./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4107750939 <...> Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. execve("./syz-executor4107750939", ["./syz-executor4107750939"], 0x7fff6dc44260 /* 10 vars */) = 0 brk(NULL) = 0x555555cd5000 brk(0x555555cd5c40) = 0x555555cd5c40 arch_prctl(ARCH_SET_FS, 0x555555cd5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4107750939", 4096) = 28 brk(0x555555cf6c40) = 0x555555cf6c40 brk(0x555555cf7000) = 0x555555cf7000 mprotect(0x7fe0fa348000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 305 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 306 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 307 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 308 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 309 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 310 ./strace-static-x86_64: Process 310 attached [pid 310] getpid() = 310 [pid 310] mkdir("./syzkaller.QRwiPE", 0700) = 0 ./strace-static-x86_64: Process 309 attached [pid 309] getpid() = 309 [pid 309] mkdir("./syzkaller.fns02z", 0700 [pid 310] chmod("./syzkaller.QRwiPE", 0777) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 310] chdir("./syzkaller.QRwiPE") = 0 [pid 310] mkdir("./0", 0777) = 0 [pid 309] chmod("./syzkaller.fns02z", 0777) = 0 [pid 309] chdir("./syzkaller.fns02z") = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] mkdir("./0", 0777) = 0 [pid 310] <... clone resumed>, child_tidptr=0x555555cd55d0) = 311 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 307 attached [pid 307] getpid() = 307 [pid 307] mkdir("./syzkaller.l7HYzp", 0700 [pid 309] <... clone resumed>, child_tidptr=0x555555cd55d0) = 312 [pid 307] <... mkdir resumed>) = 0 [pid 307] chmod("./syzkaller.l7HYzp", 0777) = 0 [pid 307] chdir("./syzkaller.l7HYzp") = 0 [pid 307] mkdir("./0", 0777) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd55d0) = 313 ./strace-static-x86_64: Process 312 attached [pid 312] chdir("./0"./strace-static-x86_64: Process 313 attached ./strace-static-x86_64: Process 311 attached ./strace-static-x86_64: Process 308 attached ./strace-static-x86_64: Process 306 attached ./strace-static-x86_64: Process 305 attached ) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 311] chdir("./0" [pid 308] getpid( [pid 311] <... chdir resumed>) = 0 [pid 308] <... getpid resumed>) = 308 [pid 306] getpid( [pid 305] getpid( [pid 313] chdir("./0" [pid 312] <... openat resumed>) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] symlink("/dev/binderfs", "./binderfs" [pid 305] <... getpid resumed>) = 305 [pid 306] <... getpid resumed>) = 306 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] mkdir("./syzkaller.672jlt", 0700 [pid 311] <... prctl resumed>) = 0 [pid 306] mkdir("./syzkaller.Wtximl", 0700 [pid 305] mkdir("./syzkaller.OSbi5f", 0700 [pid 312] <... symlink resumed>) = 0 [pid 312] creat("./file0", 000 [pid 308] <... mkdir resumed>) = 0 [pid 311] setpgid(0, 0 [pid 312] <... creat resumed>) = 3 [pid 312] write(-1, "\xa8\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xee\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x5b\x26\x2a\x7b\x29\x7d\x23\x2a\x0d\x90\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00"..., 680 [pid 305] <... mkdir resumed>) = 0 [pid 312] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 312] clone(child_stack=NULL, flags=0 [pid 306] <... mkdir resumed>) = 0 [pid 311] <... setpgid resumed>) = 0 [pid 308] chmod("./syzkaller.672jlt", 0777 [pid 305] chmod("./syzkaller.OSbi5f", 0777 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... chmod resumed>) = 0 [pid 312] <... clone resumed>) = 314 [pid 312] ptrace(PTRACE_ATTACH, 314 [pid 311] <... openat resumed>) = 3 [pid 306] chmod("./syzkaller.Wtximl", 0777 [pid 305] chdir("./syzkaller.OSbi5f" [pid 311] write(3, "1000", 4 [pid 308] <... chmod resumed>) = 0 [pid 312] <... ptrace resumed>) = -1 EPERM (Operation not permitted) [pid 312] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 672267775 [pid 311] <... write resumed>) = 4 [pid 306] <... chmod resumed>) = 0 [pid 311] close(3 [pid 308] chdir("./syzkaller.672jlt" [pid 306] chdir("./syzkaller.Wtximl" [pid 305] <... chdir resumed>) = 0 [pid 311] <... close resumed>) = 0 [pid 311] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 314 attached [pid 313] <... chdir resumed>) = 0 [pid 308] <... chdir resumed>) = 0 [pid 306] <... chdir resumed>) = 0 [pid 305] mkdir("./0", 0777 [pid 311] <... symlink resumed>) = 0 [pid 308] mkdir("./0", 0777 [pid 306] mkdir("./0", 0777 [pid 305] <... mkdir resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] creat("./file0", 000 [pid 313] setpgid(0, 0 [pid 311] <... creat resumed>) = 3 [pid 313] <... setpgid resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4 [pid 311] write(-1, "\xa8\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xee\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x5b\x26\x2a\x7b\x29\x7d\x23\x2a\x0d\x90\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00"..., 680 [pid 305] <... clone resumed>, child_tidptr=0x555555cd55d0) = 315 [pid 313] <... write resumed>) = 4 [pid 311] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... clone resumed>, child_tidptr=0x555555cd55d0) = 316 [pid 306] <... clone resumed>, child_tidptr=0x555555cd55d0) = 317 ./strace-static-x86_64: Process 315 attached [pid 313] close(3 [pid 311] clone(child_stack=NULL, flags=0 [pid 313] <... close resumed>) = 0 ./strace-static-x86_64: Process 317 attached [pid 317] chdir("./0" [pid 313] symlink("/dev/binderfs", "./binderfs" [pid 317] <... chdir resumed>) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] <... symlink resumed>) = 0 [pid 311] <... clone resumed>) = 318 ./strace-static-x86_64: Process 316 attached ./strace-static-x86_64: Process 318 attached [pid 315] chdir("./0" [pid 313] creat("./file0", 000 [pid 311] ptrace(PTRACE_ATTACH, 318 [pid 313] <... creat resumed>) = 3 [pid 311] <... ptrace resumed>) = -1 EPERM (Operation not permitted) [pid 311] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 672267775 [pid 313] write(-1, "\xa8\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xee\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x5b\x26\x2a\x7b\x29\x7d\x23\x2a\x0d\x90\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00"..., 680 [pid 315] <... chdir resumed>) = 0 [pid 317] setpgid(0, 0 [pid 313] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... setpgid resumed>) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] chdir("./0" [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] clone(child_stack=NULL, flags=0 [pid 317] <... openat resumed>) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 317] creat("./file0", 000 [pid 313] <... clone resumed>) = 319 [pid 317] <... creat resumed>) = 3 [pid 317] write(-1, "\xa8\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xee\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x5b\x26\x2a\x7b\x29\x7d\x23\x2a\x0d\x90\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00"..., 680) = -1 EBADF (Bad file descriptor) [pid 317] clone(child_stack=NULL, flags=0 [pid 315] <... prctl resumed>) = 0 [pid 313] ptrace(PTRACE_ATTACH, 319 [pid 316] <... chdir resumed>) = 0 [pid 313] <... ptrace resumed>) = -1 EPERM (Operation not permitted) [pid 313] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 672267775 [pid 315] setpgid(0, 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 319 attached ) = 0 [pid 315] <... setpgid resumed>) = 0 [pid 312] <... fallocate resumed>) = -1 ENOSPC (No space left on device) [pid 311] <... fallocate resumed>) = -1 ENOSPC (No space left on device) [pid 313] <... fallocate resumed>) = -1 ENOSPC (No space left on device) [pid 313] exit_group(0) = ? [pid 317] <... clone resumed>) = 320 [pid 317] ptrace(PTRACE_ATTACH, 320) = -1 EPERM (Operation not permitted) [pid 317] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 672267775 [pid 313] +++ exited with 0 +++ [pid 317] <... fallocate resumed>) = -1 ENOSPC (No space left on device) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 311] exit_group(0 [pid 317] exit_group(0) = ? [pid 311] <... exit_group resumed>) = ? [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... restart_syscall resumed>) = 0 [pid 317] +++ exited with 0 +++ [pid 311] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] exit_group(0 [pid 315] <... openat resumed>) = 3 [pid 312] <... exit_group resumed>) = ? [pid 310] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] write(3, "1000", 4 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] <... write resumed>) = 4 [pid 310] fstat(3, [pid 306] <... openat resumed>) = 3 [pid 315] close(3 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] fstat(3, [pid 310] getdents64(3, [pid 315] <... close resumed>) = 0 [pid 307] fstat(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... getdents64 resumed>0x555555cd6620 /* 4 entries */, 32768) = 112 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(3, [pid 307] getdents64(3, [pid 306] <... getdents64 resumed>0x555555cd6620 /* 4 entries */, 32768) = 112 [pid 307] <... getdents64 resumed>0x555555cd6620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] symlink("/dev/binderfs", "./binderfs" [pid 310] lstat("./0/binderfs", [pid 307] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./0/binderfs" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./0/binderfs", [pid 315] <... symlink resumed>) = 0 [pid 307] lstat("./0/binderfs", [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] <... unlink resumed>) = 0 [pid 315] creat("./file0", 000 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./0/binderfs" [pid 310] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] unlink("./0/binderfs" [pid 312] +++ exited with 0 +++ [pid 306] <... unlink resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 307] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./0/file0", [pid 309] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] lstat("./0/file0", [pid 310] lstat("./0/file0", [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 309] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 306] unlink("./0/file0" [pid 309] <... openat resumed>) = 3 [pid 310] unlink("./0/file0" [pid 307] unlink("./0/file0" [pid 306] <... unlink resumed>) = 0 [pid 309] fstat(3, ./strace-static-x86_64: Process 320 attached [pid 307] <... unlink resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... unlink resumed>) = 0 [pid 309] getdents64(3, [pid 306] getdents64(3, [pid 307] getdents64(3, [pid 316] setpgid(0, 0 [pid 310] getdents64(3, [pid 309] <... getdents64 resumed>0x555555cd6620 /* 4 entries */, 32768) = 112 [pid 310] <... getdents64 resumed>0x555555cd6620 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x555555cd6620 /* 0 entries */, 32768) = 0 [pid 306] <... getdents64 resumed>0x555555cd6620 /* 0 entries */, 32768) = 0 [pid 309] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 316] <... setpgid resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] close(3 [pid 310] close(3 [pid 309] lstat("./0/binderfs", [pid 306] close(3 [pid 307] <... close resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./0/binderfs" [pid 307] rmdir("./0" [pid 306] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... unlink resumed>) = 0 [pid 306] rmdir("./0" [pid 315] <... creat resumed>) = 3 [pid 310] rmdir("./0" [pid 309] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... rmdir resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... rmdir resumed>) = 0 [pid 316] <... openat resumed>) = 3 [pid 315] write(-1, "\xa8\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xee\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x5b\x26\x2a\x7b\x29\x7d\x23\x2a\x0d\x90\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00"..., 680 [pid 310] <... rmdir resumed>) = 0 [pid 309] lstat("./0/file0", [pid 307] mkdir("./1", 0777 [pid 306] mkdir("./1", 0777 [pid 309] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 309] unlink("./0/file0" [pid 307] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 306] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 316] creat("./file0", 000 [pid 309] <... unlink resumed>) = 0 [pid 310] mkdir("./1", 0777 [pid 309] getdents64(3, [pid 306] exit_group(1 [pid 316] <... creat resumed>) = 3 [pid 310] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 309] <... getdents64 resumed>0x555555cd6620 /* 0 entries */, 32768) = 0 [pid 306] <... exit_group resumed>) = ? [pid 315] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 309] close(3 [pid 307] exit_group(1 [pid 316] write(-1, "\xa8\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xee\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x5b\x26\x2a\x7b\x29\x7d\x23\x2a\x0d\x90\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00"..., 680) = -1 EBADF (Bad file descriptor) [pid 316] clone(child_stack=NULL, flags=0 [pid 315] clone(child_stack=NULL, flags=0 [pid 310] exit_group(1 [pid 309] <... close resumed>) = 0 [pid 307] <... exit_group resumed>) = ? [pid 306] +++ exited with 1 +++ ./strace-static-x86_64: Process 321 attached [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=1, si_utime=0, si_stime=0} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 316] <... clone resumed>) = 321 [pid 316] ptrace(PTRACE_ATTACH, 321) = -1 EPERM (Operation not permitted) [pid 316] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 672267775) = -1 ENOSPC (No space left on device) [pid 316] exit_group(0) = ? [pid 316] +++ exited with 0 +++ [pid 310] <... exit_group resumed>) = ? [pid 309] rmdir("./0"./strace-static-x86_64: Process 322 attached [pid 307] +++ exited with 1 +++ [pid 304] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=1, si_utime=0, si_stime=1} --- [pid 304] restart_syscall(<... resuming interrupted restart_syscall ...> [pid 309] <... rmdir resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 315] <... clone resumed>) = 322 [pid 310] +++ exited with 1 +++ [pid 304] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal) [pid 315] ptrace(PTRACE_ATTACH, 322 [pid 309] mkdir("./1", 0777 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=1, si_utime=0, si_stime=0} --- [pid 315] <... ptrace resumed>) = -1 EPERM (Operation not permitted) [pid 304] restart_syscall(<... resuming interrupted restart_syscall ...> [pid 315] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 672267775 [pid 309] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 308] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 315] <... fallocate resumed>) = -1 ENOSPC (No space left on device) [pid 309] exit_group(1 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... exit_group resumed>) = ? [pid 308] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] exit_group(0) = ? [pid 309] +++ exited with 1 +++ [pid 308] <... openat resumed>) = 3 [pid 304] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal) [pid 308] fstat(3, [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=1, si_utime=0, si_stime=0} --- [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 304] restart_syscall(<... resuming interrupted restart_syscall ...> [pid 315] +++ exited with 0 +++ [pid 308] getdents64(3, 0x555555cd6620 /* 4 entries */, 32768) = 112 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./0/binderfs") = 0 [pid 308] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./0/file0", [pid 305] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 305] <... openat resumed>) = 3 [pid 308] unlink("./0/file0" [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... unlink resumed>) = 0 [pid 308] getdents64(3, [pid 305] getdents64(3, [pid 308] <... getdents64 resumed>0x555555cd6620 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x555555cd6620 /* 4 entries */, 32768) = 112 [pid 308] close(3 [pid 305] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] <... close resumed>) = 0 [pid 305] lstat("./0/binderfs", [pid 308] rmdir("./0" [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 305] unlink("./0/binderfs" [pid 308] mkdir("./1", 0777 [pid 305] <... unlink resumed>) = 0 [pid 308] <... mkdir resumed>) = -1 ENOSPC (No space left on device) [pid 305] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] exit_group(1 [pid 305] lstat("./0/file0", [pid 308] <... exit_group resumed>) = ? [pid 305] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 305] unlink("./0/file0" [pid 308] +++ exited with 1 +++ [pid 304] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal) [pid 305] <... unlink resumed>) = 0 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=1, si_utime=0, si_stime=0} --- [pid 305] getdents64(3, [pid 304] restart_syscall(<... resuming interrupted restart_syscall ...> [pid 305] <... getdents64 resumed>0x555555cd6620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./0") = 0 [pid 305] mkdir("./1", 0777) = -1 ENOSPC (No space left on device) [pid 305] exit_group(1) = ? [pid 305] +++ exited with 1 +++ [pid 304] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=1, si_utime=0, si_stime=0} --- [ 21.183367][ T22] audit: type=1400 audit(1674615331.760:73): avc: denied { execmem } for pid=304 comm="syz-executor410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 304] restart_syscall(<... resuming interrupted restart_syscall ...> [pid 314] exit(0) = ? [pid 314] +++ exited with 0 +++ [pid 318] exit(0) = ? [pid 318] +++ exited with 0 +++ [pid 319] exit(0) = ? [pid 319] +++ exited with 0 +++ [pid 320] exit(0) = ? [pid 320] +++ exited with 0 +++ [pid 322] exit(0 [pid 321] exit(0 [pid 322] <... exit resumed>) = ? [pid 321] <... exit resumed>) = ? [pid 322] +++ exited with 0 +++ [pid 321] +++ exited with 0 +++ [ 66.598739][ T12] cfg80211: failed to load regulatory.db