./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2033928618 <...> Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. execve("./syz-executor2033928618", ["./syz-executor2033928618"], 0x7ffd238bda90 /* 10 vars */) = 0 brk(NULL) = 0x555555866000 brk(0x555555866d00) = 0x555555866d00 arch_prctl(ARCH_SET_FS, 0x555555866380) = 0 set_tid_address(0x555555866650) = 361 set_robust_list(0x555555866660, 24) = 0 rseq(0x555555866ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2033928618", 4096) = 28 getrandom("\x2c\xd2\xae\x71\x29\xf4\xe0\x7b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555866d00 brk(0x555555887d00) = 0x555555887d00 brk(0x555555888000) = 0x555555888000 mprotect(0x7f95dd0bd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 [ 27.671379][ T23] audit: type=1400 audit(1705113508.650:66): avc: denied { execmem } for pid=361 comm="syz-executor203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 [ 27.699391][ T23] audit: type=1400 audit(1705113508.680:67): avc: denied { mounton } for pid=361 comm="syz-executor203" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.705083][ T361] cgroup1: Unknown subsys name 'net' [ 27.722273][ T23] audit: type=1400 audit(1705113508.680:68): avc: denied { mount } for pid=361 comm="syz-executor203" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.728185][ T361] cgroup1: Unknown subsys name 'net_prio' [ 27.755638][ T361] cgroup1: Unknown subsys name 'devices' umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 27.762725][ T23] audit: type=1400 audit(1705113508.740:69): avc: denied { unmount } for pid=361 comm="syz-executor203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 27.902683][ T361] cgroup1: Unknown subsys name 'hugetlb' [ 27.908918][ T361] cgroup1: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555866650) = 363 ./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x555555866660, 24) = 0 [pid 363] mkdir("./syzkaller.FrBipe", 0700 [pid 361] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 363] <... mkdir resumed>) = 0 [pid 363] chmod("./syzkaller.FrBipe", 0777) = 0 [pid 363] chdir("./syzkaller.FrBipe") = 0 [pid 363] unshare(CLONE_NEWPID [pid 361] <... clone resumed>, child_tidptr=0x555555866650) = 364 [pid 361] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 364 attached ./strace-static-x86_64: Process 365 attached [pid 364] set_robust_list(0x555555866660, 24 [pid 363] <... unshare resumed>) = 0 [pid 363] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 361] <... clone resumed>, child_tidptr=0x555555866650) = 365 [pid 361] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... set_robust_list resumed>) = 0 [pid 361] <... clone resumed>, child_tidptr=0x555555866650) = 367 [pid 361] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] mkdir("./syzkaller.TBIGR6", 0700 [pid 361] <... clone resumed>, child_tidptr=0x555555866650) = 368 [pid 361] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555866650) = 369 [pid 365] set_robust_list(0x555555866660, 24) = 0 [pid 365] mkdir("./syzkaller.gcEwzM", 0700 [pid 364] <... mkdir resumed>) = 0 [pid 364] chmod("./syzkaller.TBIGR6", 0777) = 0 [pid 365] <... mkdir resumed>) = 0 [pid 365] chmod("./syzkaller.gcEwzM", 0777) = 0 [pid 365] chdir("./syzkaller.gcEwzM") = 0 [pid 365] unshare(CLONE_NEWPID) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] chdir("./syzkaller.TBIGR6") = 0 [pid 365] <... clone resumed>, child_tidptr=0x555555866650) = 370 [pid 364] unshare(CLONE_NEWPID) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 363] <... clone resumed>, child_tidptr=0x555555866650) = 371 ./strace-static-x86_64: Process 368 attached ./strace-static-x86_64: Process 370 attached [pid 368] set_robust_list(0x555555866660, 24 [pid 370] set_robust_list(0x555555866660, 24 [pid 368] <... set_robust_list resumed>) = 0 [pid 370] <... set_robust_list resumed>) = 0 [pid 368] mkdir("./syzkaller.g0pozm", 0700 [pid 370] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 364] <... clone resumed>, child_tidptr=0x555555866650) = 372 ./strace-static-x86_64: Process 369 attached ./strace-static-x86_64: Process 367 attached [pid 369] set_robust_list(0x555555866660, 24 [pid 370] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 369] <... set_robust_list resumed>) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 368] <... mkdir resumed>) = 0 [pid 369] mkdir("./syzkaller.JJ5nK2", 0700) = 0 [pid 367] set_robust_list(0x555555866660, 24) = 0 [pid 367] mkdir("./syzkaller.XpQp9h", 0700 [pid 369] chmod("./syzkaller.JJ5nK2", 0777) = 0 [pid 369] chdir("./syzkaller.JJ5nK2") = 0 [pid 369] unshare(CLONE_NEWPID) = 0 [pid 369] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 367] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x555555866660, 24) = 0 [pid 371] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setsid() = 1 [pid 371] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 371] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 371] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 367] chmod("./syzkaller.XpQp9h", 0777 [pid 371] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 367] <... chmod resumed>) = 0 [pid 371] <... prlimit64 resumed>NULL) = 0 [pid 371] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 371] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 367] chdir("./syzkaller.XpQp9h" [pid 371] unshare(CLONE_NEWNS [pid 367] <... chdir resumed>) = 0 [pid 371] <... unshare resumed>) = 0 [pid 367] unshare(CLONE_NEWPID) = 0 [pid 367] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 369] <... clone resumed>, child_tidptr=0x555555866650) = 373 [pid 371] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 371] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 371] unshare(CLONE_NEWCGROUP) = 0 [pid 371] unshare(CLONE_NEWUTS) = 0 [pid 371] unshare(CLONE_SYSVSEM) = 0 [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 367] <... clone resumed>, child_tidptr=0x555555866650) = 374 [pid 371] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 372 attached ) = -1 ENOENT (No such file or directory) [pid 372] set_robust_list(0x555555866660, 24) = 0 [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 372] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 371] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 371] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 371] getpid() = 1 [pid 371] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 371] unshare(CLONE_NEWNET [pid 372] <... prctl resumed>) = 0 [pid 372] setsid() = 1 [pid 372] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 372] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 372] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 370] <... prctl resumed>) = 0 [pid 368] chmod("./syzkaller.g0pozm", 0777 [pid 372] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 372] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 370] setsid( [pid 372] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 368] <... chmod resumed>) = 0 [pid 370] <... setsid resumed>) = 1 ./strace-static-x86_64: Process 374 attached ./strace-static-x86_64: Process 373 attached [pid 370] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 368] chdir("./syzkaller.g0pozm" [pid 372] <... prlimit64 resumed>NULL) = 0 [pid 372] unshare(CLONE_NEWNS) = 0 [ 28.052341][ T23] audit: type=1400 audit(1705113509.030:70): avc: denied { mounton } for pid=370 comm="syz-executor203" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 28.076691][ T23] audit: type=1400 audit(1705113509.060:71): avc: denied { mount } for pid=370 comm="syz-executor203" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [pid 372] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 372] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 372] unshare(CLONE_NEWCGROUP) = 0 [pid 372] unshare(CLONE_NEWUTS) = 0 [pid 372] unshare(CLONE_SYSVSEM) = 0 [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] getpid() = 1 [pid 372] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 374] set_robust_list(0x555555866660, 24 [pid 373] set_robust_list(0x555555866660, 24 [pid 370] <... prlimit64 resumed>NULL) = 0 [pid 368] <... chdir resumed>) = 0 [pid 370] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 373] <... set_robust_list resumed>) = 0 [pid 368] unshare(CLONE_NEWPID [pid 374] <... set_robust_list resumed>) = 0 [pid 370] <... prlimit64 resumed>NULL) = 0 [pid 373] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 368] <... unshare resumed>) = 0 [pid 374] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 370] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 368] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 370] <... prlimit64 resumed>NULL) = 0 [pid 374] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 370] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 370] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 368] <... clone resumed>, child_tidptr=0x555555866650) = 375 [pid 374] <... prctl resumed>) = 0 [pid 373] <... prctl resumed>) = 0 [pid 370] <... prlimit64 resumed>NULL) = 0 [pid 374] setsid( [pid 373] setsid( [pid 370] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 374] <... setsid resumed>) = 1 [pid 373] <... setsid resumed>) = 1 [pid 370] <... prlimit64 resumed>NULL) = 0 [pid 374] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 373] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 370] unshare(CLONE_NEWNS [pid 374] <... prlimit64 resumed>NULL) = 0 [pid 373] <... prlimit64 resumed>NULL) = 0 [pid 370] <... unshare resumed>) = 0 [pid 373] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 374] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 370] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 373] <... prlimit64 resumed>NULL) = 0 [pid 374] <... prlimit64 resumed>NULL) = 0 [pid 370] <... mount resumed>) = 0 [pid 374] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 373] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 370] unshare(CLONE_NEWIPC [pid 374] <... prlimit64 resumed>NULL) = 0 [pid 373] <... prlimit64 resumed>NULL) = 0 [pid 374] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 370] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... prlimit64 resumed>NULL) = 0 [pid 373] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 370] unshare(CLONE_NEWCGROUP [pid 374] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 373] <... prlimit64 resumed>NULL) = 0 [pid 374] <... prlimit64 resumed>NULL) = 0 [pid 370] <... unshare resumed>) = 0 [pid 373] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 374] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 373] <... prlimit64 resumed>NULL) = 0 [pid 370] unshare(CLONE_NEWUTS [pid 374] <... prlimit64 resumed>NULL) = 0 [pid 373] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 374] unshare(CLONE_NEWNS [pid 370] <... unshare resumed>) = 0 [pid 373] <... prlimit64 resumed>NULL) = 0 [pid 374] <... unshare resumed>) = 0 [pid 373] unshare(CLONE_NEWNS [pid 370] unshare(CLONE_SYSVSEM [pid 374] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 370] <... unshare resumed>) = 0 [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 373] <... unshare resumed>) = 0 [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] <... mount resumed>) = 0 [pid 373] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 374] unshare(CLONE_NEWIPC [pid 373] <... mount resumed>) = 0 [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 373] unshare(CLONE_NEWIPC [pid 374] unshare(CLONE_NEWCGROUP [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 373] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... unshare resumed>) = 0 [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] unshare(CLONE_NEWUTS [pid 373] unshare(CLONE_NEWCGROUP [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 374] <... unshare resumed>) = 0 [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 373] <... unshare resumed>) = 0 [pid 374] unshare(CLONE_SYSVSEM [pid 373] unshare(CLONE_NEWUTS [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 374] <... unshare resumed>) = 0 [pid 373] <... unshare resumed>) = 0 [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 373] unshare(CLONE_SYSVSEM [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 374] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 373] <... unshare resumed>) = 0 [pid 370] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 374] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 373] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 370] getpid( [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 373] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] <... getpid resumed>) = 1 [pid 374] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 373] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 370] <... capget resumed>{effective=1<) = -1 ENOENT (No such file or directory) [pid 370] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 373] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] <... capset resumed>) = 0 [pid 374] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] unshare(CLONE_NEWNET [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 373] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x555555866660, 24) = 0 [pid 375] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setsid() = 1 [pid 375] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 375] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 375] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 375] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 375] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 375] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 375] unshare(CLONE_NEWNS) = 0 [pid 375] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 375] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 375] unshare(CLONE_NEWCGROUP) = 0 [pid 375] unshare(CLONE_NEWUTS) = 0 [pid 375] unshare(CLONE_SYSVSEM) = 0 [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 373] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 373] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 374] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 375] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 373] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 374] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 373] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 374] getpid( [pid 373] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] <... getpid resumed>) = 1 [pid 373] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 374] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 375] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 374] <... capget resumed>{effective=1<) = -1 ENOENT (No such file or directory) [pid 374] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 374] unshare(CLONE_NEWNET [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 373] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 375] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 375] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 375] getpid() = 1 [pid 375] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 373] getpid() = 1 [pid 373] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 372] <... unshare resumed>) = 0 [pid 372] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "0 65535", 7) = 7 [pid 372] close(3) = 0 [pid 372] mkdir("/dev/binderfs", 0777) = 0 [pid 372] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 372] getpid() = 1 [pid 372] mkdir("/syzcgroup/unified/syz1", 0777) = 0 [pid 372] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "32", 2) = 2 [pid 372] close(3) = 0 [pid 372] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1", 1) = 1 [pid 372] close(3) = 0 [pid 372] mkdir("/syzcgroup/cpu/syz1", 0777) = 0 [pid 372] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1", 1) = 1 [pid 372] close(3) = 0 [pid 372] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "313524224", 9) = 9 [pid 372] close(3) = 0 [pid 372] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "314572800", 9) = 9 [pid 372] close(3) = 0 [pid 372] mkdir("/syzcgroup/net/syz1", 0777) = 0 [pid 372] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1", 1) = 1 [pid 372] close(3) = 0 [pid 372] mkdir("./0", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555866650) = 2 ./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x555555866660, 24) = 0 [pid 376] chdir("./0") = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 376] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 376] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [ 28.191771][ T23] audit: type=1400 audit(1705113509.170:73): avc: denied { mounton } for pid=372 comm="syz-executor203" path="/dev/binderfs" dev="devtmpfs" ino=10702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [pid 376] close(3 [pid 371] <... unshare resumed>) = 0 [pid 371] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "0 65535", 7) = 7 [pid 371] close(3) = 0 [pid 371] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 371] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 371] getpid() = 1 [pid 371] mkdir("/syzcgroup/unified/syz0", 0777) = 0 [pid 371] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "32", 2) = 2 [pid 371] close(3) = 0 [pid 371] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1", 1) = 1 [pid 371] close(3) = 0 [pid 371] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 374] <... unshare resumed>) = 0 [pid 371] <... mkdir resumed>) = 0 [pid 371] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1", 1) = 1 [pid 371] close(3) = 0 [pid 371] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "313524224", 9) = 9 [pid 371] close(3) = 0 [pid 371] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 374] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 371] <... openat resumed>) = 3 [pid 370] <... unshare resumed>) = 0 [pid 371] write(3, "314572800", 9) = 9 [pid 371] close(3) = 0 [pid 371] mkdir("/syzcgroup/net/syz0", 0777) = 0 [pid 371] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1", 1) = 1 [pid 371] close(3) = 0 [pid 371] mkdir("./0", 0777) = 0 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555866650) = 2 [pid 376] <... close resumed>) = 0 [pid 376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 376] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 376] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 373] <... unshare resumed>) = 0 [pid 373] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "0 65535", 7) = 7 ./strace-static-x86_64: Process 377 attached [pid 374] <... openat resumed>) = 3 [pid 370] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 373] close(3) = 0 [pid 373] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 373] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 376] <... ioctl resumed>) = 0 [pid 376] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 373] getpid() = 1 [pid 373] mkdir("/syzcgroup/unified/syz5", 0777) = 0 [pid 376] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 373] openat(AT_FDCWD, "/syzcgroup/unified/syz5/pids.max", O_WRONLY|O_CLOEXEC [pid 370] <... openat resumed>) = 3 [pid 377] set_robust_list(0x555555866660, 24 [pid 374] write(3, "0 65535", 7 [pid 370] write(3, "0 65535", 7 [pid 377] <... set_robust_list resumed>) = 0 [pid 374] <... write resumed>) = 7 [pid 370] <... write resumed>) = 7 [pid 377] chdir("./0" [pid 374] close(3 [pid 370] close(3 [pid 377] <... chdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 370] <... close resumed>) = 0 [pid 377] <... prctl resumed>) = 0 [pid 374] mkdir("/dev/binderfs", 0777 [pid 377] setpgid(0, 0 [pid 370] mkdir("/dev/binderfs", 0777 [pid 377] <... setpgid resumed>) = 0 [pid 374] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 370] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 377] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 374] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 370] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 377] <... symlink resumed>) = 0 [pid 374] <... mount resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 377] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 374] getpid( [pid 370] <... mount resumed>) = 0 [pid 373] write(3, "32", 2 [pid 377] <... symlink resumed>) = 0 [pid 370] getpid( [pid 377] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 374] <... getpid resumed>) = 1 [pid 370] <... getpid resumed>) = 1 [pid 377] <... symlink resumed>) = 0 [pid 370] mkdir("/syzcgroup/unified/syz2", 0777 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] mkdir("/syzcgroup/unified/syz3", 0777 [pid 373] <... write resumed>) = 2 [pid 373] close(3 [pid 370] <... mkdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 373] openat(AT_FDCWD, "/syzcgroup/unified/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 374] <... mkdir resumed>) = 0 [pid 370] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC [pid 377] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 370] <... openat resumed>) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 375] <... unshare resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 370] write(3, "32", 2 [pid 373] <... openat resumed>) = 3 [pid 373] write(3, "1", 1) = 1 [pid 373] close(3) = 0 [pid 373] mkdir("/syzcgroup/cpu/syz5", 0777) = 0 [pid 373] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1", 1) = 1 [pid 373] close(3) = 0 [pid 373] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "313524224", 9) = 9 [pid 373] close(3) = 0 [pid 373] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "314572800", 9) = 9 [pid 373] close(3) = 0 [pid 373] mkdir("/syzcgroup/net/syz5", 0777) = 0 [pid 373] openat(AT_FDCWD, "/syzcgroup/net/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1", 1) = 1 [pid 373] close(3) = 0 [pid 373] mkdir("./0", 0777) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x555555866660, 24 [pid 377] close(3 [pid 375] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 374] write(3, "32", 2 [pid 373] <... clone resumed>, child_tidptr=0x555555866650) = 2 [pid 377] <... close resumed>) = 0 [pid 370] <... write resumed>) = 2 [pid 375] <... openat resumed>) = 3 [pid 377] symlink("/dev/binderfs", "./binderfs" [pid 374] <... write resumed>) = 2 [pid 370] close(3 [pid 375] write(3, "0 65535", 7 [pid 376] <... sendmsg resumed>) = 180 [pid 378] <... set_robust_list resumed>) = 0 [pid 377] <... symlink resumed>) = 0 [pid 375] <... write resumed>) = 7 [pid 376] close(3 [pid 374] close(3 [pid 370] <... close resumed>) = 0 [pid 377] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] close(3 [pid 374] <... close resumed>) = 0 [pid 370] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 378] chdir("./0" [pid 377] <... openat resumed>) = 3 [pid 375] <... close resumed>) = 0 [pid 378] <... chdir resumed>) = 0 [pid 375] mkdir("/dev/binderfs", 0777 [pid 370] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 377] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 375] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 370] write(3, "1", 1 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 374] <... openat resumed>) = 3 [pid 378] <... prctl resumed>) = 0 [pid 378] setpgid(0, 0 [pid 370] <... write resumed>) = 1 [pid 378] <... setpgid resumed>) = 0 [pid 378] symlink("/syzcgroup/unified/syz5", "./cgroup") = 0 [pid 375] <... mount resumed>) = 0 [pid 374] write(3, "1", 1 [pid 370] close(3 [pid 378] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 378] symlink("/syzcgroup/net/syz5", "./cgroup.net") = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 370] <... close resumed>) = 0 [pid 378] <... openat resumed>) = 3 [pid 375] getpid( [pid 374] <... write resumed>) = 1 [pid 370] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 378] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 376] <... close resumed>) = 0 [pid 375] <... getpid resumed>) = 1 [pid 374] close(3 [pid 378] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 377] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 376] close(4 [pid 375] mkdir("/syzcgroup/unified/syz4", 0777 [pid 374] <... close resumed>) = 0 [pid 370] <... mkdir resumed>) = 0 [pid 377] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 376] <... close resumed>) = 0 [pid 376] close(5 [pid 375] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 374] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 377] <... socket resumed>) = 4 [pid 370] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 376] close(6) = -1 EBADF (Bad file descriptor) [pid 376] close(7) = -1 EBADF (Bad file descriptor) [pid 376] close(8 [pid 374] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 28.236538][ T23] audit: type=1400 audit(1705113509.170:74): avc: denied { mount } for pid=372 comm="syz-executor203" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.271617][ T376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [pid 377] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 370] <... openat resumed>) = 3 [pid 376] close(9 [pid 375] write(3, "32", 2 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(10 [pid 374] <... openat resumed>) = 3 [pid 370] write(3, "1", 1 [pid 375] <... write resumed>) = 2 [pid 374] write(3, "1", 1 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(11 [pid 375] close(3 [pid 370] <... write resumed>) = 1 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(12 [pid 374] <... write resumed>) = 1 [pid 375] <... close resumed>) = 0 [pid 374] close(3 [pid 370] close(3 [pid 375] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 374] <... close resumed>) = 0 [pid 370] <... close resumed>) = 0 [pid 378] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... socket resumed>) = 4 [pid 376] close(13 [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 370] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 378] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(14) = -1 EBADF (Bad file descriptor) [pid 376] close(15) = -1 EBADF (Bad file descriptor) [pid 376] close(16) = -1 EBADF (Bad file descriptor) [pid 376] close(17) = -1 EBADF (Bad file descriptor) [pid 376] close(18) = -1 EBADF (Bad file descriptor) [pid 376] close(19) = -1 EBADF (Bad file descriptor) [pid 376] close(20) = -1 EBADF (Bad file descriptor) [pid 376] close(21) = -1 EBADF (Bad file descriptor) [pid 376] close(22) = -1 EBADF (Bad file descriptor) [pid 376] close(23) = -1 EBADF (Bad file descriptor) [pid 376] close(24) = -1 EBADF (Bad file descriptor) [pid 376] close(25) = -1 EBADF (Bad file descriptor) [pid 376] close(26) = -1 EBADF (Bad file descriptor) [pid 376] close(27) = -1 EBADF (Bad file descriptor) [pid 376] close(28) = -1 EBADF (Bad file descriptor) [pid 376] close(29) = -1 EBADF (Bad file descriptor) [pid 376] exit_group(0) = ? [pid 376] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 372] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./0/cgroup.cpu") = 0 [pid 372] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./0/binderfs") = 0 [pid 372] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./0/cgroup") = 0 [pid 372] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./0/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./0/memory.events") = 0 [pid 372] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./0/cgroup.net") = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./0") = 0 [pid 372] mkdir("./1", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 379 attached [pid 375] write(3, "1", 1 [pid 374] <... openat resumed>) = 3 [pid 370] <... openat resumed>) = 3 [pid 379] set_robust_list(0x555555866660, 24 [pid 375] <... write resumed>) = 1 [pid 374] write(3, "313524224", 9 [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 3 [pid 370] write(3, "313524224", 9 [pid 375] close(3 [pid 374] <... write resumed>) = 9 [pid 370] <... write resumed>) = 9 [pid 375] <... close resumed>) = 0 [pid 374] close(3 [pid 370] close(3 [pid 375] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 374] <... close resumed>) = 0 [pid 370] <... close resumed>) = 0 [pid 379] <... set_robust_list resumed>) = 0 [pid 379] chdir("./1") = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 379] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 377] <... sendmsg resumed>) = 180 [pid 375] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 370] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 377] close(3 [pid 375] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 374] <... openat resumed>) = 3 [pid 370] <... openat resumed>) = 3 [pid 377] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 374] write(3, "314572800", 9 [pid 370] write(3, "314572800", 9 [pid 377] close(4 [pid 375] write(3, "1", 1 [pid 374] <... write resumed>) = 9 [pid 370] <... write resumed>) = 9 [pid 377] <... close resumed>) = 0 [pid 375] <... write resumed>) = 1 [pid 374] close(3 [pid 370] close(3 [pid 377] close(5 [pid 375] close(3 [pid 374] <... close resumed>) = 0 [pid 370] <... close resumed>) = 0 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... close resumed>) = 0 [pid 374] mkdir("/syzcgroup/net/syz3", 0777 [pid 370] mkdir("/syzcgroup/net/syz2", 0777 [pid 377] close(6 [pid 375] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 374] <... mkdir resumed>) = 0 [pid 370] <... mkdir resumed>) = 0 [pid 379] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 378] <... sendmsg resumed>) = 180 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 370] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 379] <... symlink resumed>) = 0 [pid 378] close(3 [pid 377] close(7 [pid 375] write(3, "313524224", 9 [pid 374] <... openat resumed>) = 3 [pid 370] <... openat resumed>) = 3 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... write resumed>) = 9 [pid 374] write(3, "1", 1 [pid 370] write(3, "1", 1 [pid 379] <... openat resumed>) = 3 [pid 377] close(8 [pid 375] close(3 [pid 374] <... write resumed>) = 1 [pid 370] <... write resumed>) = 1 [pid 379] write(3, "1000", 4 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... close resumed>) = 0 [pid 374] close(3 [pid 370] close(3 [pid 379] <... write resumed>) = 4 [pid 377] close(9 [pid 375] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 374] <... close resumed>) = 0 [pid 370] <... close resumed>) = 0 [pid 379] close(3 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... openat resumed>) = 3 [pid 374] mkdir("./0", 0777 [pid 370] mkdir("./0", 0777 [pid 379] <... close resumed>) = 0 [pid 378] <... close resumed>) = 0 [pid 377] close(10 [pid 375] write(3, "314572800", 9 [pid 374] <... mkdir resumed>) = 0 [pid 370] <... mkdir resumed>) = 0 [pid 379] symlink("/dev/binderfs", "./binderfs" [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... write resumed>) = 9 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 370] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 380 attached [pid 379] <... symlink resumed>) = 0 [pid 378] close(4 [pid 377] close(11 [pid 375] close(3./strace-static-x86_64: Process 381 attached [pid 380] set_robust_list(0x555555866660, 24 [pid 379] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... close resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 2 [pid 370] <... clone resumed>, child_tidptr=0x555555866650) = 2 [pid 381] set_robust_list(0x555555866660, 24 [pid 380] <... set_robust_list resumed>) = 0 [pid 377] close(12 [pid 375] mkdir("/syzcgroup/net/syz4", 0777 [pid 381] <... set_robust_list resumed>) = 0 [pid 380] chdir("./0" [pid 379] <... openat resumed>) = 3 [pid 378] <... close resumed>) = 0 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... mkdir resumed>) = 0 [pid 381] chdir("./0" [pid 380] <... chdir resumed>) = 0 [pid 377] close(13 [pid 375] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 379] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 381] <... chdir resumed>) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 378] close(5 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... openat resumed>) = 3 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 380] <... prctl resumed>) = 0 [pid 377] close(14 [pid 375] write(3, "1", 1 [pid 380] setpgid(0, 0 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... write resumed>) = 1 [pid 380] <... setpgid resumed>) = 0 [pid 377] close(15 [pid 375] close(3 [pid 380] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... close resumed>) = 0 [pid 380] <... symlink resumed>) = 0 [pid 377] close(16 [pid 375] mkdir("./0", 0777 [pid 380] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... mkdir resumed>) = 0 [pid 380] <... symlink resumed>) = 0 [pid 377] close(17 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 382 attached [pid 381] <... prctl resumed>) = 0 [pid 380] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] set_robust_list(0x555555866660, 24 [pid 381] setpgid(0, 0 [pid 380] <... symlink resumed>) = 0 [pid 377] close(18 [pid 375] <... clone resumed>, child_tidptr=0x555555866650) = 2 [pid 382] <... set_robust_list resumed>) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] chdir("./0" [pid 380] <... openat resumed>) = 3 [pid 377] close(19 [pid 382] <... chdir resumed>) = 0 [pid 380] write(3, "1000", 4 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 380] <... write resumed>) = 4 [pid 377] close(20 [pid 382] <... prctl resumed>) = 0 [pid 380] close(3 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] setpgid(0, 0 [pid 380] <... close resumed>) = 0 [pid 377] close(21 [pid 382] <... setpgid resumed>) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs" [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 381] <... setpgid resumed>) = 0 [pid 377] close(22) = -1 EBADF (Bad file descriptor) [pid 377] close(23) = -1 EBADF (Bad file descriptor) [pid 381] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 377] close(24 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(6 [pid 377] close(25 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(7 [pid 377] close(26 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(8 [pid 377] close(27 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(9 [pid 377] close(28 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(10 [pid 377] close(29 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(11 [pid 377] exit_group(0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... exit_group resumed>) = ? [pid 378] close(12 [pid 377] +++ exited with 0 +++ [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(13 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(14) = -1 EBADF (Bad file descriptor) [pid 378] close(15) = -1 EBADF (Bad file descriptor) [pid 378] close(16) = -1 EBADF (Bad file descriptor) [pid 378] close(17) = -1 EBADF (Bad file descriptor) [pid 378] close(18 [pid 371] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(19 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(20 [pid 371] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(21 [pid 371] <... openat resumed>) = 3 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(3, "", [pid 378] close(22) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 378] close(23) = -1 EBADF (Bad file descriptor) [pid 371] getdents64(3, [pid 378] close(24) = -1 EBADF (Bad file descriptor) [pid 378] close(25) = -1 EBADF (Bad file descriptor) [pid 378] close(26) = -1 EBADF (Bad file descriptor) [pid 378] close(27) = -1 EBADF (Bad file descriptor) [pid 378] close(28) = -1 EBADF (Bad file descriptor) [pid 378] close(29) = -1 EBADF (Bad file descriptor) [pid 378] exit_group(0) = ? [pid 378] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 373] getdents64(3, [pid 382] <... symlink resumed>) = 0 [pid 381] <... symlink resumed>) = 0 [pid 380] <... symlink resumed>) = 0 [pid 373] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 382] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 381] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 380] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 382] <... symlink resumed>) = 0 [pid 381] <... symlink resumed>) = 0 [pid 380] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 382] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 381] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 380] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 373] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 371] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 382] <... symlink resumed>) = 0 [pid 381] <... symlink resumed>) = 0 [pid 380] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 373] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 380] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 373] unlink("./0/cgroup.cpu" [pid 371] unlink("./0/cgroup.cpu" [pid 382] <... openat resumed>) = 3 [pid 381] <... openat resumed>) = 3 [pid 380] <... socket resumed>) = 4 [pid 373] <... unlink resumed>) = 0 [pid 382] write(3, "1000", 4 [ 28.291775][ T377] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [ 28.303590][ T378] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [pid 380] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 373] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 382] <... write resumed>) = 4 [pid 381] write(3, "1000", 4 [pid 379] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... unlink resumed>) = 0 [pid 382] close(3 [pid 381] <... write resumed>) = 4 [pid 373] newfstatat(AT_FDCWD, "./0/binderfs", [pid 371] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 382] <... close resumed>) = 0 [pid 381] close(3 [pid 373] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 382] symlink("/dev/binderfs", "./binderfs" [pid 381] <... close resumed>) = 0 [pid 373] unlink("./0/binderfs" [pid 371] newfstatat(AT_FDCWD, "./0/binderfs", [pid 382] <... symlink resumed>) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs" [pid 379] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 373] <... unlink resumed>) = 0 [pid 382] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 382] <... openat resumed>) = 3 [pid 381] <... symlink resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] unlink("./0/binderfs" [pid 382] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 373] newfstatat(AT_FDCWD, "./0/cgroup", [pid 381] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 382] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 373] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... unlink resumed>) = 0 [pid 382] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 373] unlink("./0/cgroup" [pid 382] <... socket resumed>) = 4 [pid 381] <... openat resumed>) = 3 [pid 379] <... socket resumed>) = 4 [pid 373] <... unlink resumed>) = 0 [pid 371] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 382] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 373] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 381] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 379] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 381] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 373] newfstatat(AT_FDCWD, "./0/memory.events", [pid 381] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 373] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] newfstatat(AT_FDCWD, "./0/cgroup", [pid 373] unlink("./0/memory.events" [pid 381] <... socket resumed>) = 4 [pid 373] <... unlink resumed>) = 0 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] unlink("./0/cgroup" [pid 381] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... unlink resumed>) = 0 [pid 373] unlink("./0/cgroup.net" [pid 371] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... unlink resumed>) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 371] newfstatat(AT_FDCWD, "./0/memory.events", [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./0" [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 371] unlink("./0/memory.events" [pid 373] mkdir("./1", 0777) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 371] <... unlink resumed>) = 0 [pid 373] <... clone resumed>, child_tidptr=0x555555866650) = 3 ./strace-static-x86_64: Process 383 attached [pid 371] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 383] set_robust_list(0x555555866660, 24 [pid 380] <... sendmsg resumed>) = 180 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 383] <... set_robust_list resumed>) = 0 [pid 371] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 383] chdir("./1" [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 383] <... chdir resumed>) = 0 [pid 371] unlink("./0/cgroup.net" [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 371] <... unlink resumed>) = 0 [pid 383] <... prctl resumed>) = 0 [pid 371] getdents64(3, [pid 383] setpgid(0, 0 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 383] <... setpgid resumed>) = 0 [pid 371] close(3 [pid 383] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 371] <... close resumed>) = 0 [pid 383] <... symlink resumed>) = 0 [pid 371] rmdir("./0" [pid 383] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 371] <... rmdir resumed>) = 0 [pid 383] <... symlink resumed>) = 0 [pid 371] mkdir("./1", 0777 [pid 383] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 371] <... mkdir resumed>) = 0 [pid 383] <... symlink resumed>) = 0 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 383] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 383] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0./strace-static-x86_64: Process 384 attached [pid 382] <... sendmsg resumed>) = 180 [pid 380] close(3 [pid 384] set_robust_list(0x555555866660, 24 [pid 382] close(3 [pid 381] <... sendmsg resumed>) = 180 [pid 380] <... close resumed>) = 0 [pid 379] <... sendmsg resumed>) = 180 [pid 384] <... set_robust_list resumed>) = 0 [pid 383] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 382] <... close resumed>) = 0 [pid 381] close(3 [pid 380] close(4 [pid 379] close(3 [pid 384] chdir("./1" [pid 382] close(4 [pid 381] <... close resumed>) = 0 [pid 380] <... close resumed>) = 0 [pid 379] <... close resumed>) = 0 [pid 384] <... chdir resumed>) = 0 [pid 382] <... close resumed>) = 0 [pid 381] close(4 [pid 380] close(5 [pid 379] close(4 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 382] close(5 [pid 381] <... close resumed>) = 0 [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = 0 [pid 384] <... prctl resumed>) = 0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(5 [pid 380] close(6 [pid 379] close(5 [pid 384] setpgid(0, 0 [pid 382] close(6 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... setpgid resumed>) = 0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(6 [pid 380] close(7 [pid 379] close(6 [pid 384] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 382] close(7 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... symlink resumed>) = 0 [pid 383] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(7 [pid 380] close(8 [pid 379] close(7 [pid 384] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 382] close(8 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... symlink resumed>) = 0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(8 [pid 380] close(9 [pid 379] close(8 [pid 384] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 382] close(9 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... symlink resumed>) = 0 [pid 383] <... socket resumed>) = 4 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(9 [pid 380] close(10 [pid 379] close(9 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 382] close(10 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... openat resumed>) = 3 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(10 [ 28.349338][ T380] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [ 28.365809][ T382] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [ 28.375303][ T379] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [ 28.384787][ T381] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [pid 380] close(11 [pid 379] close(10 [pid 384] write(3, "1000", 4 [pid 383] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 382] close(11 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... write resumed>) = 4 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(11 [pid 380] close(12 [pid 379] close(11 [pid 384] close(3 [pid 382] close(12 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = 0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(12 [pid 380] close(13 [pid 379] close(12 [pid 384] symlink("/dev/binderfs", "./binderfs" [pid 382] close(13 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... symlink resumed>) = 0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(13 [pid 380] close(14 [pid 379] close(13 [pid 384] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 382] close(14 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... openat resumed>) = 3 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(14 [pid 380] close(15 [pid 379] close(14 [pid 384] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 382] close(15 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(15 [pid 380] close(16 [pid 379] close(15 [pid 384] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 382] close(16 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... socket resumed>) = 4 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(16 [pid 380] close(17 [pid 379] close(16 [pid 384] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 382] close(17 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(17 [pid 380] close(18 [pid 379] close(17 [pid 382] close(18 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(18 [pid 380] close(19 [pid 379] close(18 [pid 382] close(19 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(19 [pid 380] close(20 [pid 379] close(19 [pid 382] close(20 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(20 [pid 380] close(21 [pid 379] close(20 [pid 382] close(21 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(21 [pid 380] close(22 [pid 379] close(21 [pid 382] close(22 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(22 [pid 380] close(23 [pid 379] close(22 [pid 382] close(23 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(23 [pid 380] close(24 [pid 379] close(23 [pid 382] close(24 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(24 [pid 380] close(25 [pid 379] close(24 [pid 382] close(25 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(25 [pid 380] close(26 [pid 379] close(25 [pid 382] close(26 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(26 [pid 380] close(27 [pid 379] close(26 [pid 382] close(27 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(27 [pid 380] close(28 [pid 379] close(27 [pid 382] close(28 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(28 [pid 380] close(29 [pid 379] close(28 [pid 382] close(29 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(29 [pid 380] exit_group(0 [pid 379] close(29 [pid 382] exit_group(0 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 380] <... exit_group resumed>) = ? [pid 379] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... exit_group resumed>) = ? [pid 381] exit_group(0 [pid 380] +++ exited with 0 +++ [pid 379] exit_group(0 [pid 382] +++ exited with 0 +++ [pid 381] <... exit_group resumed>) = ? [pid 379] <... exit_group resumed>) = ? [pid 383] <... sendmsg resumed>) = 180 [pid 381] +++ exited with 0 +++ [pid 379] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 374] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 374] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 370] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(3, "", [pid 370] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 370] <... openat resumed>) = 3 [pid 374] getdents64(3, [pid 370] newfstatat(3, "", [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 370] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] getdents64(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 374] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 370] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] unlink("./0/cgroup.cpu" [pid 370] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 374] <... unlink resumed>) = 0 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] unlink("./0/cgroup.cpu" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... unlink resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "./0/binderfs", [pid 370] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] unlink("./0/binderfs" [pid 370] newfstatat(AT_FDCWD, "./0/binderfs", [pid 374] <... unlink resumed>) = 0 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] unlink("./0/binderfs" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... unlink resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./0/cgroup", [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 370] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] unlink("./0/cgroup" [pid 370] newfstatat(AT_FDCWD, "./0/cgroup", [pid 374] <... unlink resumed>) = 0 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] unlink("./0/cgroup" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... unlink resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "./0/memory.events", [pid 370] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] unlink("./0/memory.events" [pid 370] newfstatat(AT_FDCWD, "./0/memory.events", [pid 374] <... unlink resumed>) = 0 [pid 370] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] unlink("./0/memory.events" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... unlink resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 370] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] unlink("./0/cgroup.net" [pid 370] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 374] <... unlink resumed>) = 0 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] getdents64(3, [pid 370] unlink("./0/cgroup.net" [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 370] <... unlink resumed>) = 0 [pid 374] close(3 [pid 370] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 370] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 374] rmdir("./0" [pid 370] close(3 [pid 374] <... rmdir resumed>) = 0 [pid 370] <... close resumed>) = 0 [pid 374] mkdir("./1", 0777 [pid 370] rmdir("./0" [pid 383] close(3 [pid 375] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... mkdir resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 370] <... rmdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 370] mkdir("./1", 0777./strace-static-x86_64: Process 385 attached [pid 383] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 370] <... mkdir resumed>) = 0 [pid 385] set_robust_list(0x555555866660, 24 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 3 [pid 370] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 385] <... set_robust_list resumed>) = 0 [pid 383] close(4 [pid 375] newfstatat(3, "", ./strace-static-x86_64: Process 386 attached [pid 370] <... clone resumed>, child_tidptr=0x555555866650) = 3 [pid 386] set_robust_list(0x555555866660, 24 [pid 385] chdir("./1" [pid 372] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 386] <... set_robust_list resumed>) = 0 [pid 385] <... chdir resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(3, [pid 384] <... sendmsg resumed>) = 180 [pid 386] chdir("./1" [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 384] close(3 [pid 375] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 385] <... prctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 386] <... chdir resumed>) = 0 [pid 372] newfstatat(3, "", [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 385] setpgid(0, 0 [pid 386] <... prctl resumed>) = 0 [pid 385] <... setpgid resumed>) = 0 [pid 375] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 386] setpgid(0, 0 [pid 384] <... close resumed>) = 0 [pid 385] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 384] close(4 [pid 386] <... setpgid resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] getdents64(3, [pid 385] <... symlink resumed>) = 0 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 384] <... close resumed>) = 0 [pid 384] close(5 [pid 386] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 385] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 375] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 372] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(6 [pid 386] <... symlink resumed>) = 0 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(7 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 386] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 375] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(8) = -1 EBADF (Bad file descriptor) [pid 385] <... symlink resumed>) = 0 [pid 372] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 375] unlink("./0/cgroup.cpu" [pid 384] close(9) = -1 EBADF (Bad file descriptor) [pid 384] close(10 [pid 386] <... symlink resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 384] close(11 [pid 385] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 375] <... unlink resumed>) = 0 [pid 372] unlink("./1/cgroup.cpu" [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(12) = -1 EBADF (Bad file descriptor) [pid 386] <... symlink resumed>) = 0 [pid 384] close(13) = -1 EBADF (Bad file descriptor) [pid 384] close(14 [pid 375] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(15) = -1 EBADF (Bad file descriptor) [pid 385] <... symlink resumed>) = 0 [pid 384] close(16 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] newfstatat(AT_FDCWD, "./0/binderfs", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... openat resumed>) = 3 [pid 372] newfstatat(AT_FDCWD, "./1/binderfs", [pid 375] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 384] close(17) = -1 EBADF (Bad file descriptor) [pid 385] <... openat resumed>) = 3 [pid 375] unlink("./0/binderfs" [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 386] write(3, "1000", 4 [pid 385] write(3, "1000", 4 [pid 384] close(18 [pid 375] <... unlink resumed>) = 0 [pid 372] unlink("./1/binderfs" [pid 386] <... write resumed>) = 4 [pid 385] <... write resumed>) = 4 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 384] close(19 [pid 372] <... unlink resumed>) = 0 [pid 386] close(3 [pid 385] close(3 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 386] <... close resumed>) = 0 [pid 385] <... close resumed>) = 0 [pid 384] close(20 [pid 375] newfstatat(AT_FDCWD, "./0/cgroup", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 386] symlink("/dev/binderfs", "./binderfs" [pid 385] symlink("/dev/binderfs", "./binderfs" [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] newfstatat(AT_FDCWD, "./1/cgroup", [pid 384] close(21) = -1 EBADF (Bad file descriptor) [pid 384] close(22 [pid 386] <... symlink resumed>) = 0 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 375] unlink("./0/cgroup" [pid 384] close(23) = -1 EBADF (Bad file descriptor) [pid 384] close(24) = -1 EBADF (Bad file descriptor) [pid 385] <... symlink resumed>) = 0 [pid 372] unlink("./1/cgroup" [pid 384] close(25) = -1 EBADF (Bad file descriptor) [pid 375] <... unlink resumed>) = 0 [pid 384] close(26) = -1 EBADF (Bad file descriptor) [pid 384] close(27) = -1 EBADF (Bad file descriptor) [pid 372] <... unlink resumed>) = 0 [pid 375] umount2("./0/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 386] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 385] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 384] close(28 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(29) = -1 EBADF (Bad file descriptor) [pid 386] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] newfstatat(AT_FDCWD, "./0/memory.events", [pid 384] exit_group(0) = ? [pid 386] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 385] <... openat resumed>) = 3 [pid 384] +++ exited with 0 +++ [pid 383] <... close resumed>) = 0 [pid 375] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] newfstatat(AT_FDCWD, "./1/memory.events", [pid 385] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 383] close(5) = -1 EBADF (Bad file descriptor) [pid 383] close(6) = -1 EBADF (Bad file descriptor) [pid 383] close(7) = -1 EBADF (Bad file descriptor) [pid 383] close(8) = -1 EBADF (Bad file descriptor) [pid 383] close(9) = -1 EBADF (Bad file descriptor) [pid 383] close(10) = -1 EBADF (Bad file descriptor) [pid 383] close(11) = -1 EBADF (Bad file descriptor) [pid 383] close(12) = -1 EBADF (Bad file descriptor) [pid 383] close(13) = -1 EBADF (Bad file descriptor) [pid 383] close(14) = -1 EBADF (Bad file descriptor) [pid 383] close(15) = -1 EBADF (Bad file descriptor) [pid 383] close(16) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 375] unlink("./0/memory.events" [pid 383] close(17 [pid 372] unlink("./1/memory.events" [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(18 [pid 371] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 383] close(19) = -1 EBADF (Bad file descriptor) [pid 371] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 383] close(20) = -1 EBADF (Bad file descriptor) [pid 383] close(21 [pid 371] <... openat resumed>) = 3 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(22) = -1 EBADF (Bad file descriptor) [pid 383] close(23 [pid 371] newfstatat(3, "", [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(24 [pid 371] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(25 [pid 371] getdents64(3, [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] close(26) = -1 EBADF (Bad file descriptor) [pid 383] close(27) = -1 EBADF (Bad file descriptor) [pid 383] close(28) = -1 EBADF (Bad file descriptor) [pid 383] close(29) = -1 EBADF (Bad file descriptor) [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 383] exit_group(0) = ? [pid 371] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 383] +++ exited with 0 +++ [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] unlink("./0/cgroup.net" [pid 371] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./1/cgroup.cpu" [pid 375] <... unlink resumed>) = 0 [pid 375] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./0" [pid 372] <... unlink resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 372] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 373] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] unlink("./1/cgroup.net" [pid 373] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] <... rmdir resumed>) = 0 [pid 371] <... unlink resumed>) = 0 [pid 375] mkdir("./1", 0777 [pid 373] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] <... unlink resumed>) = 0 [pid 371] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] getdents64(3, [pid 372] getdents64(3, [pid 373] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./1/binderfs", [pid 373] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] unlink("./1/cgroup.cpu") = 0 [pid 373] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] unlink("./1/binderfs" [pid 372] close(3 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./1/binderfs" [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./1" [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] <... unlink resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] newfstatat(AT_FDCWD, "./1/cgroup", [pid 371] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] unlink("./1/cgroup" [pid 371] newfstatat(AT_FDCWD, "./1/cgroup", [pid 373] <... unlink resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] mkdir("./2", 0777 [pid 371] unlink("./1/cgroup" [pid 373] newfstatat(AT_FDCWD, "./1/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] unlink("./1/memory.events") = 0 [pid 372] <... mkdir resumed>) = 0 [pid 371] <... unlink resumed>) = 0 [pid 373] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 371] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 371] newfstatat(AT_FDCWD, "./1/memory.events", [pid 373] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 373] unlink("./1/cgroup.net" [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./1/memory.events"./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x555555866660, 24) = 0 [pid 387] chdir("./2") = 0 [pid 387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 387] setpgid(0, 0) = 0 [pid 387] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 4 [pid 387] <... symlink resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 387] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 373] getdents64(3, [pid 371] <... unlink resumed>) = 0 [pid 387] <... symlink resumed>) = 0 [ 28.399618][ T383] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [ 28.410005][ T384] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [pid 373] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 371] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 387] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 373] close(3 [pid 387] <... symlink resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] rmdir("./1" [pid 387] <... openat resumed>) = 3 [pid 385] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 373] <... rmdir resumed>) = 0 [pid 371] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 387] write(3, "1000", 4 [pid 373] mkdir("./2", 0777 [pid 387] <... write resumed>) = 4 [pid 385] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 387] close(3 [pid 371] unlink("./1/cgroup.net" [pid 387] <... close resumed>) = 0 [pid 385] <... socket resumed>) = 4 [pid 387] symlink("/dev/binderfs", "./binderfs" [pid 385] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 386] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 373] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 371] <... unlink resumed>) = 0 [pid 387] <... symlink resumed>) = 0 [pid 386] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 385] <... sendmsg resumed>) = 180 [pid 375] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 373] exit_group(1 [pid 371] getdents64(3, [pid 387] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 386] <... socket resumed>) = 4 [pid 385] close(3 [pid 375] exit_group(1 [pid 373] <... exit_group resumed>) = ? [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 387] <... openat resumed>) = 3 [pid 386] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 385] <... close resumed>) = 0 [pid 375] <... exit_group resumed>) = ? [pid 373] +++ exited with 1 +++ [pid 371] close(3 [pid 387] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 386] <... sendmsg resumed>) = 180 [pid 371] <... close resumed>) = 0 [pid 369] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=1, si_utime=0, si_stime=2} --- [pid 386] close(3 [pid 371] rmdir("./1" [pid 387] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 386] <... close resumed>) = 0 [pid 375] +++ exited with 1 +++ [pid 371] <... rmdir resumed>) = 0 [pid 387] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 386] close(4 [pid 371] mkdir("./2", 0777 [pid 387] <... socket resumed>) = 4 [pid 386] <... close resumed>) = 0 [pid 385] close(4 [pid 371] <... mkdir resumed>) = 0 [pid 368] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=375, si_uid=0, si_status=1, si_utime=0, si_stime=4} --- [pid 387] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 386] close(5 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 368] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 389 attached [pid 387] <... sendmsg resumed>) = 180 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = 0 [pid 386] close(6 [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 4 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(7) = -1 EBADF (Bad file descriptor) [pid 386] close(8) = -1 EBADF (Bad file descriptor) [pid 386] close(9) = -1 EBADF (Bad file descriptor) [pid 386] close(10 [pid 368] <... clone resumed>, child_tidptr=0x555555866650) = -1 ENOMEM (Cannot allocate memory) [pid 389] set_robust_list(0x555555866660, 24 [pid 387] close(3 [pid 389] <... set_robust_list resumed>) = 0 [pid 387] <... close resumed>) = 0 [pid 385] close(5 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] chdir("./2" [pid 387] close(4 [pid 386] close(11 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] <... chdir resumed>) = 0 [pid 387] <... close resumed>) = 0 [pid 385] close(6 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 387] close(5 [pid 389] <... prctl resumed>) = 0 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] setpgid(0, 0 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(6 [pid 389] <... setpgid resumed>) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(7 [pid 386] close(12 [pid 389] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 387] close(7 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] <... symlink resumed>) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(13 [pid 385] close(8 [pid 389] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 387] close(8 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] <... symlink resumed>) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(14 [pid 385] close(9 [pid 389] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 387] close(9 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] <... symlink resumed>) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(15 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 387] close(10 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(16) = -1 EBADF (Bad file descriptor) [pid 389] <... openat resumed>) = 3 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(17 [pid 385] close(10 [pid 389] write(3, "1000", 4 [pid 387] close(11 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] <... write resumed>) = 4 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(18 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] close(3 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(19) = -1 EBADF (Bad file descriptor) [pid 386] close(20) = -1 EBADF (Bad file descriptor) [pid 386] close(21 [pid 387] close(12 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] <... close resumed>) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(22 [pid 385] close(11 [pid 389] symlink("/dev/binderfs", "./binderfs" [pid 387] close(13 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(23) = -1 EBADF (Bad file descriptor) [pid 386] close(24) = -1 EBADF (Bad file descriptor) [pid 389] <... symlink resumed>) = 0 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(25 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 389] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 387] close(14 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(26) = -1 EBADF (Bad file descriptor) [pid 389] <... openat resumed>) = 3 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(27 [pid 385] close(12 [pid 389] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 387] close(15 [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] close(28 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(16 [pid 386] close(29 [pid 385] close(13 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(17 [pid 386] exit_group(0 [pid 385] close(14 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] <... exit_group resumed>) = ? [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(18 [pid 386] +++ exited with 0 +++ [pid 385] close(15 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 387] close(19 [pid 385] close(16 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(20 [pid 385] close(17 [pid 370] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 387] close(21 [pid 385] close(18 [pid 370] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... openat resumed>) = 3 [pid 387] close(22 [pid 385] close(19 [pid 370] newfstatat(3, "", [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 387] close(23 [pid 385] close(20 [pid 370] getdents64(3, [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(24 [pid 385] close(21 [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] close(25) = -1 EBADF (Bad file descriptor) [pid 385] close(22 [pid 387] close(26 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(23 [pid 387] close(27 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(24 [pid 387] close(28 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(25 [pid 387] close(29 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(26 [pid 387] exit_group(0 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 387] <... exit_group resumed>) = ? [pid 385] close(27 [pid 387] +++ exited with 0 +++ [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 385] close(28 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(29) = -1 EBADF (Bad file descriptor) [pid 372] <... restart_syscall resumed>) = 0 [pid 385] exit_group(0) = ? [pid 372] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 385] +++ exited with 0 +++ [pid 372] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 370] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 372] <... openat resumed>) = 3 [pid 370] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 372] newfstatat(3, "", [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... restart_syscall resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 370] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 372] getdents64(3, [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 389] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 370] unlink("./1/cgroup.cpu" [pid 389] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 374] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] <... unlink resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] newfstatat(AT_FDCWD, "./1/binderfs", [pid 372] unlink("./2/cgroup.cpu" [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 389] <... socket resumed>) = 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... unlink resumed>) = 0 [pid 370] unlink("./1/binderfs" [pid 389] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 374] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] <... unlink resumed>) = 0 [pid 389] <... sendmsg resumed>) = 180 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 389] close(3 [pid 374] <... openat resumed>) = 3 [pid 372] newfstatat(AT_FDCWD, "./2/binderfs", [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 389] <... close resumed>) = 0 [pid 374] newfstatat(3, "", [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] newfstatat(AT_FDCWD, "./1/cgroup", [pid 389] close(4 [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] unlink("./2/binderfs" [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 389] <... close resumed>) = 0 [pid 374] getdents64(3, [pid 372] <... unlink resumed>) = 0 [pid 370] unlink("./1/cgroup" [pid 389] close(5 [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] <... unlink resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 389] close(6 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./2/cgroup", [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] newfstatat(AT_FDCWD, "./1/memory.events", [pid 389] close(7 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./2/cgroup" [pid 370] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] unlink("./1/cgroup.cpu" [pid 372] <... unlink resumed>) = 0 [pid 370] unlink("./1/memory.events" [pid 389] close(8 [pid 374] <... unlink resumed>) = 0 [pid 372] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] <... unlink resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 389] close(9 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./2/memory.events", [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(AT_FDCWD, "./1/binderfs", [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 389] close(10 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./2/memory.events" [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] unlink("./1/binderfs" [pid 372] <... unlink resumed>) = 0 [pid 370] unlink("./1/cgroup.net" [pid 389] close(11 [pid 374] <... unlink resumed>) = 0 [pid 372] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] <... unlink resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] getdents64(3, [pid 389] close(12 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 370] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(AT_FDCWD, "./1/cgroup", [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] close(3 [pid 389] close(13 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./2/cgroup.net" [pid 370] <... close resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] unlink("./1/cgroup" [pid 372] <... unlink resumed>) = 0 [pid 370] rmdir("./1" [pid 389] close(14 [pid 374] <... unlink resumed>) = 0 [pid 372] getdents64(3, [pid 370] <... rmdir resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./1/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 370] mkdir("./2", 0777 [pid 389] close(15 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] close(3 [pid 370] <... mkdir resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(AT_FDCWD, "./1/memory.events", [pid 372] <... close resumed>) = 0 [pid 370] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 389] close(16 [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] rmdir("./2"./strace-static-x86_64: Process 391 attached [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] unlink("./1/memory.events" [pid 372] <... rmdir resumed>) = 0 [pid 370] <... clone resumed>, child_tidptr=0x555555866650) = 4 [pid 391] set_robust_list(0x555555866660, 24 [pid 389] close(17 [pid 372] mkdir("./3", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 392 attached [pid 392] set_robust_list(0x555555866660, 24 [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 5 [pid 392] <... set_robust_list resumed>) = 0 [pid 392] chdir("./3") = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 392] setpgid(0, 0) = 0 [pid 392] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 392] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 392] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 391] <... set_robust_list resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... unlink resumed>) = 0 [pid 392] write(3, "1000", 4) = 4 [pid 391] chdir("./2" [pid 389] close(18 [pid 374] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] close(3 [pid 391] <... chdir resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = 0 [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 389] close(19 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 392] symlink("/dev/binderfs", "./binderfs" [pid 391] <... prctl resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... symlink resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 392] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 391] setpgid(0, 0 [pid 389] close(20 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 392] <... openat resumed>) = 3 [pid 391] <... setpgid resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] unlink("./1/cgroup.net" [pid 392] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 391] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 389] close(21 [pid 374] <... unlink resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] getdents64(3, [pid 389] close(22) = -1 EBADF (Bad file descriptor) [pid 389] close(23) = -1 EBADF (Bad file descriptor) [pid 389] close(24) = -1 EBADF (Bad file descriptor) [pid 389] close(25) = -1 EBADF (Bad file descriptor) [pid 389] close(26) = -1 EBADF (Bad file descriptor) [pid 389] close(27) = -1 EBADF (Bad file descriptor) [pid 389] close(28) = -1 EBADF (Bad file descriptor) [pid 389] close(29 [pid 391] <... symlink resumed>) = 0 [pid 389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 391] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 374] close(3 [pid 391] <... symlink resumed>) = 0 [pid 389] exit_group(0 [pid 374] <... close resumed>) = 0 [pid 391] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 389] <... exit_group resumed>) = ? [pid 374] rmdir("./1" [pid 391] <... symlink resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] mkdir("./2", 0777 [pid 391] <... openat resumed>) = 3 [pid 389] +++ exited with 0 +++ [pid 391] write(3, "1000", 4) = 4 [pid 391] close(3) = 0 [pid 391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 391] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 371] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 371] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 28.464463][ T385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor203'. [pid 371] getdents64(3, [pid 391] <... openat resumed>) = 3 [pid 391] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 392] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 391] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 374] <... mkdir resumed>) = 0 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 392] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 371] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 393 attached [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 4 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] set_robust_list(0x555555866660, 24) = 0 [pid 371] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 391] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 393] chdir("./2" [pid 391] <... socket resumed>) = 4 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... chdir resumed>) = 0 [pid 371] unlink("./2/cgroup.cpu" [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 391] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 180 [pid 391] close(3 [pid 371] <... unlink resumed>) = 0 [pid 393] <... prctl resumed>) = 0 [pid 371] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 393] setpgid(0, 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] <... setpgid resumed>) = 0 [pid 371] newfstatat(AT_FDCWD, "./2/binderfs", [pid 391] <... close resumed>) = 0 [pid 391] close(4 [pid 393] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 391] <... close resumed>) = 0 [pid 391] close(5) = -1 EBADF (Bad file descriptor) [pid 393] <... symlink resumed>) = 0 [pid 391] close(6 [pid 393] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 371] unlink("./2/binderfs" [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] close(7) = -1 EBADF (Bad file descriptor) [pid 391] close(8 [pid 393] <... symlink resumed>) = 0 [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] close(9) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 393] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 371] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 391] close(10) = -1 EBADF (Bad file descriptor) [pid 391] close(11) = -1 EBADF (Bad file descriptor) [pid 391] close(12) = -1 EBADF (Bad file descriptor) [pid 393] <... symlink resumed>) = 0 [pid 391] close(13 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] close(14 [pid 393] <... openat resumed>) = 3 [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] write(3, "1000", 4 [pid 371] newfstatat(AT_FDCWD, "./2/cgroup", [pid 393] <... write resumed>) = 4 [pid 391] close(15 [pid 393] close(3 [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... close resumed>) = 0 [pid 371] unlink("./2/cgroup" [pid 391] close(16 [pid 393] symlink("/dev/binderfs", "./binderfs" [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] close(17) = -1 EBADF (Bad file descriptor) [pid 391] close(18) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 391] close(19) = -1 EBADF (Bad file descriptor) [pid 391] close(20) = -1 EBADF (Bad file descriptor) [pid 393] <... symlink resumed>) = 0 [pid 391] close(21 [pid 371] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 393] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] close(22) = -1 EBADF (Bad file descriptor) [pid 391] close(23) = -1 EBADF (Bad file descriptor) [pid 393] <... openat resumed>) = 3 [pid 371] newfstatat(AT_FDCWD, "./2/memory.events", [pid 393] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 391] close(24) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 391] close(25 [pid 371] unlink("./2/memory.events" [pid 393] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 391] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 391] close(26) = -1 EBADF (Bad file descriptor) [pid 391] close(27) = -1 EBADF (Bad file descriptor) [pid 391] close(28) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 391] close(29) = -1 EBADF (Bad file descriptor) [pid 391] exit_group(0 [pid 393] <... socket resumed>) = 4 [pid 371] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 393] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... exit_group resumed>) = ? [pid 393] <... sendmsg resumed>) = 180 [pid 392] <... socket resumed>) = 4 [pid 391] +++ exited with 0 +++ [pid 371] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 393] close(3 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 393] <... close resumed>) = 0 [pid 392] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] unlink("./2/cgroup.net" [pid 393] close(4 [pid 371] <... unlink resumed>) = 0 [pid 371] getdents64(3, [pid 370] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 393] <... close resumed>) = 0 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 393] close(5 [pid 371] close(3 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... close resumed>) = 0 [pid 370] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 393] close(6 [pid 371] rmdir("./2" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... openat resumed>) = 3 [pid 393] close(7 [pid 371] <... rmdir resumed>) = 0 [pid 370] newfstatat(3, "", [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] mkdir("./3", 0777 [pid 393] close(8 [pid 370] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 371] <... mkdir resumed>) = 0 [pid 370] getdents64(3, [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 370] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 ./strace-static-x86_64: Process 394 attached [pid 393] close(9 [pid 370] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] set_robust_list(0x555555866660, 24 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 5 [pid 394] <... set_robust_list resumed>) = 0 [pid 393] close(10 [pid 392] <... sendmsg resumed>) = 180 [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] chdir("./3" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(3 [pid 370] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 394] <... chdir resumed>) = 0 [pid 393] close(11 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 394] setpgid(0, 0 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 394] <... setpgid resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = 0 [pid 370] unlink("./2/cgroup.cpu" [pid 394] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 393] close(12 [pid 370] <... unlink resumed>) = 0 [pid 394] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 392] close(4 [pid 394] <... symlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 393] close(13 [pid 392] <... close resumed>) = 0 [pid 394] <... symlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 392] close(5 [pid 394] <... openat resumed>) = 3 [pid 393] close(14 [pid 370] newfstatat(AT_FDCWD, "./2/binderfs", [pid 394] write(3, "1000", 4 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] <... write resumed>) = 4 [pid 394] close(3 [pid 393] close(15 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 394] <... close resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(6 [pid 370] unlink("./2/binderfs" [pid 394] symlink("/dev/binderfs", "./binderfs" [pid 393] close(16 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] <... symlink resumed>) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... unlink resumed>) = 0 [pid 394] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 392] close(7 [pid 394] <... openat resumed>) = 3 [pid 393] close(17 [pid 370] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] close(18 [pid 392] close(8 [pid 370] newfstatat(AT_FDCWD, "./2/cgroup", [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] close(19 [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(9 [pid 393] close(20 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] unlink("./2/cgroup" [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(10 [pid 393] close(21 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(11 [pid 393] close(22 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(12 [pid 393] close(23 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(13 [pid 393] close(24 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(14 [pid 393] close(25) = -1 EBADF (Bad file descriptor) [pid 370] <... unlink resumed>) = 0 [pid 370] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 393] close(26) = -1 EBADF (Bad file descriptor) [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] close(27 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] newfstatat(AT_FDCWD, "./2/memory.events", [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(15 [pid 393] close(28 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(16 [pid 370] unlink("./2/memory.events" [pid 393] close(29 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 393] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(17 [pid 370] <... unlink resumed>) = 0 [pid 393] exit_group(0 [pid 370] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 393] <... exit_group resumed>) = ? [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 393] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 370] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 392] close(18) = -1 EBADF (Bad file descriptor) [pid 370] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 392] close(19) = -1 EBADF (Bad file descriptor) [pid 370] unlink("./2/cgroup.net" [pid 392] close(20) = -1 EBADF (Bad file descriptor) [pid 392] close(21 [pid 370] <... unlink resumed>) = 0 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(22 [pid 370] getdents64(3, [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(23 [pid 370] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 392] close(24 [pid 370] close(3 [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... close resumed>) = 0 [pid 392] close(25 [pid 370] rmdir("./2" [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... rmdir resumed>) = 0 [pid 392] close(26) = -1 EBADF (Bad file descriptor) [pid 370] mkdir("./3", 0777 [pid 392] close(27 [pid 374] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 392] close(28 [pid 374] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... openat resumed>) = 3 [pid 392] close(29 [pid 374] newfstatat(3, "", [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] getdents64(3, [pid 392] exit_group(0) = ? [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 374] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 392] +++ exited with 0 +++ [pid 374] unlink("./2/cgroup.cpu" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./2/binderfs" [pid 394] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 372] <... restart_syscall resumed>) = 0 [pid 394] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 394] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 372] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] <... sendmsg resumed>) = 180 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] close(3 [pid 372] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 394] <... close resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 394] close(4 [pid 372] newfstatat(3, "", [pid 394] <... close resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 394] close(5 [pid 372] getdents64(3, [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 394] close(6 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(AT_FDCWD, "./2/cgroup", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] close(7 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] unlink("./2/cgroup" [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 394] close(8 [pid 372] unlink("./3/cgroup.cpu" [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 394] close(9 [pid 372] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./2/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] close(10 [pid 372] newfstatat(AT_FDCWD, "./3/binderfs", [pid 370] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 370] exit_group(1 [pid 394] close(11 [pid 374] newfstatat(AT_FDCWD, "./2/memory.events", [pid 372] unlink("./3/binderfs" [pid 370] <... exit_group resumed>) = ? [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... unlink resumed>) = 0 [pid 394] close(12 [pid 372] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] close(13 [pid 374] unlink("./2/memory.events" [pid 372] newfstatat(AT_FDCWD, "./3/cgroup", [pid 370] +++ exited with 1 +++ [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=1, si_utime=0, si_stime=5} --- [pid 394] close(14 [pid 372] unlink("./3/cgroup" [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 365] <... clone resumed>, child_tidptr=0x555555866650) = -1 ENOMEM (Cannot allocate memory) [pid 394] close(15 [pid 374] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... clone resumed>, child_tidptr=0x555555866650) = -1 ENOMEM (Cannot allocate memory) [pid 394] close(16 [pid 374] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 372] newfstatat(AT_FDCWD, "./3/memory.events", [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] <... clone resumed>, child_tidptr=0x555555866650) = -1 ENOMEM (Cannot allocate memory) [pid 394] close(17 [pid 374] unlink("./2/cgroup.net" [pid 372] unlink("./3/memory.events" [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 394] close(18 [pid 374] getdents64(3, [pid 372] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] close(19 [pid 374] close(3 [pid 372] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 394] close(20 [pid 374] <... close resumed>) = 0 [pid 372] unlink("./3/cgroup.net" [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] rmdir("./2" [pid 372] <... unlink resumed>) = 0 [pid 394] close(21 [pid 372] getdents64(3, [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 394] close(22 [pid 372] close(3 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = 0 [pid 394] close(23 [pid 372] rmdir("./3" [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 394] close(24 [pid 372] mkdir("./4", 0777 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] mkdir("./3", 0777 [pid 372] <... mkdir resumed>) = 0 [pid 394] close(25 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(26./strace-static-x86_64: Process 398 attached ) = -1 EBADF (Bad file descriptor) [pid 374] <... mkdir resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 6 [pid 394] close(27 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 398] set_robust_list(0x555555866660, 24 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(28) = -1 EBADF (Bad file descriptor) [pid 394] close(29) = -1 EBADF (Bad file descriptor) [pid 394] exit_group(0) = ? ./strace-static-x86_64: Process 399 attached [pid 398] <... set_robust_list resumed>) = 0 [pid 394] +++ exited with 0 +++ [pid 399] set_robust_list(0x555555866660, 24) = 0 [pid 399] chdir("./3" [pid 398] chdir("./4" [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 5 [pid 399] <... chdir resumed>) = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 398] <... chdir resumed>) = 0 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 399] <... prctl resumed>) = 0 [pid 399] setpgid(0, 0) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 371] restart_syscall(<... resuming interrupted clone ...> [pid 399] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 398] <... prctl resumed>) = 0 [pid 399] <... symlink resumed>) = 0 [pid 399] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 398] setpgid(0, 0 [pid 399] <... symlink resumed>) = 0 [pid 371] <... restart_syscall resumed>) = 0 [pid 399] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 398] <... setpgid resumed>) = 0 [pid 399] <... symlink resumed>) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4 [pid 398] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 399] <... write resumed>) = 4 [pid 399] close(3) = 0 [pid 399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 398] <... symlink resumed>) = 0 [pid 371] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 399] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 398] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 399] <... openat resumed>) = 3 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 399] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 398] <... symlink resumed>) = 0 [pid 371] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 398] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 371] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 371] getdents64(3, [pid 398] <... symlink resumed>) = 0 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 398] write(3, "1000", 4) = 4 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] close(3) = 0 [pid 371] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 371] unlink("./3/cgroup.cpu" [pid 398] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 371] <... unlink resumed>) = 0 [pid 371] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./3/binderfs", [pid 399] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 398] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 371] unlink("./3/binderfs" [pid 399] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 398] <... socket resumed>) = 4 [pid 399] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] <... unlink resumed>) = 0 [pid 398] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 399] <... sendmsg resumed>) = 180 [pid 398] <... sendmsg resumed>) = 180 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] close(3 [pid 371] newfstatat(AT_FDCWD, "./3/cgroup", [pid 398] <... close resumed>) = 0 [pid 399] close(3 [pid 398] close(4 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] <... close resumed>) = 0 [pid 371] unlink("./3/cgroup" [pid 398] close(5 [pid 399] <... close resumed>) = 0 [pid 399] close(4) = 0 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 399] close(5) = -1 EBADF (Bad file descriptor) [pid 398] close(6 [pid 371] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(6 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] close(7 [pid 371] newfstatat(AT_FDCWD, "./3/memory.events", [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(8 [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./3/memory.events" [pid 398] close(9 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(7) = -1 EBADF (Bad file descriptor) [pid 399] close(8) = -1 EBADF (Bad file descriptor) [pid 399] close(9) = -1 EBADF (Bad file descriptor) [pid 399] close(10) = -1 EBADF (Bad file descriptor) [pid 399] close(11) = -1 EBADF (Bad file descriptor) [pid 399] close(12) = -1 EBADF (Bad file descriptor) [pid 399] close(13) = -1 EBADF (Bad file descriptor) [pid 399] close(14) = -1 EBADF (Bad file descriptor) [pid 399] close(15) = -1 EBADF (Bad file descriptor) [pid 399] close(16) = -1 EBADF (Bad file descriptor) [pid 399] close(17) = -1 EBADF (Bad file descriptor) [pid 399] close(18) = -1 EBADF (Bad file descriptor) [pid 399] close(19) = -1 EBADF (Bad file descriptor) [pid 399] close(20) = -1 EBADF (Bad file descriptor) [pid 399] close(21) = -1 EBADF (Bad file descriptor) [pid 399] close(22) = -1 EBADF (Bad file descriptor) [pid 399] close(23) = -1 EBADF (Bad file descriptor) [pid 399] close(24) = -1 EBADF (Bad file descriptor) [pid 399] close(25) = -1 EBADF (Bad file descriptor) [pid 399] close(26) = -1 EBADF (Bad file descriptor) [pid 399] close(27) = -1 EBADF (Bad file descriptor) [pid 399] close(28) = -1 EBADF (Bad file descriptor) [pid 399] close(29) = -1 EBADF (Bad file descriptor) [pid 399] exit_group(0) = ? [pid 399] +++ exited with 0 +++ [pid 371] <... unlink resumed>) = 0 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 398] close(10 [pid 371] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 398] close(11 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 398] close(12) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] close(13 [pid 371] unlink("./3/cgroup.net" [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(14) = -1 EBADF (Bad file descriptor) [pid 398] close(15 [pid 371] <... unlink resumed>) = 0 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] getdents64(3, [pid 398] close(16 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] close(3 [pid 398] close(17) = -1 EBADF (Bad file descriptor) [pid 371] <... close resumed>) = 0 [pid 398] close(18 [pid 374] <... restart_syscall resumed>) = 0 [pid 371] rmdir("./3" [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(19) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 398] close(20) = -1 EBADF (Bad file descriptor) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] close(21) = -1 EBADF (Bad file descriptor) [pid 374] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 398] close(22) = -1 EBADF (Bad file descriptor) [pid 374] <... openat resumed>) = 3 [pid 398] close(23) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(3, "", [pid 398] close(24 [pid 371] <... rmdir resumed>) = 0 [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] mkdir("./4", 0777 [pid 398] close(25 [pid 374] getdents64(3, [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(26) = -1 EBADF (Bad file descriptor) [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 398] close(27) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 398] close(28) = -1 EBADF (Bad file descriptor) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] close(29) = -1 EBADF (Bad file descriptor) [pid 374] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 398] exit_group(0) = ? [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 398] +++ exited with 0 +++ [pid 374] unlink("./3/cgroup.cpu" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 374] <... unlink resumed>) = 0 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 371] <... mkdir resumed>) = 0 [pid 374] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 400 attached [pid 374] newfstatat(AT_FDCWD, "./3/binderfs", [pid 372] <... restart_syscall resumed>) = 0 [pid 400] set_robust_list(0x555555866660, 24 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 400] <... set_robust_list resumed>) = 0 [pid 400] chdir("./4") = 0 [pid 374] unlink("./3/binderfs" [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 6 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0) = 0 [pid 374] <... unlink resumed>) = 0 [pid 400] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 372] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] <... symlink resumed>) = 0 [pid 400] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 374] newfstatat(AT_FDCWD, "./3/cgroup", [pid 372] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 400] <... symlink resumed>) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] <... openat resumed>) = 3 [pid 400] write(3, "1000", 4 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] newfstatat(3, "", [pid 400] <... write resumed>) = 4 [pid 400] close(3 [pid 374] unlink("./3/cgroup" [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 400] <... close resumed>) = 0 [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] <... unlink resumed>) = 0 [pid 372] getdents64(3, [pid 400] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] umount2("./3/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 400] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] newfstatat(AT_FDCWD, "./3/memory.events", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 374] unlink("./3/memory.events" [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./4/cgroup.cpu") = 0 [pid 374] <... unlink resumed>) = 0 [pid 372] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] newfstatat(AT_FDCWD, "./4/binderfs", [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 372] unlink("./4/binderfs" [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./3/cgroup.net" [pid 372] <... unlink resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 372] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(3, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] newfstatat(AT_FDCWD, "./4/cgroup", [pid 374] close(3 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] <... close resumed>) = 0 [pid 372] unlink("./4/cgroup" [pid 374] rmdir("./3" [pid 372] <... unlink resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 372] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] mkdir("./4", 0777 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./4/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./4/memory.events") = 0 [pid 372] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./4/cgroup.net") = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./4") = 0 [pid 372] mkdir("./5", 0777) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x555555866660, 24 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 6 [pid 401] <... set_robust_list resumed>) = 0 [pid 401] chdir("./4"./strace-static-x86_64: Process 402 attached ) = 0 [pid 402] set_robust_list(0x555555866660, 24 [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 400] <... ioctl resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 7 [pid 402] <... set_robust_list resumed>) = 0 [pid 401] <... prctl resumed>) = 0 [pid 402] chdir("./5" [pid 401] setpgid(0, 0 [pid 400] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 402] <... chdir resumed>) = 0 [pid 401] <... setpgid resumed>) = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 401] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 402] <... prctl resumed>) = 0 [pid 401] <... symlink resumed>) = 0 [pid 400] <... socket resumed>) = 4 [pid 402] setpgid(0, 0 [pid 401] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 402] <... setpgid resumed>) = 0 [pid 401] <... symlink resumed>) = 0 [pid 400] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 402] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 401] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 402] <... symlink resumed>) = 0 [pid 401] <... symlink resumed>) = 0 [pid 400] <... sendmsg resumed>) = 180 [pid 402] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 402] <... symlink resumed>) = 0 [pid 401] <... openat resumed>) = 3 [pid 400] close(3 [pid 402] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 401] write(3, "1000", 4 [pid 402] <... symlink resumed>) = 0 [pid 401] <... write resumed>) = 4 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 401] close(3 [pid 400] <... close resumed>) = 0 [pid 402] <... openat resumed>) = 3 [pid 401] <... close resumed>) = 0 [pid 402] write(3, "1000", 4 [pid 401] symlink("/dev/binderfs", "./binderfs" [pid 402] <... write resumed>) = 4 [pid 401] <... symlink resumed>) = 0 [pid 400] close(4 [pid 402] close(3 [pid 401] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 402] <... close resumed>) = 0 [pid 401] <... openat resumed>) = 3 [pid 400] <... close resumed>) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs" [pid 401] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 400] close(5 [pid 402] <... symlink resumed>) = 0 [pid 402] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 400] close(6) = -1 EBADF (Bad file descriptor) [pid 400] close(7) = -1 EBADF (Bad file descriptor) [pid 400] close(8) = -1 EBADF (Bad file descriptor) [pid 400] close(9) = -1 EBADF (Bad file descriptor) [pid 400] close(10) = -1 EBADF (Bad file descriptor) [pid 400] close(11) = -1 EBADF (Bad file descriptor) [pid 400] close(12) = -1 EBADF (Bad file descriptor) [pid 400] close(13) = -1 EBADF (Bad file descriptor) [pid 400] close(14) = -1 EBADF (Bad file descriptor) [pid 400] close(15) = -1 EBADF (Bad file descriptor) [pid 400] close(16) = -1 EBADF (Bad file descriptor) [pid 400] close(17) = -1 EBADF (Bad file descriptor) [pid 400] close(18) = -1 EBADF (Bad file descriptor) [pid 400] close(19 [pid 402] <... openat resumed>) = 3 [pid 402] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 400] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 400] close(20) = -1 EBADF (Bad file descriptor) [pid 400] close(21) = -1 EBADF (Bad file descriptor) [pid 400] close(22) = -1 EBADF (Bad file descriptor) [pid 400] close(23) = -1 EBADF (Bad file descriptor) [pid 400] close(24) = -1 EBADF (Bad file descriptor) [pid 400] close(25) = -1 EBADF (Bad file descriptor) [pid 400] close(26) = -1 EBADF (Bad file descriptor) [pid 400] close(27) = -1 EBADF (Bad file descriptor) [pid 400] close(28) = -1 EBADF (Bad file descriptor) [pid 400] close(29) = -1 EBADF (Bad file descriptor) [pid 400] exit_group(0) = ? [pid 400] +++ exited with 0 +++ [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 371] restart_syscall(<... resuming interrupted clone ...> [pid 401] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 401] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 371] <... restart_syscall resumed>) = 0 [pid 401] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 180 [pid 401] close(3 [pid 371] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 401] <... close resumed>) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 401] close(4 [pid 371] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 401] <... close resumed>) = 0 [pid 371] <... openat resumed>) = 3 [pid 401] close(5 [pid 371] newfstatat(3, "", [pid 402] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 402] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 402] <... socket resumed>) = 4 [pid 401] close(6 [pid 371] getdents64(3, [pid 402] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 402] <... sendmsg resumed>) = 180 [pid 401] close(7 [pid 371] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] close(3 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... close resumed>) = 0 [pid 401] close(8 [pid 371] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 402] close(4 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... close resumed>) = 0 [pid 401] close(9 [pid 371] unlink("./4/cgroup.cpu" [pid 402] close(5 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(10 [pid 371] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] close(6 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(11 [pid 371] newfstatat(AT_FDCWD, "./4/binderfs", [pid 402] close(7 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(12 [pid 371] unlink("./4/binderfs" [pid 402] close(8 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(13 [pid 371] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] close(9 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(14 [pid 371] newfstatat(AT_FDCWD, "./4/cgroup", [pid 402] close(10 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(15 [pid 371] unlink("./4/cgroup" [pid 402] close(11 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(16 [pid 371] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] close(12 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(17 [pid 371] newfstatat(AT_FDCWD, "./4/memory.events", [pid 402] close(13 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(18 [pid 371] unlink("./4/memory.events" [pid 402] close(14 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(19 [pid 402] close(15 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(20 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] close(16 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(21 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] close(17 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./4/cgroup.net" [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(22 [pid 371] <... unlink resumed>) = 0 [pid 402] close(18 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] getdents64(3, [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(23 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 402] close(19 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] close(3 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(24 [pid 371] <... close resumed>) = 0 [pid 402] close(20 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] rmdir("./4" [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(25 [pid 371] <... rmdir resumed>) = 0 [pid 402] close(21 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] mkdir("./5", 0777 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(26 [pid 371] <... mkdir resumed>) = 0 [pid 402] close(22 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(27./strace-static-x86_64: Process 403 attached [pid 402] close(23 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 403] set_robust_list(0x555555866660, 24 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(28 [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 7 [pid 403] <... set_robust_list resumed>) = 0 [pid 402] close(24 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 403] chdir("./5" [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(29 [pid 403] <... chdir resumed>) = 0 [pid 402] close(25 [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] exit_group(0 [pid 403] <... prctl resumed>) = 0 [pid 402] close(26 [pid 401] <... exit_group resumed>) = ? [pid 403] setpgid(0, 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] +++ exited with 0 +++ [pid 403] <... setpgid resumed>) = 0 [pid 402] close(27) = -1 EBADF (Bad file descriptor) [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 403] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 402] close(28 [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(29) = -1 EBADF (Bad file descriptor) [pid 403] <... symlink resumed>) = 0 [pid 402] exit_group(0 [pid 403] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 402] <... exit_group resumed>) = ? [pid 403] <... symlink resumed>) = 0 [pid 402] +++ exited with 0 +++ [pid 374] <... restart_syscall resumed>) = 0 [pid 403] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 374] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 403] <... symlink resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] newfstatat(3, "", [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 403] <... openat resumed>) = 3 [pid 374] getdents64(3, [pid 403] write(3, "1000", 4 [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] <... restart_syscall resumed>) = 0 [pid 403] <... write resumed>) = 4 [pid 374] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 403] close(3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 403] <... close resumed>) = 0 [pid 374] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 403] symlink("/dev/binderfs", "./binderfs" [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./4/cgroup.cpu") = 0 [pid 372] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 403] <... symlink resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./4/binderfs", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 403] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./4/binderfs" [pid 372] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 403] <... openat resumed>) = 3 [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... openat resumed>) = 3 [pid 403] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(3, "", [pid 374] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] unlink("./4/cgroup" [pid 372] getdents64(3, [pid 374] <... unlink resumed>) = 0 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 374] umount2("./4/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./4/memory.events", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 374] unlink("./4/memory.events") = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] unlink("./5/cgroup.cpu" [pid 374] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./4/cgroup.net") = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] getdents64(3, [pid 372] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./4" [pid 372] newfstatat(AT_FDCWD, "./5/binderfs", [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./5", 0777 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] unlink("./5/binderfs"./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x555555866660, 24 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 7 [pid 404] <... set_robust_list resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 404] chdir("./5") = 0 [pid 372] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] setpgid(0, 0 [pid 372] newfstatat(AT_FDCWD, "./5/cgroup", [pid 404] <... setpgid resumed>) = 0 [pid 404] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 404] <... symlink resumed>) = 0 [pid 404] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 372] unlink("./5/cgroup" [pid 404] <... symlink resumed>) = 0 [pid 404] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 372] <... unlink resumed>) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] umount2("./5/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] <... openat resumed>) = 3 [pid 404] write(3, "1000", 4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] <... write resumed>) = 4 [pid 372] newfstatat(AT_FDCWD, "./5/memory.events", [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 404] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] unlink("./5/memory.events" [pid 404] <... openat resumed>) = 3 [pid 404] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./5/cgroup.net") = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./5") = 0 [pid 372] mkdir("./6", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555866650) = 8 ./strace-static-x86_64: Process 405 attached [pid 403] <... ioctl resumed>) = 0 [pid 405] set_robust_list(0x555555866660, 24 [pid 403] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 405] <... set_robust_list resumed>) = 0 [pid 405] chdir("./6" [pid 403] <... socket resumed>) = 4 [pid 405] <... chdir resumed>) = 0 [pid 403] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] <... sendmsg resumed>) = 180 [pid 405] setpgid(0, 0 [pid 403] close(3 [pid 405] <... setpgid resumed>) = 0 [pid 403] <... close resumed>) = 0 [pid 405] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 403] close(4 [pid 405] <... symlink resumed>) = 0 [pid 403] <... close resumed>) = 0 [pid 405] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 403] close(5 [pid 405] <... symlink resumed>) = 0 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 403] close(6 [pid 405] <... symlink resumed>) = 0 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 403] close(7 [pid 405] <... openat resumed>) = 3 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] write(3, "1000", 4 [pid 403] close(8 [pid 405] <... write resumed>) = 4 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(3 [pid 403] close(9 [pid 405] <... close resumed>) = 0 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] symlink("/dev/binderfs", "./binderfs" [pid 403] close(10 [pid 405] <... symlink resumed>) = 0 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 403] close(11 [pid 405] <... openat resumed>) = 3 [pid 403] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 403] close(12) = -1 EBADF (Bad file descriptor) [pid 403] close(13) = -1 EBADF (Bad file descriptor) [pid 403] close(14) = -1 EBADF (Bad file descriptor) [pid 403] close(15) = -1 EBADF (Bad file descriptor) [pid 403] close(16) = -1 EBADF (Bad file descriptor) [pid 403] close(17) = -1 EBADF (Bad file descriptor) [pid 403] close(18) = -1 EBADF (Bad file descriptor) [pid 403] close(19) = -1 EBADF (Bad file descriptor) [pid 403] close(20) = -1 EBADF (Bad file descriptor) [pid 403] close(21) = -1 EBADF (Bad file descriptor) [pid 403] close(22) = -1 EBADF (Bad file descriptor) [pid 403] close(23) = -1 EBADF (Bad file descriptor) [pid 403] close(24) = -1 EBADF (Bad file descriptor) [pid 403] close(25) = -1 EBADF (Bad file descriptor) [pid 403] close(26) = -1 EBADF (Bad file descriptor) [pid 403] close(27) = -1 EBADF (Bad file descriptor) [pid 403] close(28) = -1 EBADF (Bad file descriptor) [pid 403] close(29) = -1 EBADF (Bad file descriptor) [pid 403] exit_group(0 [pid 405] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 405] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 403] <... exit_group resumed>) = ? [pid 405] <... socket resumed>) = 4 [pid 403] +++ exited with 0 +++ [pid 405] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 405] <... sendmsg resumed>) = 180 [pid 405] close(3 [pid 371] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 405] <... close resumed>) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 405] close(4 [pid 371] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 405] <... close resumed>) = 0 [pid 371] <... openat resumed>) = 3 [pid 405] close(5) = -1 EBADF (Bad file descriptor) [pid 405] close(6) = -1 EBADF (Bad file descriptor) [pid 405] close(7) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(3, "", [pid 405] close(8) = -1 EBADF (Bad file descriptor) [pid 404] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 371] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 405] close(9) = -1 EBADF (Bad file descriptor) [pid 404] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 371] getdents64(3, [pid 405] close(10) = -1 EBADF (Bad file descriptor) [pid 404] <... socket resumed>) = 4 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 405] close(11) = -1 EBADF (Bad file descriptor) [pid 404] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 405] close(12) = -1 EBADF (Bad file descriptor) [pid 371] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 405] close(13) = -1 EBADF (Bad file descriptor) [pid 404] <... sendmsg resumed>) = 180 [pid 405] close(14) = -1 EBADF (Bad file descriptor) [pid 404] close(3 [pid 405] close(15) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 405] close(16 [pid 404] <... close resumed>) = 0 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(17 [pid 404] close(4 [pid 371] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = 0 [pid 405] close(18) = -1 EBADF (Bad file descriptor) [pid 404] close(5 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 405] close(19) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./5/cgroup.cpu" [pid 405] close(20) = -1 EBADF (Bad file descriptor) [pid 404] close(6 [pid 371] <... unlink resumed>) = 0 [pid 405] close(21 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(22 [pid 404] close(7 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(23 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(24 [pid 404] close(8 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(25) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(26) = -1 EBADF (Bad file descriptor) [pid 404] close(9 [pid 405] close(27) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 405] close(28 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(10 [pid 371] newfstatat(AT_FDCWD, "./5/binderfs", [pid 405] close(29 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./5/binderfs" [pid 405] exit_group(0 [pid 404] close(11 [pid 371] <... unlink resumed>) = 0 [pid 405] <... exit_group resumed>) = ? [pid 371] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./5/cgroup") = 0 [pid 405] +++ exited with 0 +++ [pid 371] umount2("./5/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] close(12 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(AT_FDCWD, "./5/memory.events", [pid 404] close(13 [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./5/memory.events" [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] <... unlink resumed>) = 0 [pid 404] close(14 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(15 [pid 372] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... openat resumed>) = 3 [pid 404] close(16 [pid 372] newfstatat(3, "", [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 404] close(17 [pid 372] getdents64(3, [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 404] close(18 [pid 372] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] close(19 [pid 372] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 404] close(20 [pid 372] unlink("./6/cgroup.cpu" [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./5/cgroup.net" [pid 404] close(21 [pid 372] <... unlink resumed>) = 0 [pid 371] <... unlink resumed>) = 0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] close(22 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] getdents64(3, [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] newfstatat(AT_FDCWD, "./6/binderfs", [pid 404] close(23 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(24 [pid 372] unlink("./6/binderfs" [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 371] close(3 [pid 372] <... unlink resumed>) = 0 [pid 371] <... close resumed>) = 0 [pid 404] close(25 [pid 372] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] rmdir("./5" [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] <... rmdir resumed>) = 0 [pid 404] close(26 [pid 372] newfstatat(AT_FDCWD, "./6/cgroup", [pid 371] mkdir("./6", 0777 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... mkdir resumed>) = 0 [pid 404] close(27 [pid 372] unlink("./6/cgroup" [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 406 attached [pid 404] close(28 [pid 372] umount2("./6/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 406] set_robust_list(0x555555866660, 24 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] <... set_robust_list resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] close(29 [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 8 [pid 406] chdir("./6" [pid 372] newfstatat(AT_FDCWD, "./6/memory.events", [pid 406] <... chdir resumed>) = 0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 404] exit_group(0 [pid 406] <... prctl resumed>) = 0 [pid 404] <... exit_group resumed>) = ? [pid 372] unlink("./6/memory.events" [pid 406] setpgid(0, 0 [pid 404] +++ exited with 0 +++ [pid 406] <... setpgid resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 406] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 372] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 406] <... symlink resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 372] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 406] <... symlink resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./6/cgroup.net" [pid 406] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 374] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 406] <... symlink resumed>) = 0 [pid 372] getdents64(3, [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 406] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] close(3 [pid 406] write(3, "1000", 4 [pid 374] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 406] <... write resumed>) = 4 [pid 374] newfstatat(3, "", [pid 372] rmdir("./6" [pid 406] close(3 [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 406] <... close resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 406] symlink("/dev/binderfs", "./binderfs" [pid 374] getdents64(3, [pid 372] mkdir("./7", 0777 [pid 406] <... symlink resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 406] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 ./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x555555866660, 24) = 0 [pid 407] chdir("./7" [pid 406] <... openat resumed>) = 3 [pid 374] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 9 [pid 407] <... chdir resumed>) = 0 [pid 406] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 407] <... prctl resumed>) = 0 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 407] setpgid(0, 0 [pid 374] unlink("./5/cgroup.cpu" [pid 407] <... setpgid resumed>) = 0 [pid 407] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 374] <... unlink resumed>) = 0 [pid 407] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 374] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 407] <... symlink resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 407] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 374] newfstatat(AT_FDCWD, "./5/binderfs", [pid 407] <... symlink resumed>) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3) = 0 [pid 407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 407] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 407] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0) = -1 ENOSPC (No space left on device) [pid 407] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 406] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 407] <... socket resumed>) = 4 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 407] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 374] unlink("./5/binderfs" [pid 407] <... sendmsg resumed>) = 180 [pid 374] <... unlink resumed>) = 0 [pid 407] close(3 [pid 374] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 407] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 407] close(4 [pid 374] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 407] <... close resumed>) = 0 [pid 374] unlink("./5/cgroup" [pid 407] close(5) = -1 EBADF (Bad file descriptor) [pid 374] <... unlink resumed>) = 0 [pid 407] close(6) = -1 EBADF (Bad file descriptor) [pid 374] umount2("./5/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 407] close(7 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./5/memory.events", [pid 407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 407] close(8 [pid 374] unlink("./5/memory.events" [pid 407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 407] close(9) = -1 EBADF (Bad file descriptor) [pid 407] close(10) = -1 EBADF (Bad file descriptor) [pid 407] close(11) = -1 EBADF (Bad file descriptor) [pid 407] close(12) = -1 EBADF (Bad file descriptor) [pid 407] close(13) = -1 EBADF (Bad file descriptor) [pid 407] close(14) = -1 EBADF (Bad file descriptor) [pid 407] close(15) = -1 EBADF (Bad file descriptor) [pid 407] close(16) = -1 EBADF (Bad file descriptor) [pid 407] close(17) = -1 EBADF (Bad file descriptor) [pid 407] close(18) = -1 EBADF (Bad file descriptor) [pid 407] close(19) = -1 EBADF (Bad file descriptor) [pid 407] close(20) = -1 EBADF (Bad file descriptor) [pid 407] close(21) = -1 EBADF (Bad file descriptor) [pid 407] close(22) = -1 EBADF (Bad file descriptor) [pid 407] close(23) = -1 EBADF (Bad file descriptor) [pid 407] close(24) = -1 EBADF (Bad file descriptor) [pid 407] close(25) = -1 EBADF (Bad file descriptor) [pid 407] close(26) = -1 EBADF (Bad file descriptor) [pid 407] close(27) = -1 EBADF (Bad file descriptor) [pid 407] close(28) = -1 EBADF (Bad file descriptor) [pid 407] close(29) = -1 EBADF (Bad file descriptor) [pid 407] exit_group(0) = ? [pid 407] +++ exited with 0 +++ [pid 374] <... unlink resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 374] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 372] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./5/cgroup.net" [pid 372] <... openat resumed>) = 3 [pid 374] <... unlink resumed>) = 0 [pid 372] newfstatat(3, "", [pid 406] <... socket resumed>) = 4 [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] rmdir("./5" [pid 372] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 374] <... rmdir resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] mkdir("./6", 0777 [pid 372] unlink("./7/cgroup.cpu") = 0 [pid 374] <... mkdir resumed>) = 0 [pid 372] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 406] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./7/binderfs", ./strace-static-x86_64: Process 408 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 408] set_robust_list(0x555555866660, 24 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 8 [pid 372] unlink("./7/binderfs" [pid 408] <... set_robust_list resumed>) = 0 [pid 408] chdir("./6" [pid 372] <... unlink resumed>) = 0 [pid 408] <... chdir resumed>) = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 408] <... prctl resumed>) = 0 [pid 408] setpgid(0, 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 408] <... setpgid resumed>) = 0 [pid 372] newfstatat(AT_FDCWD, "./7/cgroup", [pid 408] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 406] <... sendmsg resumed>) = 180 [pid 408] <... symlink resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 408] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 372] unlink("./7/cgroup" [pid 408] <... symlink resumed>) = 0 [pid 406] close(3 [pid 408] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 406] <... close resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] close(4 [pid 372] umount2("./7/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 408] write(3, "1000", 4) = 4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 408] close(3 [pid 406] <... close resumed>) = 0 [pid 372] newfstatat(AT_FDCWD, "./7/memory.events", [pid 408] <... close resumed>) = 0 [pid 408] symlink("/dev/binderfs", "./binderfs" [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 408] <... symlink resumed>) = 0 [pid 406] close(5 [pid 372] unlink("./7/memory.events" [pid 408] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 408] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... unlink resumed>) = 0 [pid 406] close(6 [pid 372] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 406] close(7 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] unlink("./7/cgroup.net" [pid 406] close(8) = -1 EBADF (Bad file descriptor) [pid 406] close(9) = -1 EBADF (Bad file descriptor) [pid 406] close(10) = -1 EBADF (Bad file descriptor) [pid 406] close(11 [pid 372] <... unlink resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] getdents64(3, [pid 406] close(12) = -1 EBADF (Bad file descriptor) [pid 372] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 406] close(13 [pid 372] close(3 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... close resumed>) = 0 [pid 406] close(14 [pid 372] rmdir("./7" [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... rmdir resumed>) = 0 [pid 406] close(15 [pid 372] mkdir("./8", 0777 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... mkdir resumed>) = 0 [pid 406] close(16 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 409 attached [pid 406] close(17 [pid 409] set_robust_list(0x555555866660, 24 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 10 [pid 409] <... set_robust_list resumed>) = 0 [pid 406] close(18 [pid 409] chdir("./8") = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 406] close(19 [pid 409] <... prctl resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] setpgid(0, 0 [pid 406] close(20 [pid 409] <... setpgid resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 406] close(21 [pid 409] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] <... symlink resumed>) = 0 [pid 406] close(22 [pid 409] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] <... symlink resumed>) = 0 [pid 406] close(23 [pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] <... openat resumed>) = 3 [pid 406] close(24 [pid 409] write(3, "1000", 4) = 4 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] close(3) = 0 [pid 406] close(25 [pid 409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 406] close(26) = -1 EBADF (Bad file descriptor) [pid 409] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 406] close(27) = -1 EBADF (Bad file descriptor) [pid 406] close(28) = -1 EBADF (Bad file descriptor) [pid 406] close(29) = -1 EBADF (Bad file descriptor) [pid 406] exit_group(0) = ? [pid 406] +++ exited with 0 +++ [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 371] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 371] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 371] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 371] getdents64(3, 0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 371] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 409] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 371] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 409] <... socket resumed>) = 4 [pid 408] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 409] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] unlink("./6/cgroup.cpu" [pid 409] <... sendmsg resumed>) = 180 [pid 371] <... unlink resumed>) = 0 [pid 409] close(3 [pid 371] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 409] <... close resumed>) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] close(4 [pid 371] newfstatat(AT_FDCWD, "./6/binderfs", [pid 409] <... close resumed>) = 0 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 409] close(5 [pid 371] unlink("./6/binderfs" [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 371] <... unlink resumed>) = 0 [pid 409] close(6 [pid 408] <... socket resumed>) = 4 [pid 371] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] close(7 [pid 408] <... sendmsg resumed>) = 180 [pid 371] newfstatat(AT_FDCWD, "./6/cgroup", [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] close(3 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 409] close(8 [pid 408] <... close resumed>) = 0 [pid 371] unlink("./6/cgroup" [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] close(4 [pid 371] <... unlink resumed>) = 0 [pid 409] close(9 [pid 408] <... close resumed>) = 0 [pid 371] umount2("./6/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] close(5 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] close(10 [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(AT_FDCWD, "./6/memory.events", [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] close(6 [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 409] close(11 [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./6/memory.events" [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] close(7 [pid 371] <... unlink resumed>) = 0 [pid 409] close(12) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 409] close(13) = -1 EBADF (Bad file descriptor) [pid 408] close(8 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 409] close(14) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 409] close(15) = -1 EBADF (Bad file descriptor) [pid 408] close(9 [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 409] close(16) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] unlink("./6/cgroup.net" [pid 409] close(17 [pid 408] close(10 [pid 371] <... unlink resumed>) = 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] getdents64(3, [pid 409] close(18 [pid 408] close(11 [pid 371] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] close(3 [pid 409] close(19 [pid 408] close(12 [pid 371] <... close resumed>) = 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] rmdir("./6" [pid 409] close(20 [pid 408] close(13 [pid 371] <... rmdir resumed>) = 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] mkdir("./7", 0777 [pid 409] close(21 [pid 408] close(14 [pid 371] <... mkdir resumed>) = 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 409] close(22 [pid 408] close(15./strace-static-x86_64: Process 410 attached [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] set_robust_list(0x555555866660, 24 [pid 409] close(23 [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 9 [pid 410] <... set_robust_list resumed>) = 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] close(24 [pid 408] close(16 [pid 410] chdir("./7" [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... chdir resumed>) = 0 [pid 409] close(25 [pid 408] close(17 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... prctl resumed>) = 0 [pid 409] close(26 [pid 408] close(18 [pid 410] setpgid(0, 0 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... setpgid resumed>) = 0 [pid 409] close(27 [pid 408] close(19 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] close(28 [pid 408] close(20 [pid 410] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 409] close(29 [pid 408] close(21 [pid 409] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... symlink resumed>) = 0 [pid 409] exit_group(0 [pid 408] close(22 [pid 410] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 409] <... exit_group resumed>) = ? [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... symlink resumed>) = 0 [pid 409] +++ exited with 0 +++ [pid 408] close(23 [pid 410] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 408] close(24) = -1 EBADF (Bad file descriptor) [pid 408] close(25) = -1 EBADF (Bad file descriptor) [pid 410] <... symlink resumed>) = 0 [pid 408] close(26 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 408] close(27) = -1 EBADF (Bad file descriptor) [pid 408] close(28 [pid 410] <... openat resumed>) = 3 [pid 408] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 410] write(3, "1000", 4 [pid 408] close(29) = -1 EBADF (Bad file descriptor) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] <... write resumed>) = 4 [pid 408] exit_group(0 [pid 410] close(3 [pid 408] <... exit_group resumed>) = ? [pid 372] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 410] <... close resumed>) = 0 [pid 408] +++ exited with 0 +++ [pid 410] symlink("/dev/binderfs", "./binderfs" [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 372] <... openat resumed>) = 3 [pid 410] <... symlink resumed>) = 0 [pid 372] newfstatat(3, "", [pid 410] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 410] <... openat resumed>) = 3 [pid 372] getdents64(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 410] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 374] <... openat resumed>) = 3 [pid 372] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] newfstatat(3, "", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] getdents64(3, [pid 372] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] unlink("./8/cgroup.cpu" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./6/cgroup.cpu") = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./6/binderfs", [pid 372] newfstatat(AT_FDCWD, "./8/binderfs", [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./6/binderfs" [pid 372] unlink("./8/binderfs" [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./6/cgroup", [pid 372] newfstatat(AT_FDCWD, "./8/cgroup", [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./6/cgroup" [pid 372] unlink("./8/cgroup" [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./6/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./8/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./6/memory.events", [pid 372] newfstatat(AT_FDCWD, "./8/memory.events", [pid 374] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./6/memory.events" [pid 372] unlink("./8/memory.events" [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 372] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./6/cgroup.net" [pid 372] unlink("./8/cgroup.net" [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 372] close(3 [pid 374] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 374] rmdir("./6" [pid 372] rmdir("./8" [pid 374] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 374] mkdir("./7", 0777 [pid 372] mkdir("./9", 0777 [pid 374] <... mkdir resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 412 attached ./strace-static-x86_64: Process 411 attached [pid 410] <... ioctl resumed>) = 0 [pid 411] set_robust_list(0x555555866660, 24 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 9 [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 11 [pid 412] set_robust_list(0x555555866660, 24 [pid 411] <... set_robust_list resumed>) = 0 [pid 410] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 412] <... set_robust_list resumed>) = 0 [pid 411] chdir("./9" [pid 412] chdir("./7" [pid 411] <... chdir resumed>) = 0 [pid 410] <... socket resumed>) = 4 [pid 412] <... chdir resumed>) = 0 [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 411] <... prctl resumed>) = 0 [pid 410] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 412] <... prctl resumed>) = 0 [pid 411] setpgid(0, 0 [pid 412] setpgid(0, 0 [pid 411] <... setpgid resumed>) = 0 [pid 412] <... setpgid resumed>) = 0 [pid 411] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 412] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 411] <... symlink resumed>) = 0 [pid 412] <... symlink resumed>) = 0 [pid 411] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 412] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 411] <... symlink resumed>) = 0 [pid 412] <... symlink resumed>) = 0 [pid 411] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 410] <... sendmsg resumed>) = 180 [pid 412] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 411] <... symlink resumed>) = 0 [pid 412] <... symlink resumed>) = 0 [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 410] close(3 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 411] <... openat resumed>) = 3 [pid 412] <... openat resumed>) = 3 [pid 411] write(3, "1000", 4 [pid 412] write(3, "1000", 4 [pid 410] <... close resumed>) = 0 [pid 411] <... write resumed>) = 4 [pid 412] <... write resumed>) = 4 [pid 410] close(4 [pid 411] close(3 [pid 412] close(3 [pid 411] <... close resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 411] symlink("/dev/binderfs", "./binderfs" [pid 410] <... close resumed>) = 0 [pid 412] symlink("/dev/binderfs", "./binderfs" [pid 411] <... symlink resumed>) = 0 [pid 412] <... symlink resumed>) = 0 [pid 411] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 412] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 411] <... openat resumed>) = 3 [pid 412] <... openat resumed>) = 3 [pid 411] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 410] close(5 [pid 412] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(6) = -1 EBADF (Bad file descriptor) [pid 410] close(7) = -1 EBADF (Bad file descriptor) [pid 410] close(8) = -1 EBADF (Bad file descriptor) [pid 410] close(9) = -1 EBADF (Bad file descriptor) [pid 410] close(10) = -1 EBADF (Bad file descriptor) [pid 410] close(11) = -1 EBADF (Bad file descriptor) [pid 410] close(12) = -1 EBADF (Bad file descriptor) [pid 410] close(13) = -1 EBADF (Bad file descriptor) [pid 410] close(14) = -1 EBADF (Bad file descriptor) [pid 410] close(15) = -1 EBADF (Bad file descriptor) [pid 410] close(16) = -1 EBADF (Bad file descriptor) [pid 410] close(17 [pid 411] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 410] close(18) = -1 EBADF (Bad file descriptor) [pid 411] <... socket resumed>) = 4 [pid 410] close(19) = -1 EBADF (Bad file descriptor) [pid 411] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 410] close(20) = -1 EBADF (Bad file descriptor) [pid 411] <... sendmsg resumed>) = 180 [pid 410] close(21 [pid 412] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 411] close(3 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 410] close(22 [pid 412] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 411] <... close resumed>) = 0 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... sendmsg resumed>) = 180 [pid 412] close(3 [pid 411] close(4 [pid 410] close(23 [pid 412] <... close resumed>) = 0 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(4 [pid 411] <... close resumed>) = 0 [pid 410] close(24 [pid 412] <... close resumed>) = 0 [pid 411] close(5 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(5 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(25 [pid 412] close(6 [pid 411] close(6 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(26 [pid 412] close(7 [pid 411] close(7 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(27 [pid 412] close(8 [pid 411] close(8 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(28 [pid 412] close(9) = -1 EBADF (Bad file descriptor) [pid 411] close(9 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(10 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(29 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(11 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(10 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] exit_group(0 [pid 412] close(12) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... exit_group resumed>) = ? [pid 412] close(13 [pid 410] +++ exited with 0 +++ [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(11 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 412] close(14 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] restart_syscall(<... resuming interrupted clone ...> [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(12 [pid 371] <... restart_syscall resumed>) = 0 [pid 412] close(15 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(13 [pid 371] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 412] close(16 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(14 [pid 371] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 412] close(17 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... openat resumed>) = 3 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(15 [pid 371] newfstatat(3, "", [pid 412] close(18 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(16 [pid 371] getdents64(3, [pid 412] close(19 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(17 [pid 371] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 412] close(20 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(18 [pid 371] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 412] close(21 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(19 [pid 371] unlink("./7/cgroup.cpu" [pid 412] close(22 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(20 [pid 371] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 412] close(23 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(21 [pid 371] newfstatat(AT_FDCWD, "./7/binderfs", [pid 412] close(24 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(22 [pid 371] unlink("./7/binderfs" [pid 412] close(25 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(23 [pid 371] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 412] close(26 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(24 [pid 371] newfstatat(AT_FDCWD, "./7/cgroup", [pid 412] close(27 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(25 [pid 371] unlink("./7/cgroup" [pid 412] close(28 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(26 [pid 371] umount2("./7/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 412] close(29 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] close(27 [pid 371] newfstatat(AT_FDCWD, "./7/memory.events", [pid 412] exit_group(0 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 412] <... exit_group resumed>) = ? [pid 411] close(28 [pid 371] unlink("./7/memory.events" [pid 412] +++ exited with 0 +++ [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... unlink resumed>) = 0 [pid 411] close(29 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 371] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 411] exit_group(0 [pid 371] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 411] <... exit_group resumed>) = ? [pid 371] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./7/cgroup.net") = 0 [pid 371] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 371] close(3 [pid 411] +++ exited with 0 +++ [pid 371] <... close resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 371] rmdir("./7" [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 371] <... rmdir resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 371] mkdir("./8", 0777) = 0 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 413 attached [pid 374] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 413] set_robust_list(0x555555866660, 24 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 413] <... set_robust_list resumed>) = 0 [pid 374] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 10 [pid 413] chdir("./8" [pid 372] <... openat resumed>) = 3 [pid 413] <... chdir resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] newfstatat(3, "", [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] newfstatat(3, "", [pid 372] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 413] <... prctl resumed>) = 0 [pid 374] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] getdents64(3, [pid 413] setpgid(0, 0 [pid 374] getdents64(3, [pid 372] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 413] <... setpgid resumed>) = 0 [pid 374] <... getdents64 resumed>0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 413] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 372] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 374] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./9/cgroup.cpu" [pid 413] <... symlink resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... unlink resumed>) = 0 [pid 413] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 374] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 372] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 413] <... symlink resumed>) = 0 [pid 372] unlink("./9/binderfs" [pid 413] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 413] <... symlink resumed>) = 0 [pid 374] unlink("./7/cgroup.cpu" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] newfstatat(AT_FDCWD, "./9/cgroup", [pid 374] <... unlink resumed>) = 0 [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 413] <... openat resumed>) = 3 [pid 374] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] unlink("./9/cgroup" [pid 413] write(3, "1000", 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... unlink resumed>) = 0 [pid 413] <... write resumed>) = 4 [pid 374] newfstatat(AT_FDCWD, "./7/binderfs", [pid 372] umount2("./9/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW [pid 413] close(3 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 413] <... close resumed>) = 0 [pid 374] unlink("./7/binderfs" [pid 372] newfstatat(AT_FDCWD, "./9/memory.events", [pid 413] symlink("/dev/binderfs", "./binderfs" [pid 372] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] <... unlink resumed>) = 0 [pid 413] <... symlink resumed>) = 0 [pid 372] unlink("./9/memory.events" [pid 413] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 413] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 413] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 374] newfstatat(AT_FDCWD, "./7/cgroup", [pid 372] unlink("./9/cgroup.net") = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./9") = 0 [pid 372] mkdir("./10", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x555555866660, 24 [pid 372] <... clone resumed>, child_tidptr=0x555555866650) = 12 [pid 414] <... set_robust_list resumed>) = 0 [pid 414] chdir("./10") = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 414] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 414] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4) = 4 [pid 414] close(3) = 0 [pid 414] symlink("/dev/binderfs", "./binderfs") = 0 [pid 414] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 414] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./7/cgroup") = 0 [pid 374] umount2("./7/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] newfstatat(AT_FDCWD, "./7/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] unlink("./7/memory.events" [pid 413] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 414] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 374] <... unlink resumed>) = 0 [pid 413] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 374] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 413] <... socket resumed>) = 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 413] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 374] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 413] <... sendmsg resumed>) = 180 [pid 374] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 413] close(3 [pid 374] unlink("./7/cgroup.net" [pid 413] <... close resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 413] close(4 [pid 374] getdents64(3, [pid 414] <... socket resumed>) = 4 [pid 413] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 413] close(5 [pid 374] close(3 [pid 414] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = 0 [pid 414] <... sendmsg resumed>) = 180 [pid 413] close(6 [pid 374] rmdir("./7" [pid 414] close(3 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... rmdir resumed>) = 0 [pid 414] <... close resumed>) = 0 [pid 413] close(7 [pid 374] mkdir("./8", 0777 [pid 414] close(4 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... mkdir resumed>) = 0 [pid 414] <... close resumed>) = 0 [pid 413] close(8 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 416 attached [pid 414] close(5 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(9 [pid 374] <... clone resumed>, child_tidptr=0x555555866650) = 10 [pid 416] set_robust_list(0x555555866660, 24 [pid 414] close(6 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] <... set_robust_list resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(10 [pid 416] chdir("./8" [pid 414] close(7 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] <... chdir resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(11 [pid 416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 414] close(8 [pid 416] <... prctl resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] setpgid(0, 0 [pid 414] close(9 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] <... setpgid resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 414] close(10 [pid 413] close(12) = -1 EBADF (Bad file descriptor) [pid 416] <... symlink resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(13 [pid 416] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 414] close(11 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(14 [pid 416] <... symlink resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 414] close(12 [pid 413] close(15) = -1 EBADF (Bad file descriptor) [pid 416] <... symlink resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(16 [pid 416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 414] close(13 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(17 [pid 416] <... openat resumed>) = 3 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] write(3, "1000", 4 [pid 414] close(14 [pid 413] close(18 [pid 416] <... write resumed>) = 4 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] close(3 [pid 414] close(15 [pid 413] close(19 [pid 416] <... close resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] symlink("/dev/binderfs", "./binderfs" [pid 414] close(16 [pid 413] close(20) = -1 EBADF (Bad file descriptor) [pid 416] <... symlink resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(21 [pid 416] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 414] close(17 [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(22 [pid 416] <... openat resumed>) = 3 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 416] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0 [pid 414] close(18 [pid 413] close(23 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(19 [pid 413] close(24 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(20 [pid 413] close(25 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(21 [pid 413] close(26) = -1 EBADF (Bad file descriptor) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 413] close(27) = -1 EBADF (Bad file descriptor) [pid 413] close(28) = -1 EBADF (Bad file descriptor) [pid 413] close(29) = -1 EBADF (Bad file descriptor) [pid 413] exit_group(0) = ? [pid 413] +++ exited with 0 +++ [pid 414] close(22) = -1 EBADF (Bad file descriptor) [pid 414] close(23) = -1 EBADF (Bad file descriptor) [pid 414] close(24) = -1 EBADF (Bad file descriptor) [pid 414] close(25) = -1 EBADF (Bad file descriptor) [pid 414] close(26) = -1 EBADF (Bad file descriptor) [pid 414] close(27) = -1 EBADF (Bad file descriptor) [pid 414] close(28) = -1 EBADF (Bad file descriptor) [pid 414] close(29) = -1 EBADF (Bad file descriptor) [pid 414] exit_group(0) = ? [pid 414] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 372] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 372] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./10/cgroup.cpu") = 0 [pid 372] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./10/binderfs") = 0 [pid 372] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./10/cgroup") = 0 [pid 372] umount2("./10/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./10/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./10/memory.events") = 0 [pid 372] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] unlink("./10/cgroup.net") = 0 [pid 372] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./10") = 0 [pid 372] mkdir("./11", 0777) = 0 [ 28.859875][ T179] ================================================================== [ 28.867762][ T179] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 28.875133][ T179] Read of size 4 at addr 0000000000000010 by task kworker/u4:2/179 [ 28.882852][ T179] [ 28.885029][ T179] CPU: 1 PID: 179 Comm: kworker/u4:2 Not tainted 5.4.259-syzkaller-00012-g57a39998c138 #0 [ 28.894740][ T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 28.904640][ T179] Workqueue: netns cleanup_net [ 28.909236][ T179] Call Trace: [ 28.912366][ T179] dump_stack+0x1d8/0x241 [ 28.916527][ T179] ? panic+0x896/0x896 [ 28.920438][ T179] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 28.926088][ T179] ? idr_get_next_ul+0x32a/0x3f0 [ 28.930850][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 28.935883][ T179] __kasan_report+0xe9/0x120 [ 28.940324][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 28.945344][ T179] kasan_report+0x30/0x60 [ 28.949512][ T179] check_memory_region+0x272/0x280 [ 28.954456][ T179] tcf_idrinfo_destroy+0xe2/0x280 [ 28.959322][ T179] ? tcf_idr_check_alloc+0x370/0x370 [ 28.964436][ T179] ? netdev_refcnt_read+0x1c0/0x1c0 [ 28.969478][ T179] ? gact_exit_net+0xef/0x140 [ 28.973985][ T179] police_exit_net+0xd7/0x140 [ 28.978496][ T179] ? police_init_net+0x1c0/0x1c0 [ 28.983272][ T179] cleanup_net+0x6e2/0xc90 [ 28.987526][ T179] ? ops_init+0x4a0/0x4a0 [ 28.991690][ T179] ? read_word_at_a_time+0xe/0x20 [ 28.996553][ T179] ? strscpy+0x89/0x220 [ 29.000544][ T179] process_one_work+0x765/0xd20 [ 29.005239][ T179] worker_thread+0xaef/0x1470 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555866650) = 13 [pid 371] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 371] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 371] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 371] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 371] getdents64(3, 0x5555558676f0 /* 7 entries */, 32768) = 216 [pid 371] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./8/cgroup.cpu") = 0 [pid 371] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./8/binderfs") = 0 [pid 371] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./8/cgroup") = 0 [pid 371] umount2("./8/memory.events", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./8/memory.events", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./8/memory.events") = 0 [pid 371] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 371] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] unlink("./8/cgroup.net") = 0 [pid 371] getdents64(3, 0x5555558676f0 /* 0 entries */, 32768) = 0 [pid 371] close(3) = 0 [pid 371] rmdir("./8") = 0 [pid 371] mkdir("./9", 0777) = 0 [ 29.009752][ T179] kthread+0x2da/0x360 [ 29.013650][ T179] ? worker_clr_flags+0x170/0x170 [ 29.018509][ T179] ? kthread_blkcg+0xd0/0xd0 [ 29.022935][ T179] ret_from_fork+0x1f/0x30 [ 29.027190][ T179] ================================================================== [ 29.035084][ T179] Disabling lock debugging due to kernel taint [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x555555866660, 24) = 0 [pid 417] chdir("./11") = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 417] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 417] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 417] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [ 29.042081][ T23] audit: type=1400 audit(1705113510.020:75): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.050479][ T179] kasan: CONFIG_KASAN_INLINE enabled [ 29.068865][ T179] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.076944][ T179] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.083672][ T179] CPU: 1 PID: 179 Comm: kworker/u4:2 Tainted: G B 5.4.259-syzkaller-00012-g57a39998c138 #0 [ 29.094778][ T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 29.104680][ T179] Workqueue: netns cleanup_net [ 29.109282][ T179] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 29.114921][ T179] Code: ee e8 3b 79 b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 7e 79 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 1f d8 [ 29.134356][ T179] RSP: 0018:ffff8881e4dd7b60 EFLAGS: 00010202 [ 29.140256][ T179] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e9f46e40 [ 29.148071][ T179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 29.155882][ T179] RBP: ffff8881e4dd7c30 R08: ffffffff813af605 R09: 0000000000000003 [ 29.163691][ T179] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103c9baf78 [ 29.171506][ T179] R13: ffff8881e4dd7bc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 29.179405][ T179] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.188170][ T179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.194594][ T179] CR2: 00007f95dd0c10d0 CR3: 00000001ddae4000 CR4: 00000000003406a0 [ 29.202407][ T179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.210230][ T179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.218030][ T179] Call Trace: [ 29.221162][ T179] ? __die+0xb4/0x100 [ 29.224971][ T179] ? die+0x26/0x50 [ 29.228705][ T179] ? do_general_protection+0x266/0x3c0 [ 29.234001][ T179] ? ___preempt_schedule+0x16/0x20 [ 29.238945][ T179] ? do_trap+0x340/0x340 [ 29.243122][ T179] ? check_panic_on_warn+0x5e/0xa0 [ 29.248059][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 29.253094][ T179] ? general_protection+0x28/0x30 [ 29.257952][ T179] ? check_panic_on_warn+0x55/0xa0 [ 29.262900][ T179] ? tcf_idrinfo_destroy+0xe9/0x280 [ 29.267943][ T179] ? tcf_idr_check_alloc+0x370/0x370 [ 29.273058][ T179] ? netdev_refcnt_read+0x1c0/0x1c0 [ 29.278090][ T179] ? gact_exit_net+0xef/0x140 [ 29.282600][ T179] police_exit_net+0xd7/0x140 [ 29.287117][ T179] ? police_init_net+0x1c0/0x1c0 [ 29.291887][ T179] cleanup_net+0x6e2/0xc90 [ 29.296147][ T179] ? ops_init+0x4a0/0x4a0 [ 29.300309][ T179] ? read_word_at_a_time+0xe/0x20 [ 29.305165][ T179] ? strscpy+0x89/0x220 [pid 417] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0./strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x555555866660, 24 [pid 371] <... clone resumed>, child_tidptr=0x555555866650) = 11 [pid 418] <... set_robust_list resumed>) = 0 [pid 418] chdir("./9") = 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 418] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 418] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 [pid 418] symlink("/dev/binderfs", "./binderfs") = 0 [ 29.309166][ T179] process_one_work+0x765/0xd20 [ 29.313849][ T179] worker_thread+0xaef/0x1470 [ 29.318366][ T179] kthread+0x2da/0x360 [ 29.322269][ T179] ? worker_clr_flags+0x170/0x170 [ 29.327125][ T179] ? kthread_blkcg+0xd0/0xd0 [ 29.331552][ T179] ret_from_fork+0x1f/0x30 [ 29.335800][ T179] Modules linked in: [ 29.342958][ T179] ---[ end trace 87ba05ee6766aa7d ]--- [ 29.348603][ T179] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [pid 416] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 418] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 418] ioctl(3, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0) = -1 ENOSPC (No space left on device) [pid 418] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 418] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 416] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 416] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\xb4\x00\x00\x00\x30\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xa0\x00\x01\x00\x6c\x00\x01\x00\x0b\x00\x01\x00\x70\x6f\x6c\x69\x63\x65\x00\x00\x40\x00\x02\x80\x3c\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=180}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 417] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 417] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [ 29.354216][ T179] Code: ee e8 3b 79 b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 7e 79 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 1f d8 [ 29.374069][ T179] RSP: 0018:ffff8881e4dd7b60 EFLAGS: 00010202 [ 29.379971][ T179] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e9f46e40 [ 29.387779][ T179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 29.395560][ T179] RBP: ffff8881e4dd7c30 R08: ffffffff813af605 R09: 0000000000000003 [ 29.403414][ T179] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103c9baf78 [ 29.411207][ T179] R13: ffff8881e4dd7bc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 29.419044][ T179] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.427782][ T179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.434193][ T179] CR2: 00007ffd211b0d88 CR3: 00000001ee3c0000 CR4: 00000000003406b0 [ 29.442109][ T179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.449910][ T179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.457742][ T179] Kernel panic - not syncing: Fatal exception [ 29.463846][ T179] Kernel Offset: disabled [ 29.467967][ T179] Rebooting in 86400 seconds..