid 375] close(6) = -1 EBADF (Bad file descriptor) [pid 375] close(7) = -1 EBADF (Bad file descriptor) [pid 375] close(8) = -1 EBADF (Bad file descriptor) [pid 375] close(9) = -1 EBADF (Bad file descriptor) [pid 375] close(10) = -1 EBADF (Bad file descriptor) [pid 375] close(11) = -1 EBADF (Bad file descriptor) [pid 375] close(12) = -1 EBADF (Bad file descriptor) [pid 375] close(13) = -1 EBADF (Bad file descriptor) [pid 375] close(14) = -1 EBADF (Bad file descriptor) [pid 375] close(15) = -1 EBADF (Bad file descriptor) [pid 375] close(16) = -1 EBADF (Bad file descriptor) [pid 375] close(17) = -1 EBADF (Bad file descriptor) [pid 375] close(18) = -1 EBADF (Bad file descriptor) [pid 375] close(19) = -1 EBADF (Bad file descriptor) [pid 375] close(20) = -1 EBADF (Bad file descriptor) [pid 375] close(21) = -1 EBADF (Bad file descriptor) [pid 375] close(22) = -1 EBADF (Bad file descriptor) [pid 375] close(23) = -1 EBADF (Bad file descriptor) [pid 375] close(24) = -1 EBADF (Bad file descriptor) [pid 375] close(25) = -1 EBADF (Bad file descriptor) [pid 375] close(26) = -1 EBADF (Bad file descriptor) [pid 375] close(27) = -1 EBADF (Bad file descriptor) [pid 375] close(28) = -1 EBADF (Bad file descriptor) [pid 375] close(29) = -1 EBADF (Bad file descriptor) [pid 375] exit_group(0) = ? [pid 375] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/file4") = 0 [pid 316] umount2("./9/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/file3") = 0 [pid 316] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/file2") = 0 [pid 316] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/file1") = 0 [pid 316] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/file0") = 0 [pid 316] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/binderfs") = 0 [pid 316] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/cgroup.net") = 0 [pid 316] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/cgroup.cpu") = 0 [pid 316] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./9/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./9") = 0 [pid 316] mkdir("./10", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x55557fa896a0, 24 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 12 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 380] <... set_robust_list resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] chdir("./10") = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 380] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 380] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 380] write(1, "executing program\n", 18) = 18 [pid 380] memfd_create("syzkaller", 0) = 3 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 30.064624][ T375] loop3: p4 start 1426063360 is beyond EOD, truncated [pid 378] <... write resumed>) = 16777216 [pid 377] <... write resumed>) = 16777216 [pid 378] munmap(0x7f96da85b000, 138412032) = 0 [pid 378] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 378] ioctl(4, LOOP_SET_FD, 3 [pid 377] munmap(0x7f96da85b000, 138412032) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 377] ioctl(4, LOOP_SET_FD, 3 [pid 378] <... ioctl resumed>) = 0 [pid 378] close(3) = 0 [pid 378] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 378] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 377] <... ioctl resumed>) = 0 [pid 377] close(3) = 0 [pid 377] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 377] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 376] <... write resumed>) = 16777216 [pid 379] <... write resumed>) = 16777216 [pid 379] munmap(0x7f96da85b000, 138412032) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 30.139176][ T378] loop0: detected capacity change from 0 to 32768 [ 30.147869][ T377] loop4: detected capacity change from 0 to 32768 [pid 379] ioctl(4, LOOP_SET_FD, 3 [pid 376] munmap(0x7f96da85b000, 138412032 [pid 379] <... ioctl resumed>) = 0 [pid 379] close(3 [pid 376] <... munmap resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 376] ioctl(4, LOOP_SET_FD, 3 [pid 379] <... close resumed>) = 0 [pid 379] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 379] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 376] <... ioctl resumed>) = 0 [pid 376] close(3) = 0 [pid 376] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [ 30.183416][ T379] loop1: detected capacity change from 0 to 32768 [ 30.191452][ T376] loop2: detected capacity change from 0 to 32768 [ 30.198590][ T378] loop0: p1 p2 p3 < p5 p6 > p4 [ 30.203536][ T377] loop4: p1 p2 p3 < p5 p6 > p4 [ 30.212257][ T377] loop4: p2 size 16777216 extends beyond EOD, truncated [ 30.219617][ T378] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 376] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 378] <... ioctl resumed>) = 0 [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 377] <... ioctl resumed>) = 0 [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 377] symlink("/dev/loop4p1", "./file0") = 0 [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 377] symlink("/dev/loop4p2", "./file1") = 0 [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 377] symlink("/dev/loop4p3", "./file2") = 0 [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 377] symlink("/dev/loop4p5", "./file3") = 0 [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 377] symlink("/dev/loop4p6", "./file4") = 0 [pid 377] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 377] close(4) = 0 [pid 377] close(3) = -1 EBADF (Bad file descriptor) [pid 377] close(4) = -1 EBADF (Bad file descriptor) [pid 377] close(5) = -1 EBADF (Bad file descriptor) [pid 377] close(6) = -1 EBADF (Bad file descriptor) [pid 377] close(7) = -1 EBADF (Bad file descriptor) [pid 377] close(8) = -1 EBADF (Bad file descriptor) [pid 377] close(9) = -1 EBADF (Bad file descriptor) [pid 377] close(10) = -1 EBADF (Bad file descriptor) [pid 377] close(11) = -1 EBADF (Bad file descriptor) [pid 377] close(12) = -1 EBADF (Bad file descriptor) [pid 377] close(13) = -1 EBADF (Bad file descriptor) [pid 377] close(14) = -1 EBADF (Bad file descriptor) [pid 377] close(15) = -1 EBADF (Bad file descriptor) [pid 377] close(16) = -1 EBADF (Bad file descriptor) [pid 377] close(17) = -1 EBADF (Bad file descriptor) [pid 377] close(18) = -1 EBADF (Bad file descriptor) [pid 377] close(19) = -1 EBADF (Bad file descriptor) [pid 377] close(20) = -1 EBADF (Bad file descriptor) [pid 377] close(21) = -1 EBADF (Bad file descriptor) [pid 377] close(22) = -1 EBADF (Bad file descriptor) [pid 377] close(23) = -1 EBADF (Bad file descriptor) [pid 377] close(24) = -1 EBADF (Bad file descriptor) [pid 377] close(25) = -1 EBADF (Bad file descriptor) [pid 377] close(26) = -1 EBADF (Bad file descriptor) [pid 377] close(27) = -1 EBADF (Bad file descriptor) [pid 377] close(28) = -1 EBADF (Bad file descriptor) [pid 377] close(29) = -1 EBADF (Bad file descriptor) [pid 377] exit_group(0) = ? [pid 377] +++ exited with 0 +++ [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=3 /* 0.03 s */} --- [pid 317] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 378] symlink("/dev/loop0p1", "./file0" [pid 317] newfstatat(AT_FDCWD, "./9/file4" [pid 378] <... symlink resumed>) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p2" [pid 317] unlink("./9/file4" [pid 378] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 317] <... unlink resumed>) = 0 [pid 378] symlink("/dev/loop0p2", "./file1" [pid 317] umount2("./9/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... symlink resumed>) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p3" [pid 317] newfstatat(AT_FDCWD, "./9/file3" [pid 378] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] symlink("/dev/loop0p3", "./file2" [pid 317] unlink("./9/file3" [pid 378] <... symlink resumed>) = 0 [pid 317] <... unlink resumed>) = 0 [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p4" [pid 317] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p5" [pid 317] newfstatat(AT_FDCWD, "./9/file2" [pid 378] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] symlink("/dev/loop0p5", "./file3" [pid 317] unlink("./9/file2" [pid 378] <... symlink resumed>) = 0 [pid 317] <... unlink resumed>) = 0 [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p6" [pid 317] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] symlink("/dev/loop0p6", "./file4" [pid 317] newfstatat(AT_FDCWD, "./9/file1" [pid 378] <... symlink resumed>) = 0 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] newfstatat(AT_FDCWD, "/dev/loop0p7" [pid 317] unlink("./9/file1" [pid 378] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 317] <... unlink resumed>) = 0 [pid 378] close(4 [pid 317] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = 0 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] close(3 [pid 317] newfstatat(AT_FDCWD, "./9/file0" [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] close(4 [pid 317] unlink("./9/file0" [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... unlink resumed>) = 0 [pid 378] close(5 [pid 317] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] close(6 [pid 317] newfstatat(AT_FDCWD, "./9/binderfs" [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] close(7 [pid 317] unlink("./9/binderfs" [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... unlink resumed>) = 0 [pid 378] close(8 [pid 317] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] close(9 [pid 317] newfstatat(AT_FDCWD, "./9/cgroup.net" [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] close(10) = -1 EBADF (Bad file descriptor) [pid 317] unlink("./9/cgroup.net" [pid 378] close(11 [pid 317] <... unlink resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] close(12 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] newfstatat(AT_FDCWD, "./9/cgroup.cpu" [pid 378] close(13 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] unlink("./9/cgroup.cpu" [pid 378] close(14 [pid 317] <... unlink resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] close(15 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] newfstatat(AT_FDCWD, "./9/cgroup" [pid 378] close(16 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] unlink("./9/cgroup" [pid 378] close(17 [pid 317] <... unlink resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] getdents64(3 [pid 378] close(18 [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] close(3 [pid 378] close(19 [pid 317] <... close resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] rmdir("./9" [pid 378] close(20 [pid 317] <... rmdir resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 30.236381][ T378] loop0: p4 start 1426063360 is beyond EOD, truncated [ 30.243456][ T377] loop4: p4 start 1426063360 is beyond EOD, truncated [ 30.250760][ T379] loop1: p1 p2 p3 < p5 p6 > p4 [ 30.259854][ T379] loop1: p2 size 16777216 extends beyond EOD, truncated [ 30.271262][ T376] loop2: p1 p2 p3 < p5 p6 > p4 [pid 317] mkdir("./10", 0777 [pid 378] close(21 [pid 317] <... mkdir resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 378] close(22 [pid 317] <... openat resumed>) = 3 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] ioctl(3, LOOP_CLR_FD [pid 378] close(23 [pid 317] <... ioctl resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] close(3 [pid 378] close(24 [pid 317] <... close resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] rt_sigprocmask(SIG_BLOCK, ~[] [pid 378] close(25 [pid 317] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 378] close(26) = -1 EBADF (Bad file descriptor) [pid 378] close(27 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 12 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(28 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(29 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] exit_group(0) = ? [pid 378] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=12 /* 0.12 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-android-6-1/strace-static-x86_64: Process 381 attached ) = 0 [pid 381] set_robust_list(0x55557fa896a0, 24) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [] [pid 312] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 381] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 381] chdir("./10" [pid 312] <... openat resumed>) = 3 [pid 381] <... chdir resumed>) = 0 [pid 312] fstat(3 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 381] <... prctl resumed>) = 0 [pid 312] getdents64(3 [pid 381] setpgid(0, 0 [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 381] <... setpgid resumed>) = 0 [pid 312] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 381] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 381] <... symlink resumed>) = 0 [pid 312] newfstatat(AT_FDCWD, "./9/file4" [pid 381] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 381] <... symlink resumed>) = 0 [pid 312] unlink("./9/file4" [pid 381] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 312] <... unlink resumed>) = 0 [pid 381] <... symlink resumed>) = 0 [pid 312] umount2("./9/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 381] <... openat resumed>) = 3 [pid 312] newfstatat(AT_FDCWD, "./9/file3" [pid 381] write(3, "1000", 4 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/file3") = 0 [pid 312] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/file2") = 0 [pid 312] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/file1") = 0 [pid 312] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/file0") = 0 [pid 312] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/binderfs") = 0 [pid 312] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/cgroup.net") = 0 [pid 312] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/cgroup.cpu") = 0 [pid 312] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./9/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./9") = 0 [pid 312] mkdir("./10", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 382 attached [pid 381] <... write resumed>) = 4 [pid 382] set_robust_list(0x55557fa896a0, 24 [pid 381] close(3 [pid 312] <... clone resumed>, child_tidptr=0x55557fa89690) = 12 [pid 382] <... set_robust_list resumed>) = 0 [pid 381] <... close resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 382] rt_sigprocmask(SIG_SETMASK, [] [pid 381] symlink("/dev/binderfs", "./binderfs" [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 382] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 381] <... symlink resumed>) = 0 [pid 382] chdir("./10" [pid 381] write(1, "executing program\n", 18 [pid 382] <... chdir resumed>) = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 382] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 382] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] write(1, "executing program\n", 18) = 18 executing program [pid 382] memfd_create("syzkaller", 0) = 3 [pid 382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 381] <... write resumed>) = 18 executing program [pid 381] memfd_create("syzkaller", 0) = 3 [pid 381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 376] <... ioctl resumed>) = 0 [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 376] symlink("/dev/loop2p1", "./file0") = 0 [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 376] symlink("/dev/loop2p2", "./file1") = 0 [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xf), ...}, 0) = 0 [pid 376] symlink("/dev/loop2p3", "./file2") = 0 [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 379] <... ioctl resumed>) = 0 [pid 376] symlink("/dev/loop2p5", "./file3" [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 376] <... symlink resumed>) = 0 [pid 379] symlink("/dev/loop1p1", "./file0" [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p6" [pid 379] <... symlink resumed>) = 0 [pid 376] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p2" [pid 376] symlink("/dev/loop2p6", "./file4" [pid 379] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 379] symlink("/dev/loop1p2", "./file1" [pid 376] <... symlink resumed>) = 0 [pid 379] <... symlink resumed>) = 0 [pid 376] newfstatat(AT_FDCWD, "/dev/loop2p7" [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 376] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 379] symlink("/dev/loop1p3", "./file2" [pid 376] close(4 [pid 379] <... symlink resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p4" [pid 376] close(3 [pid 379] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p5" [pid 376] close(4 [pid 379] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] symlink("/dev/loop1p5", "./file3" [pid 376] close(5 [pid 379] <... symlink resumed>) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p6" [pid 376] close(6 [pid 379] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x10), ...}, 0) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] symlink("/dev/loop1p6", "./file4" [ 30.303284][ T376] loop2: p2 size 16777216 extends beyond EOD, truncated [ 30.319770][ T379] loop1: p4 start 1426063360 is beyond EOD, truncated [ 30.331716][ T376] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 376] close(7 [pid 379] <... symlink resumed>) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] newfstatat(AT_FDCWD, "/dev/loop1p7" [pid 376] close(8 [pid 379] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] close(4 [pid 376] close(9) = -1 EBADF (Bad file descriptor) [pid 376] close(10) = -1 EBADF (Bad file descriptor) [pid 376] close(11) = -1 EBADF (Bad file descriptor) [pid 376] close(12) = -1 EBADF (Bad file descriptor) [pid 376] close(13) = -1 EBADF (Bad file descriptor) [pid 376] close(14) = -1 EBADF (Bad file descriptor) [pid 376] close(15) = -1 EBADF (Bad file descriptor) [pid 376] close(16) = -1 EBADF (Bad file descriptor) [pid 376] close(17) = -1 EBADF (Bad file descriptor) [pid 376] close(18) = -1 EBADF (Bad file descriptor) [pid 376] close(19) = -1 EBADF (Bad file descriptor) [pid 376] close(20) = -1 EBADF (Bad file descriptor) [pid 376] close(21) = -1 EBADF (Bad file descriptor) [pid 376] close(22) = -1 EBADF (Bad file descriptor) [pid 376] close(23) = -1 EBADF (Bad file descriptor) [pid 376] close(24) = -1 EBADF (Bad file descriptor) [pid 376] close(25) = -1 EBADF (Bad file descriptor) [pid 376] close(26) = -1 EBADF (Bad file descriptor) [pid 376] close(27) = -1 EBADF (Bad file descriptor) [pid 376] close(28) = -1 EBADF (Bad file descriptor) [pid 376] close(29) = -1 EBADF (Bad file descriptor) [pid 376] exit_group(0) = ? [pid 376] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/file4") = 0 [pid 315] umount2("./8/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/file3") = 0 [pid 315] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/file2") = 0 [pid 315] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/file1") = 0 [pid 315] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/file0") = 0 [pid 315] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/binderfs") = 0 [pid 315] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/cgroup.net") = 0 [pid 315] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/cgroup.cpu") = 0 [pid 315] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./8/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./8") = 0 [pid 315] mkdir("./9", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x55557fa896a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] chdir("./9" [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 11 [pid 383] <... chdir resumed>) = 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 383] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 383] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 383] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 383] write(1, "executing program\n", 18) = 18 executing program [pid 383] memfd_create("syzkaller", 0) = 3 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 380] <... write resumed>) = 16777216 [pid 379] <... close resumed>) = 0 [pid 379] close(3) = -1 EBADF (Bad file descriptor) [pid 379] close(4) = -1 EBADF (Bad file descriptor) [pid 379] close(5) = -1 EBADF (Bad file descriptor) [pid 379] close(6) = -1 EBADF (Bad file descriptor) [pid 379] close(7) = -1 EBADF (Bad file descriptor) [pid 379] close(8) = -1 EBADF (Bad file descriptor) [pid 379] close(9) = -1 EBADF (Bad file descriptor) [pid 379] close(10) = -1 EBADF (Bad file descriptor) [pid 379] close(11) = -1 EBADF (Bad file descriptor) [pid 379] close(12) = -1 EBADF (Bad file descriptor) [pid 379] close(13) = -1 EBADF (Bad file descriptor) [pid 379] close(14) = -1 EBADF (Bad file descriptor) [pid 379] close(15) = -1 EBADF (Bad file descriptor) [pid 379] close(16) = -1 EBADF (Bad file descriptor) [pid 379] close(17) = -1 EBADF (Bad file descriptor) [pid 379] close(18) = -1 EBADF (Bad file descriptor) [pid 379] close(19) = -1 EBADF (Bad file descriptor) [pid 379] close(20) = -1 EBADF (Bad file descriptor) [pid 379] close(21) = -1 EBADF (Bad file descriptor) [pid 379] close(22) = -1 EBADF (Bad file descriptor) [pid 379] close(23) = -1 EBADF (Bad file descriptor) [pid 379] close(24) = -1 EBADF (Bad file descriptor) [pid 379] close(25) = -1 EBADF (Bad file descriptor) [pid 379] close(26) = -1 EBADF (Bad file descriptor) [pid 379] close(27) = -1 EBADF (Bad file descriptor) [pid 379] close(28) = -1 EBADF (Bad file descriptor) [pid 379] close(29) = -1 EBADF (Bad file descriptor) [pid 379] exit_group(0) = ? [ 30.388061][ T103] loop1: p1 p2 p3 < p5 p6 > p4 [ 30.395024][ T103] loop1: p2 size 16777216 extends beyond EOD, truncated [ 30.422780][ T103] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 379] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- [pid 314] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/file4") = 0 [pid 314] umount2("./9/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/file3") = 0 [pid 314] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/file2") = 0 [pid 314] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/file1") = 0 [pid 314] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/file0") = 0 [pid 314] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/binderfs") = 0 [pid 314] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/cgroup.net") = 0 [pid 314] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/cgroup.cpu") = 0 [pid 314] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./9/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./9") = 0 [pid 314] mkdir("./10", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 314] ioctl(3, LOOP_CLR_FD [pid 380] munmap(0x7f96da85b000, 138412032) = 0 [pid 380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 380] ioctl(4, LOOP_SET_FD, 3 [ 30.496523][ T380] loop3: detected capacity change from 0 to 32768 [ 30.522948][ T314] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 30.523125][ T328] I/O error, dev loop1, sector 10510 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [pid 381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 380] <... ioctl resumed>) = 0 [pid 380] close(3) = 0 [pid 380] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 380] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 30.530084][ T335] I/O error, dev loop1, sector 4872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.559992][ T328] I/O error, dev loop1, sector 10510 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.581868][ T328] Buffer I/O error on dev loop1p6, logical block 1, async page read [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 314] <... ioctl resumed>) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 12 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x55557fa896a0, 24) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] chdir("./10") = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 384] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 384] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 384] write(1, "executing program\n", 18) = 18 [pid 384] memfd_create("syzkaller", 0) = 3 [pid 384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 381] <... write resumed>) = 16777216 [ 30.598543][ T335] I/O error, dev loop1, sector 4872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.622327][ T380] loop3: p1 p2 p3 < p5 p6 > p4 [ 30.627457][ T335] Buffer I/O error on dev loop1p5, logical block 1, async page read [ 30.635673][ T380] loop3: p2 size 16777216 extends beyond EOD, truncated [pid 381] munmap(0x7f96da85b000, 138412032) = 0 [pid 381] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 381] ioctl(4, LOOP_SET_FD, 3 [pid 380] <... ioctl resumed>) = 0 [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 380] symlink("/dev/loop3p1", "./file0") = 0 [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 380] symlink("/dev/loop3p2", "./file1") = 0 [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 380] symlink("/dev/loop3p3", "./file2") = 0 [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 380] symlink("/dev/loop3p5", "./file3") = 0 [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 380] symlink("/dev/loop3p6", "./file4") = 0 [pid 380] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 380] close(4 [pid 381] <... ioctl resumed>) = 0 [pid 381] close(3 [pid 380] <... close resumed>) = 0 [pid 380] close(3 [pid 381] <... close resumed>) = 0 [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] ioctl(4, LOOP_GET_STATUS64 [pid 380] close(4 [pid 381] <... ioctl resumed>, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 381] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] close(5) = -1 EBADF (Bad file descriptor) [pid 380] close(6) = -1 EBADF (Bad file descriptor) [pid 380] close(7) = -1 EBADF (Bad file descriptor) [pid 380] close(8) = -1 EBADF (Bad file descriptor) [pid 380] close(9) = -1 EBADF (Bad file descriptor) [pid 380] close(10) = -1 EBADF (Bad file descriptor) [pid 380] close(11) = -1 EBADF (Bad file descriptor) [pid 380] close(12) = -1 EBADF (Bad file descriptor) [pid 380] close(13) = -1 EBADF (Bad file descriptor) [pid 380] close(14) = -1 EBADF (Bad file descriptor) [pid 380] close(15) = -1 EBADF (Bad file descriptor) [pid 380] close(16) = -1 EBADF (Bad file descriptor) [pid 380] close(17) = -1 EBADF (Bad file descriptor) [pid 380] close(18) = -1 EBADF (Bad file descriptor) [pid 380] close(19) = -1 EBADF (Bad file descriptor) [pid 380] close(20) = -1 EBADF (Bad file descriptor) [pid 380] close(21) = -1 EBADF (Bad file descriptor) [pid 380] close(22) = -1 EBADF (Bad file descriptor) [ 30.669348][ T380] loop3: p4 start 1426063360 is beyond EOD, truncated [ 30.685943][ T381] loop4: detected capacity change from 0 to 32768 [pid 380] close(23) = -1 EBADF (Bad file descriptor) [pid 380] close(24) = -1 EBADF (Bad file descriptor) [pid 380] close(25) = -1 EBADF (Bad file descriptor) [pid 380] close(26) = -1 EBADF (Bad file descriptor) [pid 380] close(27) = -1 EBADF (Bad file descriptor) [pid 380] close(28) = -1 EBADF (Bad file descriptor) [pid 380] close(29) = -1 EBADF (Bad file descriptor) [pid 380] exit_group(0) = ? [pid 380] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 383] <... write resumed>) = 16777216 [pid 383] munmap(0x7f96da85b000, 138412032 [pid 316] <... restart_syscall resumed>) = 0 [pid 316] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 383] <... munmap resumed>) = 0 [pid 316] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 383] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 316] newfstatat(AT_FDCWD, "./10/file4" [pid 383] <... openat resumed>) = 4 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 383] ioctl(4, LOOP_SET_FD, 3 [pid 316] unlink("./10/file4") = 0 [pid 316] umount2("./10/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/file3") = 0 [pid 316] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/file2") = 0 [pid 316] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/file1") = 0 [pid 316] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/file0") = 0 [pid 316] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/binderfs") = 0 [pid 316] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/cgroup.net") = 0 [pid 316] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/cgroup.cpu") = 0 [pid 316] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./10/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./10") = 0 [pid 316] mkdir("./11", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD [pid 382] <... write resumed>) = 16777216 [pid 382] munmap(0x7f96da85b000, 138412032) = 0 [pid 382] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 383] <... ioctl resumed>) = 0 [pid 383] close(3) = 0 [pid 382] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 382] close(3) = 0 [pid 382] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 382] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 383] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 383] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [ 30.745814][ T383] loop2: detected capacity change from 0 to 32768 [ 30.762439][ T381] loop4: p1 p2 p3 < p5 p6 > p4 [ 30.768208][ T381] loop4: p2 size 16777216 extends beyond EOD, truncated [ 30.775982][ T325] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.787030][ T381] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 381] <... ioctl resumed>) = 0 [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 381] symlink("/dev/loop4p1", "./file0") = 0 [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 381] symlink("/dev/loop4p2", "./file1") = 0 [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 381] symlink("/dev/loop4p3", "./file2") = 0 [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 381] symlink("/dev/loop4p5", "./file3") = 0 [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 381] symlink("/dev/loop4p6", "./file4") = 0 [pid 381] newfstatat(AT_FDCWD, "/dev/loop4p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 381] close(4) = 0 [pid 381] close(3) = -1 EBADF (Bad file descriptor) [pid 381] close(4) = -1 EBADF (Bad file descriptor) [pid 381] close(5) = -1 EBADF (Bad file descriptor) [pid 381] close(6) = -1 EBADF (Bad file descriptor) [pid 381] close(7) = -1 EBADF (Bad file descriptor) [pid 381] close(8) = -1 EBADF (Bad file descriptor) [pid 381] close(9) = -1 EBADF (Bad file descriptor) [pid 381] close(10) = -1 EBADF (Bad file descriptor) [pid 381] close(11) = -1 EBADF (Bad file descriptor) [pid 381] close(12) = -1 EBADF (Bad file descriptor) [pid 381] close(13) = -1 EBADF (Bad file descriptor) [pid 381] close(14) = -1 EBADF (Bad file descriptor) [pid 381] close(15) = -1 EBADF (Bad file descriptor) [pid 381] close(16) = -1 EBADF (Bad file descriptor) [pid 381] close(17) = -1 EBADF (Bad file descriptor) [pid 381] close(18) = -1 EBADF (Bad file descriptor) [pid 381] close(19) = -1 EBADF (Bad file descriptor) [pid 381] close(20) = -1 EBADF (Bad file descriptor) [pid 381] close(21) = -1 EBADF (Bad file descriptor) [pid 381] close(22) = -1 EBADF (Bad file descriptor) [pid 381] close(23) = -1 EBADF (Bad file descriptor) [pid 381] close(24) = -1 EBADF (Bad file descriptor) [pid 381] close(25) = -1 EBADF (Bad file descriptor) [pid 381] close(26) = -1 EBADF (Bad file descriptor) [pid 381] close(27) = -1 EBADF (Bad file descriptor) [pid 381] close(28) = -1 EBADF (Bad file descriptor) [pid 381] close(29) = -1 EBADF (Bad file descriptor) [pid 381] exit_group(0) = ? [pid 381] +++ exited with 0 +++ [ 30.809335][ T383] loop2: p1 p2 p3 < p5 p6 > p4 [ 30.818606][ T383] loop2: p2 size 16777216 extends beyond EOD, truncated [ 30.826516][ T382] loop0: p1 p2 p3 < p5 p6 > p4 [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=11 /* 0.11 s */} --- [pid 317] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 317] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/file4") = 0 [pid 317] umount2("./10/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/file3") = 0 [pid 317] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/file2") = 0 [pid 317] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/file1") = 0 [pid 317] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/file0") = 0 [pid 317] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/binderfs") = 0 [pid 317] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/cgroup.net") = 0 [pid 317] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/cgroup.cpu") = 0 [pid 317] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./10/cgroup") = 0 [pid 317] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3) = 0 [pid 317] rmdir("./10") = 0 [pid 317] mkdir("./11", 0777) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 13 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x55557fa896a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] chdir("./11") = 0 [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 385] setpgid(0, 0) = 0 [pid 385] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 383] <... ioctl resumed>) = 0 [pid 385] <... symlink resumed>) = 0 [pid 384] <... write resumed>) = 16777216 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p1" [pid 385] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 383] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 385] <... symlink resumed>) = 0 [pid 383] symlink("/dev/loop2p1", "./file0" [pid 385] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 383] <... symlink resumed>) = 0 [pid 385] <... symlink resumed>) = 0 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p2" [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 383] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 385] <... openat resumed>) = 3 [pid 383] symlink("/dev/loop2p2", "./file1" [pid 385] write(3, "1000", 4) = 4 [pid 383] <... symlink resumed>) = 0 [pid 385] close(3 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p3" [pid 385] <... close resumed>) = 0 [pid 385] symlink("/dev/binderfs", "./binderfs" [pid 383] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 executing program [pid 385] <... symlink resumed>) = 0 [pid 385] write(1, "executing program\n", 18 [pid 383] symlink("/dev/loop2p3", "./file2" [pid 385] <... write resumed>) = 18 [pid 383] <... symlink resumed>) = 0 [pid 385] memfd_create("syzkaller", 0 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p4" [pid 385] <... memfd_create resumed>) = 3 [pid 383] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p5" [pid 385] <... mmap resumed>) = 0x7f96da85b000 [pid 383] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 383] symlink("/dev/loop2p5", "./file3") = 0 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 384] munmap(0x7f96da85b000, 138412032 [pid 383] symlink("/dev/loop2p6", "./file4" [pid 316] <... ioctl resumed>) = 0 [pid 383] <... symlink resumed>) = 0 [pid 316] close(3 [pid 383] newfstatat(AT_FDCWD, "/dev/loop2p7" [pid 316] <... close resumed>) = 0 [pid 384] <... munmap resumed>) = 0 [pid 383] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 384] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 383] close(4 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 384] <... openat resumed>) = 4 [pid 383] <... close resumed>) = 0 [ 30.852801][ T383] loop2: p4 start 1426063360 is beyond EOD, truncated [ 30.873761][ T382] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 384] ioctl(4, LOOP_SET_FD, 3 [pid 383] close(3 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 384] <... ioctl resumed>) = 0 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(3 [pid 383] close(4) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 386 attached [pid 384] ioctl(4, LOOP_GET_STATUS64 [pid 383] close(5 [pid 386] set_robust_list(0x55557fa896a0, 24 [pid 384] <... ioctl resumed>, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 13 [pid 384] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 383] close(6 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 383] close(7) = -1 EBADF (Bad file descriptor) [pid 386] <... set_robust_list resumed>) = 0 [pid 383] close(8) = -1 EBADF (Bad file descriptor) [pid 386] rt_sigprocmask(SIG_SETMASK, [] [pid 383] close(9) = -1 EBADF (Bad file descriptor) [pid 386] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 383] close(10) = -1 EBADF (Bad file descriptor) [pid 386] chdir("./11" [pid 383] close(11) = -1 EBADF (Bad file descriptor) [pid 386] <... chdir resumed>) = 0 [pid 383] close(12 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... prctl resumed>) = 0 [pid 383] close(13 [pid 386] setpgid(0, 0 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... setpgid resumed>) = 0 [pid 383] close(14 [pid 386] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... symlink resumed>) = 0 [pid 383] close(15 [pid 386] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... symlink resumed>) = 0 [pid 383] close(16 [pid 386] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... symlink resumed>) = 0 [pid 383] close(17 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... openat resumed>) = 3 [pid 383] close(18 [pid 386] write(3, "1000", 4 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... write resumed>) = 4 [pid 383] close(19 [pid 386] close(3 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = 0 [pid 383] close(20 [pid 386] symlink("/dev/binderfs", "./binderfs" [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... symlink resumed>) = 0 [pid 383] close(21 [pid 386] write(1, "executing program\n", 18 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 386] <... write resumed>) = 18 [pid 383] close(22 [pid 386] memfd_create("syzkaller", 0 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... memfd_create resumed>) = 3 [pid 383] close(23 [pid 386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... mmap resumed>) = 0x7f96da85b000 [pid 383] close(24) = -1 EBADF (Bad file descriptor) [pid 383] close(25) = -1 EBADF (Bad file descriptor) [pid 383] close(26) = -1 EBADF (Bad file descriptor) [pid 383] close(27) = -1 EBADF (Bad file descriptor) [pid 383] close(28) = -1 EBADF (Bad file descriptor) [pid 383] close(29) = -1 EBADF (Bad file descriptor) [pid 383] exit_group(0) = ? [pid 383] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/file4") = 0 [pid 315] umount2("./9/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/file3") = 0 [pid 315] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/file2") = 0 [pid 315] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/file1") = 0 [pid 315] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/file0") = 0 [pid 315] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/binderfs") = 0 [pid 315] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/cgroup.net") = 0 [pid 315] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/cgroup.cpu") = 0 [pid 315] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./9/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./9") = 0 [pid 315] mkdir("./10", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 382] <... ioctl resumed>) = 0 [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 382] symlink("/dev/loop0p1", "./file0") = 0 [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 382] symlink("/dev/loop0p2", "./file1") = 0 [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 382] symlink("/dev/loop0p3", "./file2") = 0 [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 382] symlink("/dev/loop0p5", "./file3") = 0 [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 382] symlink("/dev/loop0p6", "./file4") = 0 [pid 382] newfstatat(AT_FDCWD, "/dev/loop0p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 382] close(4) = 0 [pid 382] close(3) = -1 EBADF (Bad file descriptor) [pid 382] close(4) = -1 EBADF (Bad file descriptor) [pid 382] close(5) = -1 EBADF (Bad file descriptor) [pid 382] close(6) = -1 EBADF (Bad file descriptor) [pid 382] close(7) = -1 EBADF (Bad file descriptor) [pid 382] close(8) = -1 EBADF (Bad file descriptor) [pid 382] close(9) = -1 EBADF (Bad file descriptor) [pid 382] close(10) = -1 EBADF (Bad file descriptor) [pid 382] close(11) = -1 EBADF (Bad file descriptor) [pid 382] close(12) = -1 EBADF (Bad file descriptor) [pid 382] close(13) = -1 EBADF (Bad file descriptor) [pid 382] close(14) = -1 EBADF (Bad file descriptor) [pid 382] close(15) = -1 EBADF (Bad file descriptor) [pid 382] close(16) = -1 EBADF (Bad file descriptor) [pid 382] close(17) = -1 EBADF (Bad file descriptor) [pid 382] close(18) = -1 EBADF (Bad file descriptor) [pid 382] close(19) = -1 EBADF (Bad file descriptor) [pid 382] close(20) = -1 EBADF (Bad file descriptor) [pid 382] close(21) = -1 EBADF (Bad file descriptor) [pid 382] close(22) = -1 EBADF (Bad file descriptor) [pid 382] close(23) = -1 EBADF (Bad file descriptor) [pid 382] close(24) = -1 EBADF (Bad file descriptor) [pid 382] close(25) = -1 EBADF (Bad file descriptor) [pid 382] close(26) = -1 EBADF (Bad file descriptor) [pid 382] close(27) = -1 EBADF (Bad file descriptor) [pid 382] close(28) = -1 EBADF (Bad file descriptor) [pid 382] close(29) = -1 EBADF (Bad file descriptor) [pid 382] exit_group(0) = ? [pid 382] +++ exited with 0 +++ [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 312] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/file4") = 0 [pid 312] umount2("./10/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/file3") = 0 [pid 312] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/file2") = 0 [pid 312] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/file1") = 0 [pid 312] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 30.904119][ T382] loop0: p4 start 1426063360 is beyond EOD, truncated [ 30.933549][ T103] loop2: p1 p2 p3 < p5 p6 > p4 [ 30.939026][ T103] loop2: p2 size 16777216 extends beyond EOD, truncated [pid 312] unlink("./10/file0") = 0 [pid 312] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/binderfs") = 0 [pid 312] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/cgroup.net") = 0 [pid 312] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/cgroup.cpu") = 0 [pid 312] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./10/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./10") = 0 [pid 312] mkdir("./11", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD [pid 315] <... openat resumed>) = 3 [ 30.957137][ T103] loop2: p4 start 1426063360 is beyond EOD, truncated [ 30.965306][ T384] loop1: p1 p2 p3 < p5 p6 > p4 [ 30.970680][ T384] loop1: p2 size 16777216 extends beyond EOD, truncated [pid 315] ioctl(3, LOOP_CLR_FD [pid 385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 384] <... ioctl resumed>) = 0 [pid 386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 384] symlink("/dev/loop1p1", "./file0") = 0 [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 384] symlink("/dev/loop1p2", "./file1") = 0 [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 384] symlink("/dev/loop1p3", "./file2") = 0 [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 384] symlink("/dev/loop1p5", "./file3") = 0 [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 384] symlink("/dev/loop1p6", "./file4") = 0 [pid 384] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 384] close(4) = 0 [pid 384] close(3) = -1 EBADF (Bad file descriptor) [pid 384] close(4) = -1 EBADF (Bad file descriptor) [pid 384] close(5) = -1 EBADF (Bad file descriptor) [pid 384] close(6) = -1 EBADF (Bad file descriptor) [pid 384] close(7) = -1 EBADF (Bad file descriptor) [pid 384] close(8) = -1 EBADF (Bad file descriptor) [pid 384] close(9) = -1 EBADF (Bad file descriptor) [pid 384] close(10) = -1 EBADF (Bad file descriptor) [pid 384] close(11) = -1 EBADF (Bad file descriptor) [pid 384] close(12) = -1 EBADF (Bad file descriptor) [pid 384] close(13) = -1 EBADF (Bad file descriptor) [pid 384] close(14) = -1 EBADF (Bad file descriptor) [pid 384] close(15) = -1 EBADF (Bad file descriptor) [pid 384] close(16) = -1 EBADF (Bad file descriptor) [pid 384] close(17) = -1 EBADF (Bad file descriptor) [pid 384] close(18) = -1 EBADF (Bad file descriptor) [pid 384] close(19) = -1 EBADF (Bad file descriptor) [pid 384] close(20) = -1 EBADF (Bad file descriptor) [pid 384] close(21) = -1 EBADF (Bad file descriptor) [pid 384] close(22) = -1 EBADF (Bad file descriptor) [pid 384] close(23) = -1 EBADF (Bad file descriptor) [pid 384] close(24) = -1 EBADF (Bad file descriptor) [pid 384] close(25) = -1 EBADF (Bad file descriptor) [pid 384] close(26) = -1 EBADF (Bad file descriptor) [pid 384] close(27) = -1 EBADF (Bad file descriptor) [pid 384] close(28) = -1 EBADF (Bad file descriptor) [pid 384] close(29) = -1 EBADF (Bad file descriptor) [pid 384] exit_group(0) = ? [pid 384] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=6 /* 0.06 s */} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 314] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/file4") = 0 [pid 314] umount2("./10/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/file3") = 0 [pid 314] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/file2") = 0 [pid 314] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 31.001919][ T384] loop1: p4 start 1426063360 is beyond EOD, truncated [ 31.002356][ T341] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.041227][ T103] loop1: p1 p2 p3 < p5 p6 > p4 [pid 314] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/file1") = 0 [pid 314] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/file0") = 0 [pid 314] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/binderfs") = 0 [pid 314] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/cgroup.net") = 0 [pid 314] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/cgroup.cpu") = 0 [pid 314] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./10/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./10") = 0 [pid 314] mkdir("./11", 0777) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 315] <... ioctl resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 314] ioctl(3, LOOP_CLR_FD [pid 312] <... ioctl resumed>) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 13 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x55557fa896a0, 24) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] chdir("./11") = 0 [pid 387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 387] setpgid(0, 0) = 0 [pid 387] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 387] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 387] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 387] write(3, "1000", 4 [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 12 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 388 attached [pid 387] <... write resumed>) = 4 [pid 387] close(3) = 0 [pid 387] symlink("/dev/binderfs", "./binderfs") = 0 [pid 387] write(1, "executing program\n", 18) = 18 executing program [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 388] set_robust_list(0x55557fa896a0, 24) = 0 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] chdir("./10") = 0 [pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 388] setpgid(0, 0) = 0 [pid 388] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 388] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 388] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 388] write(3, "1000", 4) = 4 [pid 388] close(3) = 0 [pid 388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 388] write(1, "executing program\n", 18) = 18 executing program [pid 388] memfd_create("syzkaller", 0) = 3 [ 31.062275][ T103] loop1: p2 size 16777216 extends beyond EOD, truncated [ 31.092694][ T103] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 386] <... write resumed>) = 16777216 [pid 385] <... write resumed>) = 16777216 [ 31.142106][ T336] I/O error, dev loop1, sector 4872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.142136][ T314] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 31.159398][ T336] I/O error, dev loop1, sector 4872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [pid 386] munmap(0x7f96da85b000, 138412032 [pid 385] munmap(0x7f96da85b000, 138412032 [pid 386] <... munmap resumed>) = 0 [pid 385] <... munmap resumed>) = 0 [pid 386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 385] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 386] <... openat resumed>) = 4 [pid 386] ioctl(4, LOOP_SET_FD, 3 [pid 385] <... openat resumed>) = 4 [pid 386] <... ioctl resumed>) = 0 [pid 386] close(3 [pid 385] ioctl(4, LOOP_SET_FD, 3 [pid 386] <... close resumed>) = 0 [pid 385] <... ioctl resumed>) = 0 [pid 385] close(3 [pid 386] ioctl(4, LOOP_GET_STATUS64 [pid 385] <... close resumed>) = 0 [pid 386] <... ioctl resumed>, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 385] ioctl(4, LOOP_GET_STATUS64 [pid 386] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 385] <... ioctl resumed>, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [ 31.191030][ T336] Buffer I/O error on dev loop1p5, logical block 1, async page read [pid 385] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 314] <... ioctl resumed>) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x55557fa896a0, 24) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 13 [pid 389] chdir("./11") = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 389] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 389] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 389] write(1, "executing program\n", 18) = 18 executing program [pid 389] memfd_create("syzkaller", 0) = 3 [pid 389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 386] <... ioctl resumed>) = 0 [pid 385] <... ioctl resumed>) = 0 [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p1" [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p1" [pid 386] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 386] symlink("/dev/loop3p1", "./file0" [pid 385] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 386] <... symlink resumed>) = 0 [pid 385] symlink("/dev/loop4p1", "./file0" [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 385] <... symlink resumed>) = 0 [pid 386] symlink("/dev/loop3p2", "./file1" [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p2" [pid 386] <... symlink resumed>) = 0 [pid 385] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p3" [pid 385] symlink("/dev/loop4p2", "./file1" [pid 386] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 385] <... symlink resumed>) = 0 [pid 386] symlink("/dev/loop3p3", "./file2" [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p3" [pid 386] <... symlink resumed>) = 0 [pid 385] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p4" [pid 385] symlink("/dev/loop4p3", "./file2" [pid 386] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 385] <... symlink resumed>) = 0 [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p5" [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p4" [pid 386] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 385] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 386] symlink("/dev/loop3p5", "./file3" [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p5" [pid 386] <... symlink resumed>) = 0 [pid 385] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p6" [pid 385] symlink("/dev/loop4p5", "./file3" [pid 386] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 385] <... symlink resumed>) = 0 [pid 386] symlink("/dev/loop3p6", "./file4" [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p6" [pid 386] <... symlink resumed>) = 0 [pid 385] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 386] newfstatat(AT_FDCWD, "/dev/loop3p7" [pid 385] symlink("/dev/loop4p6", "./file4" [pid 386] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 386] close(4 [pid 385] <... symlink resumed>) = 0 [pid 386] <... close resumed>) = 0 [pid 385] newfstatat(AT_FDCWD, "/dev/loop4p7" [pid 386] close(3 [pid 385] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(4 [pid 386] close(4 [pid 385] <... close resumed>) = 0 [ 31.243793][ T386] loop3: p1 p2 p3 < p5 p6 > p4 [ 31.248731][ T385] loop4: p1 p2 p3 < p5 p6 > p4 [ 31.255509][ T386] loop3: p2 size 16777216 extends beyond EOD, truncated [ 31.262898][ T385] loop4: p2 size 16777216 extends beyond EOD, truncated [ 31.277474][ T386] loop3: p4 start 1426063360 is beyond EOD, truncated [ 31.285066][ T385] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(3 [pid 386] close(5 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(4 [pid 386] close(6 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(5 [pid 386] close(7 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(6 [pid 386] close(8 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(7 [pid 386] close(9 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(8 [pid 386] close(10 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(9 [pid 386] close(11 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(10 [pid 386] close(12 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(11 [pid 386] close(13 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(12 [pid 386] close(14 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(13 [pid 386] close(15 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(14 [pid 386] close(16 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(15 [pid 386] close(17 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(16 [pid 386] close(18 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(17 [pid 386] close(19 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(18 [pid 386] close(20 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(19 [pid 386] close(21 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(20 [pid 386] close(22 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(21 [pid 386] close(23 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(22 [pid 386] close(24 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(23 [pid 386] close(25 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(24 [pid 386] close(26 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(25 [pid 386] close(27 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(26 [pid 386] close(28 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(27 [pid 386] close(29 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(28 [pid 386] exit_group(0 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... exit_group resumed>) = ? [pid 385] close(29 [pid 386] +++ exited with 0 +++ [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] exit_group(0 [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 385] <... exit_group resumed>) = ? [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 385] +++ exited with 0 +++ [pid 316] <... restart_syscall resumed>) = 0 [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 316] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 316] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... restart_syscall resumed>) = 0 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./11/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] unlink("./11/file4" [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... unlink resumed>) = 0 [pid 317] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 316] umount2("./11/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... openat resumed>) = 3 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] fstat(3 [pid 316] newfstatat(AT_FDCWD, "./11/file3" [pid 317] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] getdents64(3 [pid 316] unlink("./11/file3" [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/file4" [pid 316] newfstatat(AT_FDCWD, "./11/file2" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/file4" [pid 316] unlink("./11/file2" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/file3" [pid 316] newfstatat(AT_FDCWD, "./11/file1" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/file3" [pid 316] unlink("./11/file1" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/file2" [pid 316] newfstatat(AT_FDCWD, "./11/file0" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/file2" [pid 316] unlink("./11/file0" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/file1" [pid 316] newfstatat(AT_FDCWD, "./11/binderfs" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/file1" [pid 316] unlink("./11/binderfs" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/file0" [pid 316] newfstatat(AT_FDCWD, "./11/cgroup.net" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/file0" [pid 316] unlink("./11/cgroup.net" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/binderfs" [pid 316] newfstatat(AT_FDCWD, "./11/cgroup.cpu" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/binderfs" [pid 316] unlink("./11/cgroup.cpu" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 317] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./11/cgroup.net" [pid 316] newfstatat(AT_FDCWD, "./11/cgroup" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./11/cgroup.net" [pid 316] unlink("./11/cgroup" [pid 317] <... unlink resumed>) = 0 [pid 316] <... unlink resumed>) = 0 [pid 317] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] getdents64(3 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] newfstatat(AT_FDCWD, "./11/cgroup.cpu" [pid 316] close(3 [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... close resumed>) = 0 [pid 317] unlink("./11/cgroup.cpu" [pid 316] rmdir("./11" [pid 317] <... unlink resumed>) = 0 [pid 316] <... rmdir resumed>) = 0 [pid 317] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] mkdir("./12", 0777 [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... mkdir resumed>) = 0 [pid 317] newfstatat(AT_FDCWD, "./11/cgroup" [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] <... openat resumed>) = 3 [pid 317] unlink("./11/cgroup" [pid 316] ioctl(3, LOOP_CLR_FD [pid 317] <... unlink resumed>) = 0 [pid 316] <... ioctl resumed>) = 0 [pid 317] getdents64(3 [pid 316] close(3 [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] <... close resumed>) = 0 [pid 317] close(3 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 317] <... close resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 317] rmdir("./11" [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 390 attached [pid 317] <... rmdir resumed>) = 0 [pid 390] set_robust_list(0x55557fa896a0, 24 [pid 317] mkdir("./12", 0777 [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 14 [pid 390] <... set_robust_list resumed>) = 0 [pid 317] <... mkdir resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 390] rt_sigprocmask(SIG_SETMASK, [] [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 390] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 390] chdir("./12") = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 390] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 390] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 390] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 390] close(3) = 0 [pid 390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 390] write(1, "executing program\n", 18) = 18 [pid 390] memfd_create("syzkaller", 0) = 3 [pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 executing program [ 31.371346][ T103] loop4: p1 p2 p3 < p5 p6 > p4 [ 31.391174][ T103] loop4: p2 size 16777216 extends beyond EOD, truncated [pid 317] <... openat resumed>) = 3 [pid 317] ioctl(3, LOOP_CLR_FD [pid 388] <... write resumed>) = 16777216 [pid 388] munmap(0x7f96da85b000, 138412032) = 0 [ 31.421844][ T103] loop4: p4 start 1426063360 is beyond EOD, truncated [pid 388] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 388] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 388] close(3) = 0 [pid 388] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 388] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 387] <... write resumed>) = 16777216 [pid 387] munmap(0x7f96da85b000, 138412032) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 387] close(3) = 0 [pid 387] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 387] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 389] <... write resumed>) = 16777216 [ 31.524049][ T388] loop2: p1 p2 p3 < p5 p6 > p4 [ 31.536451][ T388] loop2: p2 size 16777216 extends beyond EOD, truncated [ 31.554576][ T387] loop0: p1 p2 p3 < p5 p6 > p4 [pid 389] munmap(0x7f96da85b000, 138412032) = 0 [pid 389] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 389] close(3) = 0 [pid 389] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 389] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 388] <... ioctl resumed>) = 0 [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 388] symlink("/dev/loop2p1", "./file0") = 0 [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 388] symlink("/dev/loop2p2", "./file1") = 0 [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 388] symlink("/dev/loop2p3", "./file2") = 0 [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 388] symlink("/dev/loop2p5", "./file3") = 0 [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 388] symlink("/dev/loop2p6", "./file4") = 0 [pid 388] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 388] close(4) = 0 [pid 388] close(3) = -1 EBADF (Bad file descriptor) [pid 388] close(4) = -1 EBADF (Bad file descriptor) [pid 388] close(5) = -1 EBADF (Bad file descriptor) [pid 388] close(6) = -1 EBADF (Bad file descriptor) [pid 388] close(7) = -1 EBADF (Bad file descriptor) [pid 388] close(8) = -1 EBADF (Bad file descriptor) [pid 388] close(9) = -1 EBADF (Bad file descriptor) [pid 388] close(10) = -1 EBADF (Bad file descriptor) [pid 388] close(11) = -1 EBADF (Bad file descriptor) [pid 388] close(12) = -1 EBADF (Bad file descriptor) [pid 388] close(13) = -1 EBADF (Bad file descriptor) [pid 388] close(14) = -1 EBADF (Bad file descriptor) [pid 388] close(15) = -1 EBADF (Bad file descriptor) [pid 388] close(16) = -1 EBADF (Bad file descriptor) [pid 388] close(17) = -1 EBADF (Bad file descriptor) [pid 388] close(18) = -1 EBADF (Bad file descriptor) [pid 388] close(19) = -1 EBADF (Bad file descriptor) [pid 388] close(20) = -1 EBADF (Bad file descriptor) [pid 388] close(21) = -1 EBADF (Bad file descriptor) [pid 388] close(22) = -1 EBADF (Bad file descriptor) [pid 388] close(23) = -1 EBADF (Bad file descriptor) [pid 388] close(24) = -1 EBADF (Bad file descriptor) [pid 388] close(25) = -1 EBADF (Bad file descriptor) [pid 388] close(26) = -1 EBADF (Bad file descriptor) [pid 388] close(27) = -1 EBADF (Bad file descriptor) [pid 388] close(28) = -1 EBADF (Bad file descriptor) [pid 388] close(29) = -1 EBADF (Bad file descriptor) [pid 388] exit_group(0) = ? [pid 388] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=5 /* 0.05 s */} --- [pid 315] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/file4") = 0 [pid 315] umount2("./10/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/file3") = 0 [pid 315] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/file2") = 0 [pid 315] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/file1") = 0 [pid 315] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/file0") = 0 [pid 315] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/binderfs") = 0 [pid 315] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./10/cgroup.net") = 0 [pid 387] <... ioctl resumed>) = 0 [pid 315] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 387] symlink("/dev/loop0p1", "./file0") = 0 [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 387] symlink("/dev/loop0p2", "./file1") = 0 [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 387] symlink("/dev/loop0p3", "./file2") = 0 [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 387] symlink("/dev/loop0p5", "./file3") = 0 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p6" [pid 315] newfstatat(AT_FDCWD, "./10/cgroup.cpu" [pid 387] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 387] symlink("/dev/loop0p6", "./file4" [pid 315] unlink("./10/cgroup.cpu" [pid 387] <... symlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 387] newfstatat(AT_FDCWD, "/dev/loop0p7" [pid 315] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 387] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 387] close(4 [pid 315] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 387] <... close resumed>) = 0 [pid 387] close(3) = -1 EBADF (Bad file descriptor) [pid 387] close(4) = -1 EBADF (Bad file descriptor) [pid 387] close(5) = -1 EBADF (Bad file descriptor) [pid 387] close(6 [pid 315] unlink("./10/cgroup" [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... unlink resumed>) = 0 [pid 387] close(7 [pid 315] getdents64(3 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3 [pid 387] close(8) = -1 EBADF (Bad file descriptor) [pid 315] <... close resumed>) = 0 [pid 387] close(9 [pid 315] rmdir("./10" [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... rmdir resumed>) = 0 [pid 387] close(10 [pid 315] mkdir("./11", 0777 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(11 [pid 315] <... mkdir resumed>) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... openat resumed>) = 3 [pid 387] close(12 [pid 315] ioctl(3, LOOP_CLR_FD [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... ioctl resumed>) = 0 [pid 387] close(13 [pid 315] close(3 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... close resumed>) = 0 [pid 387] close(14 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[] [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 387] close(15 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(16) = -1 EBADF (Bad file descriptor) [pid 387] close(17) = -1 EBADF (Bad file descriptor) [pid 387] close(18) = -1 EBADF (Bad file descriptor) [pid 387] close(19) = -1 EBADF (Bad file descriptor) [pid 387] close(20) = -1 EBADF (Bad file descriptor) [pid 387] close(21) = -1 EBADF (Bad file descriptor) [pid 315] <... clone resumed>, child_tidptr=0x55557fa89690) = 13 ci2-android-6-1/strace-static-x86_64: Process 391 attached [pid 387] close(22) = -1 EBADF (Bad file descriptor) [pid 387] close(23) = -1 EBADF (Bad file descriptor) [pid 387] close(24 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 391] set_robust_list(0x55557fa896a0, 24) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 387] close(25 [pid 391] rt_sigprocmask(SIG_SETMASK, [] [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 387] close(26) = -1 EBADF (Bad file descriptor) [pid 391] chdir("./11" [pid 387] close(27) = -1 EBADF (Bad file descriptor) [pid 387] close(28) = -1 EBADF (Bad file descriptor) [pid 387] close(29 [pid 391] <... chdir resumed>) = 0 [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... prctl resumed>) = 0 [pid 391] setpgid(0, 0 [pid 387] exit_group(0 [pid 391] <... setpgid resumed>) = 0 [pid 387] <... exit_group resumed>) = ? [ 31.571142][ T388] loop2: p4 start 1426063360 is beyond EOD, truncated [ 31.579323][ T387] loop0: p2 size 16777216 extends beyond EOD, truncated [ 31.597461][ T387] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 391] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 387] +++ exited with 0 +++ [pid 317] <... ioctl resumed>) = 0 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 312] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 312] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./11/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/file4") = 0 [pid 312] umount2("./11/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./11/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/file3" [pid 391] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 317] close(3 [pid 312] <... unlink resumed>) = 0 [pid 391] <... symlink resumed>) = 0 [pid 312] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 317] <... close resumed>) = 0 [pid 391] <... symlink resumed>) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[] [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./11/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/file2") = 0 [pid 312] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/file1") = 0 [pid 312] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/file0") = 0 [pid 312] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/binderfs" [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] <... unlink resumed>) = 0 [pid 391] <... openat resumed>) = 3 [pid 312] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] write(3, "1000", 4 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... write resumed>) = 4 [pid 317] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 312] newfstatat(AT_FDCWD, "./11/cgroup.net" [pid 391] close(3 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 391] <... close resumed>) = 0 [pid 312] unlink("./11/cgroup.net" [pid 391] symlink("/dev/binderfs", "./binderfs" [pid 312] <... unlink resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 392 attached [pid 391] <... symlink resumed>) = 0 [pid 312] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 392] set_robust_list(0x55557fa896a0, 24 [pid 391] write(1, "executing program\n", 18 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 14 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 392] <... set_robust_list resumed>) = 0 [pid 391] <... write resumed>) = 18 [pid 312] newfstatat(AT_FDCWD, "./11/cgroup.cpu" [pid 392] rt_sigprocmask(SIG_SETMASK, [] [pid 391] memfd_create("syzkaller", 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 392] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 391] <... memfd_create resumed>) = 3 [pid 390] <... write resumed>) = 16777216 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] unlink("./11/cgroup.cpu") = 0 [pid 312] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 392] chdir("./12" [pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 390] munmap(0x7f96da85b000, 138412032 [pid 312] newfstatat(AT_FDCWD, "./11/cgroup" [pid 392] <... chdir resumed>) = 0 [pid 391] <... mmap resumed>) = 0x7f96da85b000 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./11/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 390] <... munmap resumed>) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./11" [pid 392] <... prctl resumed>) = 0 [pid 390] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 312] <... rmdir resumed>) = 0 [pid 312] mkdir("./12", 0777) = 0 [pid 392] setpgid(0, 0 [pid 390] <... openat resumed>) = 4 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 392] <... setpgid resumed>) = 0 [pid 390] ioctl(4, LOOP_SET_FD, 3 [pid 312] <... openat resumed>) = 3 [pid 392] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 312] ioctl(3, LOOP_CLR_FD [pid 392] <... symlink resumed>) = 0 [pid 392] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 392] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 392] write(1, "executing program\n", 18) = 18 [pid 392] memfd_create("syzkaller", 0) = 3 [pid 392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 390] <... ioctl resumed>) = 0 [pid 390] close(3) = 0 [pid 390] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [pid 390] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 389] <... ioctl resumed>) = 0 [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 389] symlink("/dev/loop1p1", "./file0") = 0 [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 389] symlink("/dev/loop1p2", "./file1") = 0 [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 389] symlink("/dev/loop1p3", "./file2") = 0 [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 389] symlink("/dev/loop1p5", "./file3") = 0 [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 389] symlink("/dev/loop1p6", "./file4") = 0 [pid 389] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 389] close(4) = 0 [pid 389] close(3) = -1 EBADF (Bad file descriptor) [pid 389] close(4) = -1 EBADF (Bad file descriptor) [pid 389] close(5) = -1 EBADF (Bad file descriptor) [pid 389] close(6) = -1 EBADF (Bad file descriptor) [pid 389] close(7) = -1 EBADF (Bad file descriptor) [pid 389] close(8) = -1 EBADF (Bad file descriptor) [pid 389] close(9) = -1 EBADF (Bad file descriptor) [pid 389] close(10) = -1 EBADF (Bad file descriptor) [pid 389] close(11) = -1 EBADF (Bad file descriptor) [pid 389] close(12) = -1 EBADF (Bad file descriptor) [pid 389] close(13) = -1 EBADF (Bad file descriptor) [pid 389] close(14) = -1 EBADF (Bad file descriptor) [pid 389] close(15) = -1 EBADF (Bad file descriptor) [pid 389] close(16) = -1 EBADF (Bad file descriptor) [pid 389] close(17) = -1 EBADF (Bad file descriptor) [pid 389] close(18) = -1 EBADF (Bad file descriptor) [pid 389] close(19) = -1 EBADF (Bad file descriptor) [pid 389] close(20) = -1 EBADF (Bad file descriptor) [pid 389] close(21) = -1 EBADF (Bad file descriptor) [pid 389] close(22) = -1 EBADF (Bad file descriptor) [pid 389] close(23) = -1 EBADF (Bad file descriptor) [pid 389] close(24) = -1 EBADF (Bad file descriptor) [pid 389] close(25) = -1 EBADF (Bad file descriptor) [pid 389] close(26) = -1 EBADF (Bad file descriptor) [pid 389] close(27) = -1 EBADF (Bad file descriptor) [pid 389] close(28) = -1 EBADF (Bad file descriptor) [pid 389] close(29) = -1 EBADF (Bad file descriptor) [pid 389] exit_group(0) = ? [pid 389] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=7 /* 0.07 s */} --- [ 31.633892][ T389] loop1: p1 p2 p3 < p5 p6 > p4 [ 31.641638][ T389] loop1: p2 size 16777216 extends beyond EOD, truncated [ 31.666734][ T389] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 314] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/file4") = 0 [pid 314] umount2("./11/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/file3") = 0 [pid 314] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/file2") = 0 [pid 314] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/file1") = 0 [pid 314] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/file0") = 0 [pid 314] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/binderfs") = 0 [pid 314] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/cgroup.net") = 0 [pid 314] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/cgroup.cpu") = 0 [pid 314] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./11/cgroup") = 0 [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 314] rmdir("./11") = 0 [pid 314] mkdir("./12", 0777) = 0 [ 31.700895][ T103] loop1: p1 p2 p3 < p5 p6 > p4 [ 31.702211][ T336] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.715800][ T103] loop1: p2 size 16777216 extends beyond EOD, truncated [ 31.724229][ T390] loop3: p1 p2 p3 < p5 p6 > p4 [ 31.739727][ T390] loop3: p2 size 16777216 extends beyond EOD, truncated [ 31.747392][ T103] loop1: p4 start 1426063360 is beyond EOD, truncated [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 312] <... ioctl resumed>) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 14 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x55557fa896a0, 24) = 0 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] chdir("./12" [pid 314] <... openat resumed>) = 3 [pid 314] ioctl(3, LOOP_CLR_FD) = 0 [pid 314] close(3) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 394 attached , child_tidptr=0x55557fa89690) = 14 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] set_robust_list(0x55557fa896a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] chdir("./12") = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 393] <... chdir resumed>) = 0 [pid 394] <... prctl resumed>) = 0 [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 393] setpgid(0, 0) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 393] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 394] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 394] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] <... symlink resumed>) = 0 [pid 393] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3) = 0 [pid 394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 393] <... symlink resumed>) = 0 [pid 394] write(1, "executing program\n", 18) = 18 [pid 394] memfd_create("syzkaller", 0 executing program [pid 393] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 394] <... memfd_create resumed>) = 3 [pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 393] <... symlink resumed>) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 [pid 393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 393] write(1, "executing program\n", 18) = 18 [pid 393] memfd_create("syzkaller", 0) = 3 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 executing program [pid 390] <... ioctl resumed>) = 0 [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 390] symlink("/dev/loop3p1", "./file0") = 0 [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 390] symlink("/dev/loop3p2", "./file1") = 0 [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 390] symlink("/dev/loop3p3", "./file2") = 0 [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 390] symlink("/dev/loop3p5", "./file3") = 0 [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 390] symlink("/dev/loop3p6", "./file4") = 0 [pid 390] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 390] close(4) = 0 [pid 390] close(3) = -1 EBADF (Bad file descriptor) [pid 390] close(4) = -1 EBADF (Bad file descriptor) [pid 390] close(5) = -1 EBADF (Bad file descriptor) [pid 390] close(6) = -1 EBADF (Bad file descriptor) [pid 390] close(7) = -1 EBADF (Bad file descriptor) [pid 390] close(8) = -1 EBADF (Bad file descriptor) [pid 390] close(9) = -1 EBADF (Bad file descriptor) [pid 390] close(10) = -1 EBADF (Bad file descriptor) [pid 390] close(11) = -1 EBADF (Bad file descriptor) [pid 390] close(12) = -1 EBADF (Bad file descriptor) [pid 390] close(13) = -1 EBADF (Bad file descriptor) [pid 390] close(14) = -1 EBADF (Bad file descriptor) [pid 390] close(15) = -1 EBADF (Bad file descriptor) [pid 390] close(16) = -1 EBADF (Bad file descriptor) [pid 390] close(17) = -1 EBADF (Bad file descriptor) [pid 390] close(18) = -1 EBADF (Bad file descriptor) [pid 390] close(19) = -1 EBADF (Bad file descriptor) [pid 390] close(20) = -1 EBADF (Bad file descriptor) [pid 390] close(21) = -1 EBADF (Bad file descriptor) [pid 390] close(22) = -1 EBADF (Bad file descriptor) [pid 390] close(23) = -1 EBADF (Bad file descriptor) [pid 390] close(24) = -1 EBADF (Bad file descriptor) [pid 390] close(25) = -1 EBADF (Bad file descriptor) [pid 390] close(26) = -1 EBADF (Bad file descriptor) [pid 390] close(27) = -1 EBADF (Bad file descriptor) [pid 390] close(28) = -1 EBADF (Bad file descriptor) [pid 390] close(29) = -1 EBADF (Bad file descriptor) [pid 390] exit_group(0) = ? [pid 390] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/file4") = 0 [pid 316] umount2("./12/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/file3") = 0 [pid 316] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/file2") = 0 [pid 316] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 31.772281][ T390] loop3: p4 start 1426063360 is beyond EOD, truncated [pid 316] unlink("./12/file1") = 0 [pid 316] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/file0") = 0 [pid 316] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/binderfs") = 0 [pid 316] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/cgroup.net") = 0 [pid 316] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/cgroup.cpu") = 0 [pid 316] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./12/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./12") = 0 [pid 316] mkdir("./13", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD [pid 392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 316] <... ioctl resumed>) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 15 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x55557fa896a0, 24) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] chdir("./13") = 0 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 395] setpgid(0, 0) = 0 [pid 395] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 395] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 395] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] <... write resumed>) = 16777216 [pid 395] write(3, "1000", 4) = 4 [pid 395] close(3) = 0 [pid 395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 395] write(1, "executing program\n", 18) = 18 executing program [pid 395] memfd_create("syzkaller", 0 [pid 392] munmap(0x7f96da85b000, 138412032 [pid 395] <... memfd_create resumed>) = 3 [pid 395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 392] <... munmap resumed>) = 0 [pid 392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 392] close(3) = 0 [pid 392] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [pid 392] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 391] <... write resumed>) = 16777216 [pid 391] munmap(0x7f96da85b000, 138412032) = 0 [pid 391] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 391] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 391] close(3) = 0 [pid 391] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 391] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 394] <... write resumed>) = 16777216 [pid 394] munmap(0x7f96da85b000, 138412032) = 0 [pid 394] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 394] close(3) = 0 [pid 394] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [ 32.073764][ T392] loop4: p1 p2 p3 < p5 p6 > p4 [ 32.079374][ T391] loop2: p1 p2 p3 < p5 p6 > p4 [ 32.093981][ T392] loop4: p2 size 16777216 extends beyond EOD, truncated [ 32.101309][ T391] loop2: p2 size 16777216 extends beyond EOD, truncated [pid 394] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 393] <... write resumed>) = 16777216 [pid 393] munmap(0x7f96da85b000, 138412032) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 393] close(3 [pid 392] <... ioctl resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p1" [pid 392] symlink("/dev/loop4p1", "./file0") = 0 [pid 391] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p2" [pid 391] symlink("/dev/loop2p1", "./file0" [pid 392] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 391] <... symlink resumed>) = 0 [pid 392] symlink("/dev/loop4p2", "./file1" [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p2" [pid 392] <... symlink resumed>) = 0 [pid 391] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p3" [pid 391] symlink("/dev/loop2p2", "./file1" [pid 392] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 391] <... symlink resumed>) = 0 [pid 392] symlink("/dev/loop4p3", "./file2" [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p3" [pid 392] <... symlink resumed>) = 0 [pid 391] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 393] <... close resumed>) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p4" [pid 391] symlink("/dev/loop2p3", "./file2" [pid 392] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 391] <... symlink resumed>) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p5" [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p4" [pid 392] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 391] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 392] symlink("/dev/loop4p5", "./file3" [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p5" [pid 393] ioctl(4, LOOP_GET_STATUS64 [pid 392] <... symlink resumed>) = 0 [pid 391] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 393] <... ioctl resumed>, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p6" [pid 391] symlink("/dev/loop2p5", "./file3" [pid 393] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 392] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 391] <... symlink resumed>) = 0 [pid 392] symlink("/dev/loop4p6", "./file4" [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p6" [pid 392] <... symlink resumed>) = 0 [pid 391] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 392] newfstatat(AT_FDCWD, "/dev/loop4p7" [pid 391] symlink("/dev/loop2p6", "./file4" [pid 392] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 391] <... symlink resumed>) = 0 [pid 392] close(4 [pid 391] newfstatat(AT_FDCWD, "/dev/loop2p7" [pid 392] <... close resumed>) = 0 [pid 391] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 392] close(3 [pid 391] close(4 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = 0 [pid 392] close(4 [pid 391] close(3 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(5 [pid 391] close(4 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(6 [pid 391] close(5 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(7 [pid 391] close(6 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(8 [pid 391] close(7 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(9 [pid 391] close(8 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(10 [pid 391] close(9 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(11 [pid 391] close(10 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(12 [pid 391] close(11 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(13 [pid 391] close(12 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(14 [pid 391] close(13 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(15 [pid 391] close(14 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(16 [pid 391] close(15 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(17 [pid 391] close(16 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(18 [pid 391] close(17 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(19 [pid 391] close(18 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(20 [pid 391] close(19 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(21 [pid 391] close(20 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(22 [pid 391] close(21 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(23 [pid 391] close(22 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(24 [pid 391] close(23 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(25 [pid 391] close(24 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(26 [pid 391] close(25 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(27 [pid 391] close(26 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(28 [pid 391] close(27 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(29 [pid 391] close(28 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] exit_group(0 [pid 391] close(29 [pid 392] <... exit_group resumed>) = ? [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] +++ exited with 0 +++ [pid 391] exit_group(0) = ? [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=5 /* 0.05 s */} --- [pid 391] +++ exited with 0 +++ [pid 317] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [ 32.123813][ T392] loop4: p4 start 1426063360 is beyond EOD, truncated [ 32.130978][ T391] loop2: p4 start 1426063360 is beyond EOD, truncated [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 317] <... restart_syscall resumed>) = 0 [pid 315] <... restart_syscall resumed>) = 0 [pid 317] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 317] <... openat resumed>) = 3 [pid 315] <... openat resumed>) = 3 [pid 317] fstat(3 [pid 315] fstat(3 [pid 317] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 317] getdents64(3 [pid 315] getdents64(3 [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 317] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/file4" [pid 315] newfstatat(AT_FDCWD, "./11/file4" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/file4" [pid 315] unlink("./11/file4" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/file3" [pid 315] newfstatat(AT_FDCWD, "./11/file3" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/file3" [pid 315] unlink("./11/file3" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/file2" [pid 315] newfstatat(AT_FDCWD, "./11/file2" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/file2" [pid 315] unlink("./11/file2" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/file1" [pid 315] newfstatat(AT_FDCWD, "./11/file1" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/file1" [pid 315] unlink("./11/file1" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/file0" [pid 315] newfstatat(AT_FDCWD, "./11/file0" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/file0" [pid 315] unlink("./11/file0" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/binderfs" [pid 315] newfstatat(AT_FDCWD, "./11/binderfs" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/binderfs" [pid 315] unlink("./11/binderfs" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/cgroup.net" [pid 315] newfstatat(AT_FDCWD, "./11/cgroup.net" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/cgroup.net" [pid 315] unlink("./11/cgroup.net" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/cgroup.cpu" [pid 315] newfstatat(AT_FDCWD, "./11/cgroup.cpu" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/cgroup.cpu" [pid 315] unlink("./11/cgroup.cpu" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 317] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 317] newfstatat(AT_FDCWD, "./12/cgroup" [pid 315] newfstatat(AT_FDCWD, "./11/cgroup" [pid 317] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 317] unlink("./12/cgroup" [pid 315] unlink("./11/cgroup" [pid 317] <... unlink resumed>) = 0 [pid 315] <... unlink resumed>) = 0 [pid 317] getdents64(3 [pid 315] getdents64(3 [pid 317] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] <... getdents64 resumed>, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 317] close(3 [pid 315] close(3 [pid 317] <... close resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 317] rmdir("./12" [pid 315] rmdir("./11" [pid 317] <... rmdir resumed>) = 0 [pid 315] <... rmdir resumed>) = 0 [pid 317] mkdir("./13", 0777 [pid 315] mkdir("./12", 0777 [pid 317] <... mkdir resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 317] <... openat resumed>) = 3 [pid 317] ioctl(3, LOOP_CLR_FD) = 0 [pid 317] close(3) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 396 attached [pid 396] set_robust_list(0x55557fa896a0, 24 [pid 317] <... clone resumed>, child_tidptr=0x55557fa89690) = 15 [pid 396] <... set_robust_list resumed>) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 396] rt_sigprocmask(SIG_SETMASK, [] [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 396] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 396] chdir("./13") = 0 [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 396] setpgid(0, 0) = 0 [pid 396] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 396] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 396] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 396] write(3, "1000", 4) = 4 [pid 396] close(3) = 0 [pid 396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 396] write(1, "executing program\n", 18) = 18 [pid 396] memfd_create("syzkaller", 0) = 3 [pid 396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 executing program [ 32.164331][ T394] loop1: p1 p2 p3 < p5 p6 > p4 [pid 395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 315] <... openat resumed>) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 397 attached , child_tidptr=0x55557fa89690) = 14 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 397] set_robust_list(0x55557fa896a0, 24) = 0 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] chdir("./12") = 0 [pid 397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 397] setpgid(0, 0) = 0 [pid 397] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 397] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 397] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 397] write(3, "1000", 4) = 4 [pid 397] close(3) = 0 [pid 397] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 397] write(1, "executing program\n", 18) = 18 [pid 397] memfd_create("syzkaller", 0) = 3 [pid 397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 32.188934][ T394] loop1: p2 size 16777216 extends beyond EOD, truncated [ 32.204923][ T393] loop0: p1 p2 p3 < p5 p6 > p4 [ 32.210852][ T393] loop0: p2 size 16777216 extends beyond EOD, truncated [pid 394] <... ioctl resumed>) = 0 [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xa), ...}, 0) = 0 [pid 394] symlink("/dev/loop1p1", "./file0") = 0 [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xc), ...}, 0) = 0 [pid 394] symlink("/dev/loop1p2", "./file1") = 0 [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xd), ...}, 0) = 0 [pid 394] symlink("/dev/loop1p3", "./file2") = 0 [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x10), ...}, 0) = 0 [pid 394] symlink("/dev/loop1p5", "./file3") = 0 [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x11), ...}, 0) = 0 [pid 394] symlink("/dev/loop1p6", "./file4") = 0 [pid 394] newfstatat(AT_FDCWD, "/dev/loop1p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 394] close(4) = 0 [pid 394] close(3) = -1 EBADF (Bad file descriptor) [pid 394] close(4) = -1 EBADF (Bad file descriptor) [pid 394] close(5) = -1 EBADF (Bad file descriptor) [pid 394] close(6) = -1 EBADF (Bad file descriptor) [pid 394] close(7) = -1 EBADF (Bad file descriptor) [pid 394] close(8) = -1 EBADF (Bad file descriptor) [pid 394] close(9) = -1 EBADF (Bad file descriptor) [pid 394] close(10) = -1 EBADF (Bad file descriptor) [pid 394] close(11) = -1 EBADF (Bad file descriptor) [pid 394] close(12) = -1 EBADF (Bad file descriptor) [pid 394] close(13) = -1 EBADF (Bad file descriptor) [pid 394] close(14) = -1 EBADF (Bad file descriptor) [pid 394] close(15) = -1 EBADF (Bad file descriptor) [pid 394] close(16) = -1 EBADF (Bad file descriptor) [pid 394] close(17) = -1 EBADF (Bad file descriptor) [pid 394] close(18) = -1 EBADF (Bad file descriptor) [pid 394] close(19) = -1 EBADF (Bad file descriptor) [pid 394] close(20) = -1 EBADF (Bad file descriptor) [pid 394] close(21) = -1 EBADF (Bad file descriptor) [pid 394] close(22) = -1 EBADF (Bad file descriptor) [pid 394] close(23) = -1 EBADF (Bad file descriptor) [pid 394] close(24) = -1 EBADF (Bad file descriptor) [pid 394] close(25) = -1 EBADF (Bad file descriptor) [pid 394] close(26) = -1 EBADF (Bad file descriptor) [pid 394] close(27) = -1 EBADF (Bad file descriptor) [pid 394] close(28) = -1 EBADF (Bad file descriptor) [pid 394] close(29) = -1 EBADF (Bad file descriptor) [pid 394] exit_group(0) = ? [pid 394] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- [pid 393] <... ioctl resumed>) = 0 [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p1" [pid 314] <... restart_syscall resumed>) = 0 [pid 393] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xb), ...}, 0) = 0 [pid 393] symlink("/dev/loop0p1", "./file0") = 0 [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p2" [pid 314] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0xe), ...}, 0) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] symlink("/dev/loop0p2", "./file1" [pid 314] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 393] <... symlink resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p3" [pid 314] fstat(3 [pid 393] <... newfstatat resumed>, {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0xf), ...}, 0) = 0 [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 393] symlink("/dev/loop0p3", "./file2" [ 32.252261][ T394] loop1: p4 start 1426063360 is beyond EOD, truncated [ 32.281159][ T393] loop0: p4 start 1426063360 is beyond EOD, truncated [pid 314] getdents64(3 [pid 393] <... symlink resumed>) = 0 [pid 314] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p4" [pid 314] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p5" [pid 314] newfstatat(AT_FDCWD, "./12/file4" [pid 393] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x12), ...}, 0) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] symlink("/dev/loop0p5", "./file3" [pid 314] unlink("./12/file4" [pid 393] <... symlink resumed>) = 0 [pid 314] <... unlink resumed>) = 0 [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p6" [pid 314] umount2("./12/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... newfstatat resumed>, {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] symlink("/dev/loop0p6", "./file4" [pid 314] newfstatat(AT_FDCWD, "./12/file3" [pid 393] <... symlink resumed>) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] newfstatat(AT_FDCWD, "/dev/loop0p7" [pid 314] unlink("./12/file3" [pid 393] <... newfstatat resumed>, 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 314] <... unlink resumed>) = 0 [pid 393] close(4 [pid 314] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... close resumed>) = 0 [pid 393] close(3 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] newfstatat(AT_FDCWD, "./12/file2" [pid 393] close(4 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] unlink("./12/file2" [pid 393] close(5) = -1 EBADF (Bad file descriptor) [pid 314] <... unlink resumed>) = 0 [pid 393] close(6 [pid 314] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(7 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] newfstatat(AT_FDCWD, "./12/file1" [pid 393] close(8) = -1 EBADF (Bad file descriptor) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] close(9 [pid 314] unlink("./12/file1" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(10 [pid 314] <... unlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] close(11 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] newfstatat(AT_FDCWD, "./12/file0" [pid 393] close(12) = -1 EBADF (Bad file descriptor) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] close(13 [pid 314] unlink("./12/file0" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... unlink resumed>) = 0 [pid 393] close(14 [pid 314] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] close(15) = -1 EBADF (Bad file descriptor) [pid 314] newfstatat(AT_FDCWD, "./12/binderfs" [pid 393] close(16) = -1 EBADF (Bad file descriptor) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] close(17 [pid 314] unlink("./12/binderfs" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(18 [pid 314] <... unlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] close(19 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] newfstatat(AT_FDCWD, "./12/cgroup.net" [pid 393] close(20) = -1 EBADF (Bad file descriptor) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] close(21 [pid 314] unlink("./12/cgroup.net" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(22 [pid 314] <... unlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] close(23) = -1 EBADF (Bad file descriptor) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] close(24 [pid 314] newfstatat(AT_FDCWD, "./12/cgroup.cpu" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(25 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] unlink("./12/cgroup.cpu" [pid 393] close(26 [pid 314] <... unlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(27 [pid 314] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] close(28 [pid 314] newfstatat(AT_FDCWD, "./12/cgroup" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] close(29) = -1 EBADF (Bad file descriptor) [pid 314] unlink("./12/cgroup" [pid 393] exit_group(0) = ? [pid 314] <... unlink resumed>) = 0 [pid 393] +++ exited with 0 +++ [pid 314] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=9 /* 0.09 s */} --- [pid 314] close(3 [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 314] <... close resumed>) = 0 [pid 312] <... restart_syscall resumed>) = 0 [pid 314] rmdir("./12") = 0 [pid 312] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] mkdir("./13", 0777 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... mkdir resumed>) = 0 [pid 312] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 312] <... openat resumed>) = 3 [pid 314] <... openat resumed>) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 314] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] getdents64(3 [pid 314] close(3) = 0 [pid 312] <... getdents64 resumed>, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 312] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] newfstatat(AT_FDCWD, "./12/file4" [pid 314] <... clone resumed>, child_tidptr=0x55557fa89690) = 15 ci2-android-6-1/strace-static-x86_64: Process 398 attached [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./12/file4" [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 398] set_robust_list(0x55557fa896a0, 24) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... unlink resumed>) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [] [pid 312] umount2("./12/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 398] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] newfstatat(AT_FDCWD, "./12/file3" [pid 398] chdir("./13" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./12/file3" [pid 398] <... chdir resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] <... prctl resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] setpgid(0, 0 [pid 312] newfstatat(AT_FDCWD, "./12/file2" [pid 398] <... setpgid resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 312] unlink("./12/file2" [pid 398] <... symlink resumed>) = 0 [pid 398] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 312] <... unlink resumed>) = 0 [pid 312] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] <... symlink resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./12/file1" [pid 398] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] <... symlink resumed>) = 0 [pid 312] unlink("./12/file1" [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] <... unlink resumed>) = 0 [pid 398] write(3, "1000", 4 [pid 312] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] <... write resumed>) = 4 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] close(3 [pid 396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 312] newfstatat(AT_FDCWD, "./12/file0" [pid 398] <... close resumed>) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] symlink("/dev/binderfs", "./binderfs" [pid 312] unlink("./12/file0" [pid 398] <... symlink resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 398] write(1, "executing program\n", 18 executing program [pid 312] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 398] <... write resumed>) = 18 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] memfd_create("syzkaller", 0 [pid 312] newfstatat(AT_FDCWD, "./12/binderfs" [pid 398] <... memfd_create resumed>) = 3 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 312] unlink("./12/binderfs") = 0 [pid 398] <... mmap resumed>) = 0x7f96da85b000 [pid 312] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./12/cgroup.net") = 0 [pid 312] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./12/cgroup.cpu") = 0 [pid 312] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] unlink("./12/cgroup") = 0 [pid 312] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./12") = 0 [pid 312] mkdir("./13", 0777) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 312] ioctl(3, LOOP_CLR_FD) = 0 [pid 312] close(3) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 399 attached , child_tidptr=0x55557fa89690) = 15 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] set_robust_list(0x55557fa896a0, 24) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] chdir("./13") = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 399] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 399] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 399] write(1, "executing program\n", 18) = 18 executing program [pid 399] memfd_create("syzkaller", 0) = 3 [pid 399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 395] <... write resumed>) = 16777216 [pid 395] munmap(0x7f96da85b000, 138412032) = 0 [pid 395] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 395] close(3) = 0 [pid 395] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [ 32.533068][ T395] loop3: p1 p2 p3 < p5 p6 > p4 [ 32.551417][ T395] loop3: p2 size 16777216 extends beyond EOD, truncated [pid 395] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...}) = 0 [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0), ...}, 0) = 0 [ 32.578925][ T395] loop3: p4 start 1426063360 is beyond EOD, truncated [pid 395] symlink("/dev/loop3p1", "./file0" [pid 399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 395] <... symlink resumed>) = 0 [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x1), ...}, 0) = 0 [pid 395] symlink("/dev/loop3p2", "./file1") = 0 [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p3", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x2), ...}, 0) = 0 [pid 395] symlink("/dev/loop3p3", "./file2") = 0 [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p5", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x3), ...}, 0) = 0 [pid 395] symlink("/dev/loop3p5", "./file3") = 0 [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p6", {st_mode=S_IFBLK|0660, st_rdev=makedev(0x103, 0x4), ...}, 0) = 0 [pid 395] symlink("/dev/loop3p6", "./file4") = 0 [pid 395] newfstatat(AT_FDCWD, "/dev/loop3p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 395] close(4) = 0 [pid 395] close(3) = -1 EBADF (Bad file descriptor) [pid 395] close(4) = -1 EBADF (Bad file descriptor) [pid 395] close(5) = -1 EBADF (Bad file descriptor) [pid 395] close(6) = -1 EBADF (Bad file descriptor) [pid 395] close(7) = -1 EBADF (Bad file descriptor) [pid 395] close(8) = -1 EBADF (Bad file descriptor) [pid 395] close(9) = -1 EBADF (Bad file descriptor) [pid 395] close(10) = -1 EBADF (Bad file descriptor) [pid 395] close(11) = -1 EBADF (Bad file descriptor) [pid 395] close(12) = -1 EBADF (Bad file descriptor) [pid 395] close(13) = -1 EBADF (Bad file descriptor) [pid 395] close(14) = -1 EBADF (Bad file descriptor) [pid 395] close(15) = -1 EBADF (Bad file descriptor) [pid 395] close(16) = -1 EBADF (Bad file descriptor) [pid 395] close(17) = -1 EBADF (Bad file descriptor) [pid 395] close(18) = -1 EBADF (Bad file descriptor) [pid 395] close(19) = -1 EBADF (Bad file descriptor) [pid 395] close(20) = -1 EBADF (Bad file descriptor) [pid 395] close(21) = -1 EBADF (Bad file descriptor) [pid 395] close(22) = -1 EBADF (Bad file descriptor) [pid 395] close(23) = -1 EBADF (Bad file descriptor) [pid 395] close(24) = -1 EBADF (Bad file descriptor) [pid 395] close(25) = -1 EBADF (Bad file descriptor) [pid 395] close(26) = -1 EBADF (Bad file descriptor) [pid 395] close(27) = -1 EBADF (Bad file descriptor) [pid 395] close(28) = -1 EBADF (Bad file descriptor) [pid 395] close(29) = -1 EBADF (Bad file descriptor) [pid 395] exit_group(0) = ? [pid 395] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 316] <... restart_syscall resumed>) = 0 [pid 316] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 316] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/file4") = 0 [pid 316] umount2("./13/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/file3") = 0 [pid 316] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/file2") = 0 [pid 316] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/file1") = 0 [pid 316] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/file0") = 0 [pid 316] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/binderfs") = 0 [pid 316] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/cgroup.net") = 0 [pid 316] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/cgroup.cpu") = 0 [pid 316] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./13/cgroup") = 0 [pid 316] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 316] close(3) = 0 [pid 316] rmdir("./13") = 0 [pid 316] mkdir("./14", 0777) = 0 [pid 316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 316] ioctl(3, LOOP_CLR_FD) = 0 [pid 316] close(3) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x55557fa896a0, 24) = 0 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] chdir("./14") = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] <... clone resumed>, child_tidptr=0x55557fa89690) = 16 [pid 400] <... prctl resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 400] setpgid(0, 0) = 0 [pid 400] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 400] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 400] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 400] write(1, "executing program\n", 18) = 18 executing program [pid 400] memfd_create("syzkaller", 0) = 3 [pid 400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [pid 396] <... write resumed>) = 16777216 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 397] <... write resumed>) = 16777216 [pid 397] munmap(0x7f96da85b000, 138412032) = 0 [pid 397] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 397] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 397] close(3) = 0 [pid 397] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=0, lo_file_name="", ...}) = 0 [pid 397] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=2, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 396] munmap(0x7f96da85b000, 138412032) = 0 [pid 396] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 396] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 396] close(3) = 0 [pid 396] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=0, lo_file_name="", ...}) = 0 [ 32.708585][ T341] ================================================================== [ 32.716681][ T341] BUG: KASAN: null-ptr-deref in do_page_cache_ra+0x18f/0x230 [ 32.724086][ T341] Write of size 8 at addr 0000000000000000 by task udevd/341 [ 32.731449][ T341] [ 32.733766][ T341] CPU: 0 PID: 341 Comm: udevd Not tainted syzkaller #0 [ 32.740612][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 32.750667][ T341] Call Trace: [ 32.753946][ T341] [pid 396] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=4, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 399] <... write resumed>) = 16777216 [pid 398] <... write resumed>) = 16777216 [pid 399] munmap(0x7f96da85b000, 138412032 [pid 398] munmap(0x7f96da85b000, 138412032 [pid 399] <... munmap resumed>) = 0 [pid 398] <... munmap resumed>) = 0 [pid 399] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 399] <... openat resumed>) = 4 [pid 398] <... openat resumed>) = 4 [pid 399] ioctl(4, LOOP_SET_FD, 3 [pid 398] ioctl(4, LOOP_SET_FD, 3 [pid 399] <... ioctl resumed>) = 0 [pid 398] <... ioctl resumed>) = 0 [pid 399] close(3 [pid 398] close(3 [pid 399] <... close resumed>) = 0 [pid 398] <... close resumed>) = 0 [pid 399] ioctl(4, LOOP_GET_STATUS64 [pid 398] ioctl(4, LOOP_GET_STATUS64 [pid 399] <... ioctl resumed>, {lo_offset=0, lo_number=0, lo_flags=0, lo_file_name="", ...}) = 0 [pid 398] <... ioctl resumed>, {lo_offset=0, lo_number=1, lo_flags=0, lo_file_name="", ...}) = 0 [pid 399] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=0, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [ 32.756878][ T341] __dump_stack+0x21/0x24 [ 32.761239][ T341] dump_stack_lvl+0x110/0x170 [ 32.765922][ T341] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.770947][ T341] ? do_page_cache_ra+0x18f/0x230 [ 32.775968][ T341] ? do_page_cache_ra+0x18f/0x230 [ 32.780987][ T341] print_report+0x3d/0x60 [ 32.785312][ T341] kasan_report+0x122/0x150 [ 32.789826][ T341] ? do_page_cache_ra+0x18f/0x230 [ 32.794859][ T341] kasan_check_range+0x249/0x2a0 [ 32.799807][ T341] __kasan_check_write+0x14/0x20 [pid 398] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=1, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 400] <... write resumed>) = 16777216 [pid 400] munmap(0x7f96da85b000, 138412032) = 0 [pid 400] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 400] close(3) = 0 [pid 400] ioctl(4, LOOP_GET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=0, lo_file_name="", ...}) = 0 [ 32.804746][ T341] do_page_cache_ra+0x18f/0x230 [ 32.809620][ T341] page_cache_sync_ra+0x32b/0x3d0 [ 32.814655][ T341] filemap_read+0x6b6/0x23c0 [ 32.819246][ T341] ? __cfi_mas_store_prealloc+0x10/0x10 [ 32.824801][ T341] ? __cfi_filemap_read+0x10/0x10 [ 32.829824][ T341] ? __kasan_check_write+0x14/0x20 [ 32.834932][ T341] ? rwsem_read_trylock+0x2af/0x640 [ 32.840136][ T341] ? __fsnotify_parent+0x72a/0x820 [ 32.845251][ T341] ? get_unmapped_area+0x30c/0x370 [ 32.850367][ T341] blkdev_read_iter+0x439/0x580 [ 32.855217][ T341] vfs_read+0x46e/0x930 [ 32.859374][ T341] ? __cfi_vfs_read+0x10/0x10 [ 32.864048][ T341] ? __kasan_check_read+0x11/0x20 [ 32.869068][ T341] ? __fdget_pos+0x1f2/0x380 [ 32.873656][ T341] ksys_read+0x14a/0x260 [ 32.877893][ T341] ? __cfi_ksys_read+0x10/0x10 [ 32.882662][ T341] ? debug_smp_processor_id+0x17/0x20 [ 32.888039][ T341] __x64_sys_read+0x7b/0x90 [ 32.888289][ T397] loop2: p1 p2 p3 < p5 p6 > p4 [ 32.892536][ T341] x64_sys_call+0x2f/0x9a0 [ 32.892557][ T341] do_syscall_64+0x4c/0xa0 [pid 400] ioctl(4, LOOP_SET_STATUS64, {lo_offset=0, lo_number=3, lo_flags=LO_FLAGS_PARTSCAN, lo_file_name="", ...} [pid 397] <... ioctl resumed>) = 0 [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p1", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x5), ...}, 0) = 0 [pid 397] symlink("/dev/loop2p1", "./file0") = 0 [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p2", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x6), ...}, 0) = 0 [pid 397] symlink("/dev/loop2p2", "./file1") = 0 [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p3", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x7), ...}, 0) = 0 [pid 397] symlink("/dev/loop2p3", "./file2") = 0 [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p4", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p5", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x8), ...}, 0) = 0 [pid 397] symlink("/dev/loop2p5", "./file3") = 0 [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p6", {st_mode=S_IFBLK|0600, st_rdev=makedev(0x103, 0x9), ...}, 0) = 0 [pid 397] symlink("/dev/loop2p6", "./file4") = 0 [pid 397] newfstatat(AT_FDCWD, "/dev/loop2p7", 0x7fff1e4b4b60, 0) = -1 ENOENT (No such file or directory) [pid 397] close(4) = 0 [pid 397] close(3) = -1 EBADF (Bad file descriptor) [pid 397] close(4) = -1 EBADF (Bad file descriptor) [pid 397] close(5) = -1 EBADF (Bad file descriptor) [pid 397] close(6) = -1 EBADF (Bad file descriptor) [pid 397] close(7) = -1 EBADF (Bad file descriptor) [pid 397] close(8) = -1 EBADF (Bad file descriptor) [pid 397] close(9) = -1 EBADF (Bad file descriptor) [pid 397] close(10) = -1 EBADF (Bad file descriptor) [pid 397] close(11) = -1 EBADF (Bad file descriptor) [pid 397] close(12) = -1 EBADF (Bad file descriptor) [pid 397] close(13) = -1 EBADF (Bad file descriptor) [pid 397] close(14) = -1 EBADF (Bad file descriptor) [pid 397] close(15) = -1 EBADF (Bad file descriptor) [pid 397] close(16) = -1 EBADF (Bad file descriptor) [pid 397] close(17) = -1 EBADF (Bad file descriptor) [pid 397] close(18) = -1 EBADF (Bad file descriptor) [pid 397] close(19) = -1 EBADF (Bad file descriptor) [pid 397] close(20) = -1 EBADF (Bad file descriptor) [pid 397] close(21) = -1 EBADF (Bad file descriptor) [pid 397] close(22) = -1 EBADF (Bad file descriptor) [pid 397] close(23) = -1 EBADF (Bad file descriptor) [pid 397] close(24) = -1 EBADF (Bad file descriptor) [pid 397] close(25) = -1 EBADF (Bad file descriptor) [pid 397] close(26) = -1 EBADF (Bad file descriptor) [pid 397] close(27) = -1 EBADF (Bad file descriptor) [pid 397] close(28) = -1 EBADF (Bad file descriptor) [pid 397] close(29) = -1 EBADF (Bad file descriptor) [pid 397] exit_group(0) = ? [pid 397] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=220, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 11 entries */, 32768) = 336 [pid 315] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/file4", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/file4") = 0 [pid 315] umount2("./12/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/file3", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/file3") = 0 [pid 315] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/file2") = 0 [pid 315] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/file1") = 0 [pid 315] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFLNK|0777, st_size=12, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/file0") = 0 [pid 315] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/binderfs") = 0 [pid 315] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/cgroup.net") = 0 [pid 315] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/cgroup.cpu") = 0 [pid 315] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 32.898403][ T397] loop2: p2 size 16777216 extends beyond EOD, [ 32.901778][ T341] ? clear_bhb_loop+0x30/0x80 [ 32.906204][ T397] truncated [ 32.912298][ T341] ? clear_bhb_loop+0x30/0x80 [ 32.912316][ T341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.912333][ T341] RIP: 0033:0x7fec2f4a7407 [ 32.918241][ T397] loop2: p4 start 1426063360 is beyond EOD, [pid 315] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./12/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./12") = 0 [pid 315] mkdir("./13", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 15 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x55557fa896a0, 24) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] chdir("./13") = 0 [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 401] setpgid(0, 0) = 0 [pid 401] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 401] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 401] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 401] write(3, "1000", 4) = 4 [pid 401] close(3) = 0 [pid 401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 401] write(1, "executing program\n", 18) = 18 executing program [pid 401] memfd_create("syzkaller", 0) = 3 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 32.920101][ T341] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 32.924771][ T397] truncated [ 32.930615][ T341] RSP: 002b:00007ffd9e2166d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 32.930634][ T341] RAX: ffffffffffffffda RBX: 00007fec2fb56880 RCX: 00007fec2f4a7407 [ 32.980020][ T341] RDX: 0000000000000200 RSI: 00007fec2f20d000 RDI: 0000000000000009 [ 32.988003][ T341] RBP: 00005610ecf9ab90 R08: 0000000000000000 R09: 0000000000000000 [ 32.995980][ T341] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000018 [ 33.003948][ T341] R13: 0000000000200000 R14: 00005610ecf274d8 R15: 00007fec2fc1b39c [ 33.011924][ T341] [ 33.014944][ T341] ================================================================== [ 33.023164][ T341] Disabling lock debugging due to kernel taint [ 33.029413][ T341] BUG: kernel NULL pointer dereference, address: 0000000000000003 [ 33.037214][ T341] #PF: supervisor write access in kernel mode [ 33.043277][ T341] #PF: error_code(0x0002) - not-present page [ 33.049250][ T341] PGD 0 P4D 0 [ 33.052625][ T341] Oops: 0002 [#1] PREEMPT SMP KASAN [pid 401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 401] munmap(0x7f96da85b000, 138412032) = 0 [pid 401] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 401] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 401] ioctl(4, LOOP_CLR_FD) = 0 [pid 401] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 401] close(4) = 0 [pid 401] close(3) = 0 [pid 401] close(3) = -1 EBADF (Bad file descriptor) [pid 401] close(4) = -1 EBADF (Bad file descriptor) [pid 401] close(5) = -1 EBADF (Bad file descriptor) [pid 401] close(6) = -1 EBADF (Bad file descriptor) [pid 401] close(7) = -1 EBADF (Bad file descriptor) [pid 401] close(8) = -1 EBADF (Bad file descriptor) [pid 401] close(9) = -1 EBADF (Bad file descriptor) [pid 401] close(10) = -1 EBADF (Bad file descriptor) [pid 401] close(11) = -1 EBADF (Bad file descriptor) [pid 401] close(12) = -1 EBADF (Bad file descriptor) [pid 401] close(13) = -1 EBADF (Bad file descriptor) [pid 401] close(14) = -1 EBADF (Bad file descriptor) [pid 401] close(15) = -1 EBADF (Bad file descriptor) [pid 401] close(16) = -1 EBADF (Bad file descriptor) [pid 401] close(17) = -1 EBADF (Bad file descriptor) [pid 401] close(18) = -1 EBADF (Bad file descriptor) [pid 401] close(19) = -1 EBADF (Bad file descriptor) [pid 401] close(20) = -1 EBADF (Bad file descriptor) [pid 401] close(21) = -1 EBADF (Bad file descriptor) [pid 401] close(22) = -1 EBADF (Bad file descriptor) [pid 401] close(23) = -1 EBADF (Bad file descriptor) [pid 401] close(24) = -1 EBADF (Bad file descriptor) [pid 401] close(25) = -1 EBADF (Bad file descriptor) [pid 401] close(26) = -1 EBADF (Bad file descriptor) [pid 401] close(27) = -1 EBADF (Bad file descriptor) [pid 401] close(28) = -1 EBADF (Bad file descriptor) [pid 401] close(29) = -1 EBADF (Bad file descriptor) [pid 401] exit_group(0) = ? [pid 401] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- [ 33.057816][ T341] CPU: 0 PID: 341 Comm: udevd Tainted: G B syzkaller #0 [ 33.066135][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.076178][ T341] RIP: 0010:do_page_cache_ra+0x18f/0x230 [ 33.081829][ T341] Code: fd ff 48 3d 01 f0 ff ff 72 10 e8 7c 1e d2 ff 49 83 ee 01 73 78 e9 87 00 00 00 49 89 c4 48 89 c7 be 08 00 00 00 e8 d1 b2 17 00 41 80 4c 24 03 10 4c 89 e7 48 83 c7 34 be 04 00 00 00 e8 b9 b2 [ 33.101432][ T341] RSP: 0018:ffffc90000f1f878 EFLAGS: 00010246 [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 6 entries */, 32768) = 176 [pid 315] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./13/binderfs") = 0 [pid 315] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./13/cgroup.net") = 0 [pid 315] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./13/cgroup.cpu") = 0 [pid 315] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./13/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./13") = 0 [pid 315] mkdir("./14", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 16 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x55557fa896a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] chdir("./14") = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 402] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 402] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 402] write(1, "executing program\n", 18) = 18 executing program [pid 402] memfd_create("syzkaller", 0) = 3 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 33.107498][ T341] RAX: ffff8881107d3c00 RBX: 0000000000000200 RCX: ffff8881107d3cc0 [ 33.115465][ T341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.123425][ T341] RBP: ffffc90000f1f8c8 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 33.131397][ T341] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 0000000000000000 [ 33.139369][ T341] R13: 0000000000000dff R14: 0000000000000000 R15: ffff88810b7085d0 [ 33.147338][ T341] FS: 00007fec2fb56880(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.156264][ T341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.162844][ T341] CR2: 0000000000000003 CR3: 0000000112130000 CR4: 00000000003506b0 [ 33.170818][ T341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.178784][ T341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.186750][ T341] Call Trace: [ 33.190029][ T341] [ 33.192957][ T341] page_cache_sync_ra+0x32b/0x3d0 [ 33.197993][ T341] filemap_read+0x6b6/0x23c0 [ 33.202586][ T341] ? __cfi_mas_store_prealloc+0x10/0x10 [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 402] munmap(0x7f96da85b000, 138412032) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 402] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 402] ioctl(4, LOOP_CLR_FD) = 0 [pid 402] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 402] close(4) = 0 [pid 402] close(3) = 0 [pid 402] close(3) = -1 EBADF (Bad file descriptor) [pid 402] close(4) = -1 EBADF (Bad file descriptor) [pid 402] close(5) = -1 EBADF (Bad file descriptor) [pid 402] close(6) = -1 EBADF (Bad file descriptor) [pid 402] close(7) = -1 EBADF (Bad file descriptor) [pid 402] close(8) = -1 EBADF (Bad file descriptor) [ 33.208141][ T341] ? __cfi_filemap_read+0x10/0x10 [ 33.213166][ T341] ? __kasan_check_write+0x14/0x20 [ 33.218280][ T341] ? rwsem_read_trylock+0x2af/0x640 [ 33.223486][ T341] ? __fsnotify_parent+0x72a/0x820 [ 33.228602][ T341] ? get_unmapped_area+0x30c/0x370 [ 33.233724][ T341] blkdev_read_iter+0x439/0x580 [ 33.238580][ T341] vfs_read+0x46e/0x930 [ 33.242732][ T341] ? __cfi_vfs_read+0x10/0x10 [ 33.247406][ T341] ? __kasan_check_read+0x11/0x20 [ 33.252431][ T341] ? __fdget_pos+0x1f2/0x380 [ 33.257017][ T341] ksys_read+0x14a/0x260 [pid 402] close(9) = -1 EBADF (Bad file descriptor) [pid 402] close(10) = -1 EBADF (Bad file descriptor) [pid 402] close(11) = -1 EBADF (Bad file descriptor) [pid 402] close(12) = -1 EBADF (Bad file descriptor) [pid 402] close(13) = -1 EBADF (Bad file descriptor) [pid 402] close(14) = -1 EBADF (Bad file descriptor) [pid 402] close(15) = -1 EBADF (Bad file descriptor) [pid 402] close(16) = -1 EBADF (Bad file descriptor) [pid 402] close(17) = -1 EBADF (Bad file descriptor) [pid 402] close(18) = -1 EBADF (Bad file descriptor) [pid 402] close(19) = -1 EBADF (Bad file descriptor) [pid 402] close(20) = -1 EBADF (Bad file descriptor) [pid 402] close(21) = -1 EBADF (Bad file descriptor) [pid 402] close(22) = -1 EBADF (Bad file descriptor) [pid 402] close(23) = -1 EBADF (Bad file descriptor) [pid 402] close(24) = -1 EBADF (Bad file descriptor) [pid 402] close(25) = -1 EBADF (Bad file descriptor) [pid 402] close(26) = -1 EBADF (Bad file descriptor) [pid 402] close(27) = -1 EBADF (Bad file descriptor) [pid 402] close(28) = -1 EBADF (Bad file descriptor) [pid 402] close(29) = -1 EBADF (Bad file descriptor) [pid 402] exit_group(0) = ? [pid 402] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 6 entries */, 32768) = 176 [pid 315] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./14/binderfs") = 0 [pid 315] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./14/cgroup.net") = 0 [pid 315] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./14/cgroup.cpu") = 0 [pid 315] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./14/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./14") = 0 [pid 315] mkdir("./15", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 17 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x55557fa896a0, 24) = 0 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] chdir("./15") = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 403] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 403] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 403] write(1, "executing program\n", 18) = 18 executing program [pid 403] memfd_create("syzkaller", 0) = 3 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 33.261258][ T341] ? __cfi_ksys_read+0x10/0x10 [ 33.266028][ T341] ? debug_smp_processor_id+0x17/0x20 [ 33.271407][ T341] __x64_sys_read+0x7b/0x90 [ 33.275913][ T341] x64_sys_call+0x2f/0x9a0 [ 33.280332][ T341] do_syscall_64+0x4c/0xa0 [ 33.284757][ T341] ? clear_bhb_loop+0x30/0x80 [ 33.289434][ T341] ? clear_bhb_loop+0x30/0x80 [ 33.294104][ T341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.299990][ T341] RIP: 0033:0x7fec2f4a7407 [ 33.304398][ T341] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 33.323999][ T341] RSP: 002b:00007ffd9e2166d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 33.332413][ T341] RAX: ffffffffffffffda RBX: 00007fec2fb56880 RCX: 00007fec2f4a7407 [ 33.340383][ T341] RDX: 0000000000000200 RSI: 00007fec2f20d000 RDI: 0000000000000009 [ 33.348352][ T341] RBP: 00005610ecf9ab90 R08: 0000000000000000 R09: 0000000000000000 [pid 403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 403] munmap(0x7f96da85b000, 138412032) = 0 [pid 403] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 403] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 403] ioctl(4, LOOP_CLR_FD) = 0 [pid 403] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 403] close(4) = 0 [pid 403] close(3) = 0 [pid 403] close(3) = -1 EBADF (Bad file descriptor) [pid 403] close(4) = -1 EBADF (Bad file descriptor) [pid 403] close(5) = -1 EBADF (Bad file descriptor) [pid 403] close(6) = -1 EBADF (Bad file descriptor) [ 33.356322][ T341] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000018 [ 33.364296][ T341] R13: 0000000000200000 R14: 00005610ecf274d8 R15: 00007fec2fc1b39c [ 33.372268][ T341] [ 33.375288][ T341] Modules linked in: [ 33.379196][ T341] CR2: 0000000000000003 [ 33.383358][ T341] ---[ end trace 0000000000000000 ]--- [ 33.388806][ T341] RIP: 0010:do_page_cache_ra+0x18f/0x230 [pid 403] close(7) = -1 EBADF (Bad file descriptor) [pid 403] close(8) = -1 EBADF (Bad file descriptor) [pid 403] close(9) = -1 EBADF (Bad file descriptor) [pid 403] close(10) = -1 EBADF (Bad file descriptor) [pid 403] close(11) = -1 EBADF (Bad file descriptor) [pid 403] close(12) = -1 EBADF (Bad file descriptor) [pid 403] close(13) = -1 EBADF (Bad file descriptor) [pid 403] close(14) = -1 EBADF (Bad file descriptor) [pid 403] close(15) = -1 EBADF (Bad file descriptor) [pid 403] close(16) = -1 EBADF (Bad file descriptor) [pid 403] close(17) = -1 EBADF (Bad file descriptor) [pid 403] close(18) = -1 EBADF (Bad file descriptor) [pid 403] close(19) = -1 EBADF (Bad file descriptor) [pid 403] close(20) = -1 EBADF (Bad file descriptor) [pid 403] close(21) = -1 EBADF (Bad file descriptor) [pid 403] close(22) = -1 EBADF (Bad file descriptor) [pid 403] close(23) = -1 EBADF (Bad file descriptor) [pid 403] close(24) = -1 EBADF (Bad file descriptor) [pid 403] close(25) = -1 EBADF (Bad file descriptor) [pid 403] close(26) = -1 EBADF (Bad file descriptor) [pid 403] close(27) = -1 EBADF (Bad file descriptor) [pid 403] close(28) = -1 EBADF (Bad file descriptor) [pid 403] close(29) = -1 EBADF (Bad file descriptor) [pid 403] exit_group(0) = ? [pid 403] +++ exited with 0 +++ [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 315] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 6 entries */, 32768) = 176 [pid 315] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./15/binderfs") = 0 [pid 315] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./15/cgroup.net") = 0 [pid 315] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./15/cgroup.cpu") = 0 [pid 315] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./15/cgroup") = 0 [pid 315] getdents64(3, 0x55557fa8a750 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./15") = 0 [pid 315] mkdir("./16", 0777) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 315] ioctl(3, LOOP_CLR_FD) = 0 [pid 315] close(3) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fa89690) = 18 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x55557fa896a0, 24) = 0 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] chdir("./16") = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 404] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 404] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 404] write(1, "executing program\n", 18) = 18 executing program [pid 404] memfd_create("syzkaller", 0) = 3 [pid 404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f96da85b000 [ 33.394444][ T341] Code: fd ff 48 3d 01 f0 ff ff 72 10 e8 7c 1e d2 ff 49 83 ee 01 73 78 e9 87 00 00 00 49 89 c4 48 89 c7 be 08 00 00 00 e8 d1 b2 17 00 41 80 4c 24 03 10 4c 89 e7 48 83 c7 34 be 04 00 00 00 e8 b9 b2 [ 33.414046][ T341] RSP: 0018:ffffc90000f1f878 EFLAGS: 00010246 [ 33.420117][ T341] RAX: ffff8881107d3c00 RBX: 0000000000000200 RCX: ffff8881107d3cc0 [ 33.428091][ T341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.436055][ T341] RBP: ffffc90000f1f8c8 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 33.444032][ T341] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 0000000000000000 [ 33.452008][ T341] R13: 0000000000000dff R14: 0000000000000000 R15: ffff88810b7085d0 [ 33.459977][ T341] FS: 00007fec2fb56880(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.468907][ T341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.475485][ T341] CR2: 0000000000000003 CR3: 0000000112130000 CR4: 00000000003506b0 [ 33.483453][ T341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.491419][ T341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.499386][ T341] Kernel panic - not syncing: Fatal exception [ 33.505670][ T341] Kernel Offset: disabled [ 33.509981][ T341] Rebooting in 86400 seconds..