./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3104849387 <...> Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. execve("./syz-executor3104849387", ["./syz-executor3104849387"], 0x7fff6e719610 /* 10 vars */) = 0 brk(NULL) = 0x55555573d000 brk(0x55555573dd40) = 0x55555573dd40 arch_prctl(ARCH_SET_FS, 0x55555573d3c0) = 0 set_tid_address(0x55555573d690) = 5030 set_robust_list(0x55555573d6a0, 24) = 0 rseq(0x55555573dce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3104849387", 4096) = 28 getrandom("\x2e\x8b\x0e\x41\x7d\xe3\x36\x4f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555573dd40 brk(0x55555575ed40) = 0x55555575ed40 brk(0x55555575f000) = 0x55555575f000 mprotect(0x7fc16a200000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5030 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "5030", 4) = 4 close(3) = 0 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=784, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5030}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x2e\x00\x00\x00\x98\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 784 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5030}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5030}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5030}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5030}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5030}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5030}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 mkdir("./syzkaller.jNgVui", 0700) = 0 chmod("./syzkaller.jNgVui", 0777) = 0 chdir("./syzkaller.jNgVui") = 0 mkdir("./0", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5032 ./strace-static-x86_64: Process 5032 attached [pid 5032] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5032] chdir("./0") = 0 [pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5032] setpgid(0, 0) = 0 [pid 5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "1000", 4) = 4 [pid 5032] close(3) = 0 [pid 5032] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5032] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5032] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5032] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5032] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5032] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5032] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5033]}, 88) = 5033 [pid 5032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5032] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5033 attached [pid 5033] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5033] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5033] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5032] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5032] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5033] <... mmap resumed>) = 0x20000000 [pid 5032] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5032] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5033] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... mprotect resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 5032] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5032] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5035]}, 88) = 5035 [pid 5033] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5032] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5035 attached [pid 5035] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5035] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5035] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5035] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5032] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5032] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] <... futex resumed>) = 0 [pid 5033] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5032] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] shmat(0, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5032] <... futex resumed>) = 0 [pid 5032] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] <... madvise resumed>) = 0 [pid 5035] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5035] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] <... shmat resumed>) = 0x20000000 [pid 5033] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5032] exit_group(0) = ? [pid 5033] <... futex resumed>) = ? [pid 5033] +++ exited with 0 +++ [pid 5035] <... futex resumed>) = ? [pid 5035] +++ exited with 0 +++ [pid 5032] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 79.542220][ T27] audit: type=1800 audit(1689726123.159:2): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 unlink("./0/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5036 ./strace-static-x86_64: Process 5036 attached [pid 5036] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5036] chdir("./1") = 0 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5036] write(3, "1000", 4) = 4 [pid 5036] close(3) = 0 [pid 5036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5036] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5036] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5036] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5036] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5036] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5037 attached => {parent_tid=[5037]}, 88) = 5037 [pid 5037] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053 [pid 5036] rt_sigprocmask(SIG_SETMASK, [], [pid 5037] <... rseq resumed>) = 0 [pid 5036] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5037] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5037] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] <... futex resumed>) = 0 [pid 5037] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5036] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5037] <... mmap resumed>) = 0x20000000 [pid 5037] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5036] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5037] <... futex resumed>) = 0 [pid 5036] <... mprotect resumed>) = 0 [pid 5036] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5036] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5038]}, 88) = 5038 [pid 5036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5036] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5038 attached [pid 5038] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5038] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5038] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5037] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] <... madvise resumed>) = 0 [pid 5038] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] <... futex resumed>) = 0 [pid 5037] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5037] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] <... futex resumed>) = 0 [pid 5037] shmat(1, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5036] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] <... shmat resumed>) = 0x20000000 [pid 5037] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] <... futex resumed>) = 0 [pid 5037] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] exit_group(0 [pid 5037] <... futex resumed>) = ? [pid 5036] <... exit_group resumed>) = ? [pid 5037] +++ exited with 0 +++ [pid 5038] <... futex resumed>) = ? [pid 5038] +++ exited with 0 +++ [pid 5036] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5036, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5039 attached , child_tidptr=0x55555573d690) = 5039 [pid 5039] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5039] chdir("./2") = 0 [pid 5039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5039] setpgid(0, 0) = 0 [pid 5039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "1000", 4) = 4 [pid 5039] close(3) = 0 [pid 5039] symlink("/dev/binderfs", "./binderfs") = 0 [ 79.883234][ T27] audit: type=1800 audit(1689726123.499:3): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [pid 5039] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5039] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5039] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5039] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5039] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5039] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5040 attached => {parent_tid=[5040]}, 88) = 5040 [pid 5039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5039] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5039] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5040] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5040] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5039] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5040] <... mmap resumed>) = 0x20000000 [pid 5039] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5040] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5040] <... futex resumed>) = 0 [pid 5039] <... mprotect resumed>) = 0 [pid 5040] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5039] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5039] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5041]}, 88) = 5041 [pid 5039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5039] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5039] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5041 attached [pid 5041] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5041] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5041] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5041] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */) = 0 [pid 5041] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5039] <... futex resumed>) = 0 [pid 5041] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5039] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 0 [pid 5039] <... futex resumed>) = 1 [pid 5040] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5039] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] <... shmget resumed>) = 2 [pid 5040] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5039] <... futex resumed>) = 0 [pid 5040] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5039] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5039] <... futex resumed>) = 0 [pid 5040] shmat(2, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5039] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] <... shmat resumed>) = 0x20000000 [pid 5040] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5039] <... futex resumed>) = 0 [pid 5040] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5039] exit_group(0 [pid 5040] <... futex resumed>) = ? [pid 5039] <... exit_group resumed>) = ? [pid 5040] +++ exited with 0 +++ [pid 5041] <... futex resumed>) = ? [pid 5041] +++ exited with 0 +++ [pid 5039] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5039, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5042 attached , child_tidptr=0x55555573d690) = 5042 [pid 5042] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5042] chdir("./3") = 0 [ 80.180189][ T27] audit: type=1800 audit(1689726123.799:4): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] setpgid(0, 0) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5042] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5042] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5043 attached => {parent_tid=[5043]}, 88) = 5043 [pid 5043] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5043] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5043] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5042] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5043] <... futex resumed>) = 0 [pid 5043] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5042] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5043] <... mmap resumed>) = 0x20000000 [pid 5042] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5043] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5043] <... futex resumed>) = 0 [pid 5042] <... mprotect resumed>) = 0 [pid 5043] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5044]}, 88) = 5044 [pid 5042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5042] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5044 attached [pid 5044] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5044] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5044] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5044] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5042] <... futex resumed>) = 1 [pid 5042] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5042] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] shmat(3, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5044] <... madvise resumed>) = 0 [pid 5043] <... shmat resumed>) = 0x20000000 [pid 5044] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5044] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5043] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] <... futex resumed>) = 0 [pid 5042] exit_group(0 [pid 5044] <... futex resumed>) = ? [pid 5043] <... futex resumed>) = ? [pid 5042] <... exit_group resumed>) = ? [pid 5044] +++ exited with 0 +++ [pid 5043] +++ exited with 0 +++ [pid 5042] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 80.516777][ T27] audit: type=1800 audit(1689726124.139:5): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5045 attached , child_tidptr=0x55555573d690) = 5045 [pid 5045] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5045] chdir("./4") = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5045] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5045] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5045] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5045] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5046]}, 88) = 5046 [pid 5045] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5045] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5045] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5046 attached [pid 5046] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5046] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5046] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5045] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5045] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5045] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5046] <... mmap resumed>) = 0x20000000 [pid 5045] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5045] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5046] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5047]}, 88) = 5047 [pid 5045] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5045] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5045] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5047 attached [pid 5047] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5047] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5047] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5047] <... madvise resumed>) = 0 [pid 5047] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5045] <... futex resumed>) = 0 [pid 5047] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 1 [pid 5046] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5045] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... shmget resumed>) = 4 [pid 5046] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5045] <... futex resumed>) = 0 [pid 5046] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] <... futex resumed>) = 0 [pid 5046] shmat(4, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5045] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... shmat resumed>) = 0x20000000 [pid 5046] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5045] <... futex resumed>) = 0 [pid 5046] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] exit_group(0 [pid 5047] <... futex resumed>) = ? [pid 5046] <... futex resumed>) = ? [pid 5045] <... exit_group resumed>) = ? [pid 5047] +++ exited with 0 +++ [pid 5046] +++ exited with 0 +++ [pid 5045] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5048 ./strace-static-x86_64: Process 5048 attached [ 80.822275][ T27] audit: type=1800 audit(1689726124.439:6): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [pid 5048] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5048] chdir("./5") = 0 [pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5048] setpgid(0, 0) = 0 [pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5048] write(3, "1000", 4) = 4 [pid 5048] close(3) = 0 [pid 5048] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5048] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5048] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5048] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5049]}, 88) = 5049 [pid 5048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5048] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5049 attached [pid 5049] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5049] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5049] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5048] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5049] <... mmap resumed>) = 0x20000000 [pid 5048] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5048] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5049] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... mprotect resumed>) = 0 [pid 5048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5050]}, 88) = 5050 [pid 5048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5048] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5050 attached [pid 5050] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5050] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5050] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5049] <... futex resumed>) = 0 [pid 5049] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5048] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5048] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5048] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] <... futex resumed>) = 0 [pid 5049] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5049] shmat(5, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5048] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... madvise resumed>) = 0 [pid 5049] <... shmat resumed>) = 0x20000000 [pid 5050] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5050] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 0 [pid 5050] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] exit_group(0 [pid 5050] <... futex resumed>) = ? [pid 5049] <... futex resumed>) = ? [pid 5048] <... exit_group resumed>) = ? [pid 5049] +++ exited with 0 +++ [pid 5050] +++ exited with 0 +++ [pid 5048] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 81.156884][ T27] audit: type=1800 audit(1689726124.769:7): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5051 ./strace-static-x86_64: Process 5051 attached [pid 5051] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5051] chdir("./6") = 0 [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5051] setpgid(0, 0) = 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5051] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5051] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5051] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5051] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5051] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5051] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5052 attached => {parent_tid=[5052]}, 88) = 5052 [pid 5051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5051] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5051] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5052] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5052] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5051] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a0fa000 [pid 5051] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5051] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5052] <... mmap resumed>) = 0x20000000 [pid 5051] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5051] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5053]}, 88) = 5053 [pid 5051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5051] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5051] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5052] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5053 attached [pid 5053] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5053] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5053] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5051] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5051] <... futex resumed>) = 1 [pid 5052] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5052] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] shmat(6, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5051] <... futex resumed>) = 0 [pid 5053] <... madvise resumed>) = 0 [pid 5052] <... shmat resumed>) = 0x20000000 [pid 5051] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5052] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5053] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5051] exit_group(0 [pid 5052] <... futex resumed>) = ? [pid 5051] <... exit_group resumed>) = ? [pid 5052] +++ exited with 0 +++ [pid 5053] <... futex resumed>) = ? [ 81.493469][ T27] audit: type=1800 audit(1689726125.109:8): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [pid 5053] +++ exited with 0 +++ [pid 5051] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5054 attached , child_tidptr=0x55555573d690) = 5054 [pid 5054] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5054] chdir("./7") = 0 [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5054] setpgid(0, 0) = 0 [pid 5054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1000", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5054] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5054] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5054] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5055 attached => {parent_tid=[5055]}, 88) = 5055 [pid 5055] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5055] set_robust_list(0x7fc16a13b9a0, 24 [pid 5054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5054] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... set_robust_list resumed>) = 0 [pid 5055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5055] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5054] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5055] <... mmap resumed>) = 0x20000000 [pid 5054] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5054] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5055] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... mprotect resumed>) = 0 [pid 5054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5056]}, 88) = 5056 [pid 5055] <... futex resumed>) = 0 [pid 5054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5054] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5056 attached [pid 5056] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5056] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5055] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5054] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5054] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5054] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... futex resumed>) = 0 [pid 5055] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5054] <... futex resumed>) = 0 [pid 5055] <... futex resumed>) = 1 [pid 5054] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] shmat(7, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff) = 0x20000000 [pid 5056] <... madvise resumed>) = 0 [pid 5055] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5055] <... futex resumed>) = 1 [pid 5055] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... futex resumed>) = 0 [pid 5054] exit_group(0) = ? [pid 5056] <... futex resumed>) = ? [pid 5056] +++ exited with 0 +++ [pid 5055] <... futex resumed>) = ? [ 81.856567][ T27] audit: type=1800 audit(1689726125.479:9): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [pid 5055] +++ exited with 0 +++ [pid 5054] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5054, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5057 ./strace-static-x86_64: Process 5057 attached [pid 5057] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5057] chdir("./8") = 0 [pid 5057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] setpgid(0, 0) = 0 [pid 5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5057] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5057] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5057] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5057] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5057] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5058]}, 88) = 5058 [pid 5057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5057] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5058 attached [pid 5058] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5058] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5058] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5057] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5057] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a0fa000 [pid 5057] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5057] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5057] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5059]}, 88) = 5059 [pid 5057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5057] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... mmap resumed>) = 0x20000000 [pid 5058] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5059 attached [pid 5059] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5059] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5057] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5057] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5057] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5057] <... futex resumed>) = 1 [pid 5058] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5057] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... shmget resumed>) = 8 [pid 5058] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5058] shmat(8, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5057] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... madvise resumed>) = 0 [pid 5058] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5057] <... futex resumed>) = 0 [pid 5058] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... futex resumed>) = 0 [pid 5057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5058] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] exit_group(0 [pid 5059] <... futex resumed>) = ? [pid 5058] <... futex resumed>) = ? [pid 5057] <... exit_group resumed>) = ? [pid 5058] +++ exited with 0 +++ [ 82.196419][ T27] audit: type=1800 audit(1689726125.809:10): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [pid 5059] +++ exited with 0 +++ [pid 5057] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5057, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5060 attached , child_tidptr=0x55555573d690) = 5060 [pid 5060] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5060] chdir("./9") = 0 [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] setpgid(0, 0) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] write(3, "1000", 4) = 4 [pid 5060] close(3) = 0 [pid 5060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5060] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5060] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5061 attached [pid 5061] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5061] set_robust_list(0x7fc16a13b9a0, 24 [pid 5060] <... clone3 resumed> => {parent_tid=[5061]}, 88) = 5061 [pid 5061] <... set_robust_list resumed>) = 0 [pid 5061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5061] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5060] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5061] <... mmap resumed>) = 0x20000000 [pid 5060] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5061] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... mprotect resumed>) = 0 [pid 5060] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5062]}, 88) = 5062 [pid 5060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5062 attached [pid 5062] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5062] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */) = 0 [pid 5062] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = 0 [pid 5060] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = 1 [pid 5061] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5060] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... futex resumed>) = 1 [pid 5061] <... shmget resumed>) = 9 [pid 5062] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5061] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5060] <... futex resumed>) = 0 [pid 5061] shmat(9, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5060] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5061] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5061] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] exit_group(0 [pid 5062] <... futex resumed>) = ? [pid 5061] <... futex resumed>) = ? [pid 5060] <... exit_group resumed>) = ? [pid 5062] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ [pid 5060] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5060, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 [ 82.523756][ T27] audit: type=1800 audit(1689726126.139:11): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x55555573d690) = 5063 [pid 5063] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5063] chdir("./10") = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5063] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5063] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5064 attached => {parent_tid=[5064]}, 88) = 5064 [pid 5064] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5064] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5064] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5064] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5063] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5063] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5063] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5064] <... mmap resumed>) = 0x20000000 [pid 5063] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5064] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5064] <... futex resumed>) = 0 [pid 5064] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... mprotect resumed>) = 0 [pid 5063] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5065]}, 88) = 5065 [pid 5063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5065 attached [pid 5065] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5065] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5065] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5063] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5063] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5063] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 0 [pid 5064] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5064] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5063] <... futex resumed>) = 0 [pid 5064] shmat(10, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5063] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5064] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5063] <... futex resumed>) = 0 [pid 5064] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... madvise resumed>) = 0 [pid 5065] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] exit_group(0 [pid 5065] <... futex resumed>) = ? [pid 5064] <... futex resumed>) = ? [pid 5063] <... exit_group resumed>) = ? [pid 5064] +++ exited with 0 +++ [pid 5065] +++ exited with 0 +++ [pid 5063] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5066] chdir("./11") = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5066] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5066] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5067 attached => {parent_tid=[5067]}, 88) = 5067 [pid 5067] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... rseq resumed>) = 0 [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] set_robust_list(0x7fc16a13b9a0, 24 [pid 5066] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... mmap resumed>) = 0x20000000 [pid 5066] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5067] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... futex resumed>) = 0 [pid 5066] <... mprotect resumed>) = 0 [pid 5067] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5068]}, 88) = 5068 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5068 attached [pid 5068] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5068] set_robust_list(0x7fc16a11a9a0, 24 [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... set_robust_list resumed>) = 0 [pid 5068] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 1 [pid 5067] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5066] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... shmget resumed>) = 11 [pid 5067] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5067] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... futex resumed>) = 0 [pid 5067] shmat(11, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5066] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5067] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5067] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... madvise resumed>) = 0 [pid 5068] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] exit_group(0 [pid 5067] <... futex resumed>) = ? [pid 5066] <... exit_group resumed>) = ? [pid 5068] <... futex resumed>) = ? [pid 5067] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5066] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5069 attached , child_tidptr=0x55555573d690) = 5069 [pid 5069] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5069] chdir("./12") = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5069] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5069] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5069] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5070]}, 88) = 5070 [pid 5069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5069] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5070 attached [pid 5070] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5070] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5070] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a0fa000 [pid 5069] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5069] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5071]}, 88) = 5071 [pid 5069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5069] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... mmap resumed>) = 0x20000000 [pid 5070] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5071 attached [pid 5071] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5071] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5071] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5069] <... futex resumed>) = 1 [pid 5070] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5069] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... shmget resumed>) = 12 [pid 5070] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5070] shmat(12, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5069] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5069] <... futex resumed>) = 0 [pid 5070] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... futex resumed>) = 0 [pid 5069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] <... madvise resumed>) = 0 [pid 5071] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] exit_group(0 [pid 5071] <... futex resumed>) = ? [pid 5070] <... futex resumed>) = ? [pid 5069] <... exit_group resumed>) = ? [pid 5070] +++ exited with 0 +++ [pid 5071] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached , child_tidptr=0x55555573d690) = 5072 [pid 5072] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5072] chdir("./13") = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5072] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5072] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5072] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5073 attached => {parent_tid=[5073]}, 88) = 5073 [pid 5073] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5073] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5073] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5072] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5073] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5072] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5072] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... mmap resumed>) = 0x20000000 [pid 5073] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5073] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5072] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5074]}, 88) = 5074 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5072] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5074 attached [pid 5074] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5074] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5072] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5072] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5072] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = 1 [pid 5073] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5072] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... shmget resumed>) = 13 [pid 5073] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5073] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5073] shmat(13, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5072] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5073] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5073] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... madvise resumed>) = 0 [pid 5074] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] exit_group(0 [pid 5073] <... futex resumed>) = ? [pid 5072] <... exit_group resumed>) = ? [pid 5074] <... futex resumed>) = ? [pid 5073] +++ exited with 0 +++ [pid 5074] +++ exited with 0 +++ [pid 5072] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached , child_tidptr=0x55555573d690) = 5075 [pid 5075] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5075] chdir("./14") = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5075] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5075] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5076]}, 88) = 5076 [pid 5075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5075] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5076 attached [pid 5076] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5076] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a0fa000 [pid 5075] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5077]}, 88) = 5077 [pid 5075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5075] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... mmap resumed>) = 0x20000000 [pid 5076] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5077 attached [pid 5077] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5077] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5077] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5075] <... futex resumed>) = 1 [pid 5075] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5075] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] shmat(14, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5077] <... madvise resumed>) = 0 [pid 5076] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5075] <... futex resumed>) = 0 [pid 5077] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] exit_group(0) = ? [pid 5076] <... futex resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5077] <... futex resumed>) = ? [pid 5077] +++ exited with 0 +++ [pid 5075] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5078 attached , child_tidptr=0x55555573d690) = 5078 [pid 5078] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5078] chdir("./15") = 0 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] setpgid(0, 0) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1000", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5078] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5078] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5079]}, 88) = 5079 [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5079 attached [pid 5079] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5079] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5079] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a0fa000 [pid 5078] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5080]}, 88) = 5080 [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... mmap resumed>) = 0x20000000 [pid 5079] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5080 attached [pid 5080] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5080] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5080] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5079] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5078] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... shmget resumed>) = 15 [pid 5079] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5079] shmat(15, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5078] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5078] <... futex resumed>) = 0 [pid 5079] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... madvise resumed>) = 0 [pid 5080] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] exit_group(0 [pid 5080] <... futex resumed>) = ? [pid 5079] <... futex resumed>) = ? [pid 5078] <... exit_group resumed>) = ? [pid 5080] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached , child_tidptr=0x55555573d690) = 5081 [pid 5081] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5081] chdir("./16") = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5081] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5081] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5081] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5082]}, 88) = 5082 [pid 5081] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5082 attached [pid 5082] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5082] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5081] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... mmap resumed>) = 0x20000000 [pid 5081] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5081] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5082] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mprotect resumed>) = 0 [pid 5081] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5081] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5083]}, 88) = 5083 [pid 5081] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5083 attached [pid 5082] <... futex resumed>) = 0 [pid 5083] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5083] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5083] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5082] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... madvise resumed>) = 0 [pid 5083] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5083] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5081] <... futex resumed>) = 1 [pid 5082] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5081] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... shmget resumed>) = 16 [pid 5082] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5082] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5082] shmat(16, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5081] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5082] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] exit_group(0 [pid 5083] <... futex resumed>) = ? [pid 5081] <... exit_group resumed>) = ? [pid 5083] +++ exited with 0 +++ [pid 5082] <... futex resumed>) = ? [pid 5082] +++ exited with 0 +++ [pid 5081] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x55555573d6a0, 24 [pid 5030] <... clone resumed>, child_tidptr=0x55555573d690) = 5084 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5084] chdir("./17") = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4) = 4 [pid 5084] close(3) = 0 [ 84.741915][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 84.741930][ T27] audit: type=1800 audit(1689726128.359:18): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [pid 5084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5084] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5084] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5084] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5085 attached => {parent_tid=[5085]}, 88) = 5085 [pid 5085] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053 [pid 5084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5085] <... rseq resumed>) = 0 [pid 5084] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] set_robust_list(0x7fc16a13b9a0, 24 [pid 5084] <... futex resumed>) = 0 [pid 5084] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... set_robust_list resumed>) = 0 [pid 5085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5085] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... mmap resumed>) = 0x20000000 [pid 5084] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5085] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... mprotect resumed>) = 0 [pid 5084] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5086]}, 88) = 5086 [pid 5084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5084] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5086 attached [pid 5086] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5086] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5086] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5084] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5085] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5084] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... shmget resumed>) = 17 [pid 5085] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5084] <... futex resumed>) = 0 [pid 5085] shmat(17, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5084] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... madvise resumed>) = 0 [pid 5085] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5084] <... futex resumed>) = 0 [pid 5086] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] exit_group(0 [pid 5085] <... futex resumed>) = ? [pid 5084] <... exit_group resumed>) = ? [pid 5085] +++ exited with 0 +++ [pid 5086] <... futex resumed>) = ? [pid 5086] +++ exited with 0 +++ [pid 5084] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached , child_tidptr=0x55555573d690) = 5087 [pid 5087] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5087] chdir("./18") = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [ 85.059105][ T27] audit: type=1800 audit(1689726128.679:19): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0 [pid 5087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5087] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5088]}, 88) = 5088 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5088 attached [pid 5088] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5088] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5088] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a0fa000 [pid 5087] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0}./strace-static-x86_64: Process 5089 attached => {parent_tid=[5089]}, 88) = 5089 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... mmap resumed>) = 0x20000000 [pid 5088] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5089] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5089] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5087] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5088] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5087] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... shmget resumed>) = 18 [pid 5088] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5088] shmat(18, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5087] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5087] <... futex resumed>) = 0 [pid 5089] <... madvise resumed>) = 0 [pid 5088] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] exit_group(0 [pid 5088] <... futex resumed>) = ? [pid 5087] <... exit_group resumed>) = ? [pid 5088] +++ exited with 0 +++ [pid 5089] <... futex resumed>) = ? [ 85.377564][ T27] audit: type=1800 audit(1689726128.999:20): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0 [pid 5089] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x55555573d690) = 5090 [pid 5090] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5090] chdir("./19") = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5090] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5090] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5091 attached [pid 5091] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053 [pid 5090] <... clone3 resumed> => {parent_tid=[5091]}, 88) = 5091 [pid 5091] <... rseq resumed>) = 0 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5090] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] set_robust_list(0x7fc16a13b9a0, 24 [pid 5090] <... futex resumed>) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5090] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5091] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5091] <... mmap resumed>) = 0x20000000 [pid 5090] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5091] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5091] <... futex resumed>) = 0 [pid 5090] <... mprotect resumed>) = 0 [pid 5091] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0}./strace-static-x86_64: Process 5092 attached => {parent_tid=[5092]}, 88) = 5092 [pid 5092] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5092] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5090] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5091] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5090] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... shmget resumed>) = 19 [pid 5091] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5091] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] <... futex resumed>) = 0 [pid 5091] shmat(19, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5090] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... madvise resumed>) = 0 [pid 5091] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5092] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5092] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] exit_group(0 [pid 5092] <... futex resumed>) = ? [pid 5091] <... futex resumed>) = ? [pid 5090] <... exit_group resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5091] +++ exited with 0 +++ [pid 5090] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached , child_tidptr=0x55555573d690) = 5093 [pid 5093] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5093] chdir("./20") = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5093] setpgid(0, 0) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] write(3, "1000", 4) = 4 [pid 5093] close(3) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5093] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.697931][ T27] audit: type=1800 audit(1689726129.319:21): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=19 res=0 errno=0 [pid 5093] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5093] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5093] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5093] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5093] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5094]}, 88) = 5094 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5094 attached [pid 5094] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5094] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5094] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5093] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5093] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5094] <... mmap resumed>) = 0x20000000 [pid 5093] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5093] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5093] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5093] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5095]}, 88) = 5095 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5095 attached [pid 5095] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5095] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5095] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5094] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5093] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5093] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5093] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... futex resumed>) = 0 [pid 5094] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5093] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] shmat(20, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5093] <... futex resumed>) = 0 [pid 5094] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5095] <... madvise resumed>) = 0 [pid 5095] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7fc16a2063d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5093] exit_group(0) = ? [pid 5094] +++ exited with 0 +++ [pid 5095] <... futex resumed>) = ? [pid 5095] +++ exited with 0 +++ [pid 5093] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 86.017603][ T27] audit: type=1800 audit(1689726129.639:22): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=20 res=0 errno=0 unlink("./20/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5096 ./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5096] chdir("./21") = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5096] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5096] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5096] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5096] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5096] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0}./strace-static-x86_64: Process 5097 attached => {parent_tid=[5097]}, 88) = 5097 [pid 5097] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5097] set_robust_list(0x7fc16a13b9a0, 24 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5097] <... set_robust_list resumed>) = 0 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5097] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5096] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5096] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5096] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5097] <... mmap resumed>) = 0x20000000 [pid 5096] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5097] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE [pid 5097] <... futex resumed>) = 0 [pid 5096] <... mprotect resumed>) = 0 [pid 5097] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5096] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5096] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5098]}, 88) = 5098 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5096] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5098 attached [pid 5098] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5098] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5098] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5096] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5096] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5096] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... futex resumed>) = 0 [pid 5097] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5096] <... futex resumed>) = 0 [pid 5096] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... futex resumed>) = 1 [pid 5097] shmat(21, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff) = -1 ENOMEM (Cannot allocate memory) [pid 5097] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = 1 [pid 5097] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... madvise resumed>) = 0 [pid 5098] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] exit_group(0) = ? [pid 5097] <... futex resumed>) = ? [pid 5097] +++ exited with 0 +++ [pid 5098] <... futex resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5096] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 [ 86.348748][ T27] audit: type=1800 audit(1689726129.969:23): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=21 res=0 errno=0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555573d690) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5099] chdir("./22") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5099] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5099] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5100]}, 88) = 5100 ./strace-static-x86_64: Process 5100 attached [pid 5100] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5100] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5100] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5099] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5099] <... futex resumed>) = 1 [pid 5100] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5099] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5100] <... mmap resumed>) = 0x20000000 [pid 5099] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5099] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5101]}, 88) = 5101 [pid 5100] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5099] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5101 attached [pid 5101] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5101] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5101] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5099] <... futex resumed>) = 1 [pid 5100] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21< [pid 5099] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... shmget resumed>) = 22 [pid 5100] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5100] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 0 [pid 5100] shmat(22, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5099] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5100] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5100] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] <... madvise resumed>) = 0 [pid 5101] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] exit_group(0 [pid 5100] <... futex resumed>) = ? [pid 5099] <... exit_group resumed>) = ? [pid 5100] +++ exited with 0 +++ [pid 5101] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555573e730 /* 3 entries */, 32768) = 80 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x55555573e730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached , child_tidptr=0x55555573d690) = 5102 [pid 5102] set_robust_list(0x55555573d6a0, 24) = 0 [pid 5102] chdir("./23") = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 86.678348][ T27] audit: type=1800 audit(1689726130.299:24): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] rt_sigaction(SIGRT_1, {sa_handler=0x7fc16a1aa6d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc16a19bfe0}, NULL, 8) = 0 [pid 5102] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc16a11b000 [pid 5102] mprotect(0x7fc16a11c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a13b990, parent_tid=0x7fc16a13b990, exit_signal=0, stack=0x7fc16a11b000, stack_size=0x20300, tls=0x7fc16a13b6c0} => {parent_tid=[5103]}, 88) = 5103 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5102] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5103 attached [pid 5103] rseq(0x7fc16a13bfe0, 0x20, 0, 0x53053053) = 0 [pid 5103] set_robust_list(0x7fc16a13b9a0, 24) = 0 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP|0xb635773f04ebbee0, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0 [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5102] futex(0x7fc16a2063dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5103] <... mmap resumed>) = 0x20000000 [pid 5102] <... mmap resumed>) = 0x7fc16a0fa000 [pid 5102] mprotect(0x7fc16a0fb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc16a11a990, parent_tid=0x7fc16a11a990, exit_signal=0, stack=0x7fc16a0fa000, stack_size=0x20300, tls=0x7fc16a11a6c0} => {parent_tid=[5104]}, 88) = 5104 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5102] futex(0x7fc16a2063d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5104 attached [pid 5104] rseq(0x7fc16a11afe0, 0x20, 0, 0x53053053) = 0 [pid 5104] set_robust_list(0x7fc16a11a9a0, 24) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5104] madvise(0x20000000, 6291551, 0x19 /* MADV_??? */ [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5102] futex(0x7fc16a2063dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5102] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... futex resumed>) = 0 [pid 5103] shmget(IPC_PRIVATE, 16384, SHM_HUGETLB|SHM_NORESERVE|21<) = 0 [pid 5103] shmat(23, 0x20000000, SHM_REMAP|SHM_EXEC|0xffff0fff [pid 5102] futex(0x7fc16a2063c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... shmat resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fc16a2063cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] futex(0x7fc16a2063cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... futex resumed>) = 0 [ 87.036803][ T27] audit: type=1800 audit(1689726130.659:25): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor310" name="SYSV00000000" dev="hugetlbfs" ino=23 res=0 errno=0 [ 87.067753][ T5104] ------------[ cut here ]------------ [ 87.073301][ T5104] kernel BUG at mm/khugepaged.c:1785! [ 87.079456][ T5104] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 87.085574][ T5104] CPU: 1 PID: 5104 Comm: syz-executor310 Not tainted 6.5.0-rc2-next-20230718-syzkaller #0 [ 87.095586][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 87.105754][ T5104] RIP: 0010:collapse_file+0x1169/0x5530 [ 87.111358][ T5104] Code: 89 c6 e8 5a fd a5 ff 84 db 0f 85 66 f1 ff ff e8 1d 02 a6 ff 0f 0b e9 5a f1 ff ff c6 44 24 48 00 e9 65 f0 ff ff e8 07 02 a6 ff <0f> 0b e8 00 02 a6 ff 4d 85 ed 74 1c e8 f6 01 a6 ff 44 89 eb 31 ff [ 87.131530][ T5104] RSP: 0018:ffffc90003b4f820 EFLAGS: 00010293 [ 87.137628][ T5104] RAX: 0000000000000000 RBX: 00000000000000d4 RCX: 0000000000000000 [ 87.145631][ T5104] RDX: ffff88807c701dc0 RSI: ffffffff81e0cb29 RDI: 0000000000000007 [ 87.153637][ T5104] RBP: 0000000777ff6cd4 R08: 0000000000000007 R09: 0000000000000000 [ 87.161635][ T5104] R10: 00000000000000d4 R11: 0000000000000000 R12: 0000000000000000 [ 87.169624][ T5104] R13: 0000000000000000 R14: ffff88802c262780 R15: 0000000777ff6ad4 [ 87.177612][ T5104] FS: 00007fc16a11a6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 87.186567][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.193188][ T5104] CR2: 00007fc16a180ab3 CR3: 000000007a556000 CR4: 00000000003506e0 [ 87.201198][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.209193][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.217186][ T5104] Call Trace: [ 87.220479][ T5104] [ 87.224985][ T5104] ? die+0x31/0x80 [ 87.228739][ T5104] ? do_trap+0x1ab/0x3b0 [ 87.233168][ T5104] ? collapse_file+0x1169/0x5530 [ 87.238144][ T5104] ? do_error_trap+0x9e/0x160 [ 87.243317][ T5104] ? collapse_file+0x1169/0x5530 [ 87.249673][ T5104] ? handle_invalid_op+0x2c/0x30 [ 87.254642][ T5104] ? collapse_file+0x1169/0x5530 [ 87.259702][ T5104] ? exc_invalid_op+0x2d/0x40 [ 87.264440][ T5104] ? asm_exc_invalid_op+0x1a/0x20 [ 87.269500][ T5104] ? collapse_file+0x1169/0x5530 [ 87.274461][ T5104] ? collapse_file+0x1169/0x5530 [ 87.279423][ T5104] ? hpage_collapse_scan_pmd+0x2190/0x2190 [ 87.285252][ T5104] ? find_held_lock+0x2d/0x110 [ 87.290050][ T5104] ? hpage_collapse_scan_file+0x293/0x1650 [ 87.295884][ T5104] ? xas_find+0x2fd/0x870 [ 87.300235][ T5104] ? collapse_pte_mapped_thp+0x212/0x1320 [ 87.305975][ T5104] hpage_collapse_scan_file+0xc8e/0x1650 [ 87.311638][ T5104] ? collapse_file+0x5530/0x5530 [ 87.316599][ T5104] ? __lru_add_drain_all+0xe7/0x740 [ 87.321828][ T5104] madvise_collapse+0x52c/0xb50 [ 87.326722][ T5104] ? current_is_khugepaged+0x30/0x30 [ 87.332044][ T5104] ? mas_prev_slot+0x3e8/0x1940 [ 87.336931][ T5104] madvise_vma_behavior+0x200/0x1e60 [ 87.342255][ T5104] ? madvise_vma_anon_name+0xf0/0xf0 [ 87.347560][ T5104] ? mas_prev+0xc6/0x460 [ 87.352088][ T5104] ? madvise_vma_anon_name+0xf0/0xf0 [ 87.357408][ T5104] ? find_vma_prev+0xe8/0x160 [ 87.362108][ T5104] ? vm_unmapped_area+0x9d0/0x9d0 [ 87.367158][ T5104] ? lock_sync+0x190/0x190 [ 87.371606][ T5104] ? preempt_count_sub+0x150/0x150 [ 87.376752][ T5104] ? madvise_vma_anon_name+0xf0/0xf0 [ 87.382055][ T5104] madvise_walk_vmas+0x1cf/0x2c0 [ 87.387014][ T5104] ? __remove_memory+0x40/0x40 [ 87.391800][ T5104] do_madvise+0x333/0x660 [ 87.396152][ T5104] ? madvise_set_anon_name+0x110/0x110 [ 87.401632][ T5104] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.406855][ T5104] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.412072][ T5104] __x64_sys_madvise+0xaa/0x110 [ 87.416943][ T5104] do_syscall_64+0x38/0xb0 [ 87.421386][ T5104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.427307][ T5104] RIP: 0033:0x7fc16a182cc9 [ 87.431741][ T5104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.451403][ T5104] RSP: 002b:00007fc16a11a238 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.459841][ T5104] RAX: ffffffffffffffda RBX: 00007fc16a2063d8 RCX: 00007fc16a182cc9 [ 87.467830][ T5104] RDX: 0000000000000019 RSI: 000000000060005f RDI: 0000000020000000 [ 87.475815][ T5104] RBP: 00007fc16a2063d0 R08: 00007ffcafcfa9c7 R09: 00007fc16a11a6c0 [ 87.483803][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: b635773f07ebbeef [ 87.491788][ T5104] R13: 000000000000006e R14: 00007ffcafcfa8e0 R15: 00007ffcafcfa9c8 [ 87.499782][ T5104] [ 87.502812][ T5104] Modules linked in: [ 87.513186][ T5104] ---[ end trace 0000000000000000 ]--- [ 87.518924][ T5104] RIP: 0010:collapse_file+0x1169/0x5530 [pid 5103] futex(0x7fc16a2063c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] exit_group(0 [pid 5103] <... futex resumed>) = ? [pid 5103] +++ exited with 0 +++ [pid 5102] <... exit_group resumed>) = ? [ 87.524524][ T5104] Code: 89 c6 e8 5a fd a5 ff 84 db 0f 85 66 f1 ff ff e8 1d 02 a6 ff 0f 0b e9 5a f1 ff ff c6 44 24 48 00 e9 65 f0 ff ff e8 07 02 a6 ff <0f> 0b e8 00 02 a6 ff 4d 85 ed 74 1c e8 f6 01 a6 ff 44 89 eb 31 ff [ 87.544451][ T5104] RSP: 0018:ffffc90003b4f820 EFLAGS: 00010293 [ 87.550815][ T5104] RAX: 0000000000000000 RBX: 00000000000000d4 RCX: 0000000000000000 [ 87.559157][ T5104] RDX: ffff88807c701dc0 RSI: ffffffff81e0cb29 RDI: 0000000000000007 [ 87.567408][ T5104] RBP: 0000000777ff6cd4 R08: 0000000000000007 R09: 0000000000000000 [ 87.575646][ T5104] R10: 00000000000000d4 R11: 0000000000000000 R12: 0000000000000000 [ 87.583690][ T5104] R13: 0000000000000000 R14: ffff88802c262780 R15: 0000000777ff6ad4 [ 87.591738][ T5104] FS: 00007fc16a11a6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 87.600740][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.607378][ T5104] CR2: 00007fc16a1d2208 CR3: 000000007a556000 CR4: 00000000003506f0 [ 87.615539][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.623532][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.631573][ T5104] Kernel panic - not syncing: Fatal exception [ 87.638033][ T5104] Kernel Offset: disabled [ 87.642377][ T5104] Rebooting in 86400 seconds..