./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1912113819 <...> Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. execve("./syz-executor1912113819", ["./syz-executor1912113819"], 0x7ffd7022b800 /* 10 vars */) = 0 brk(NULL) = 0x5555887c7000 brk(0x5555887c7d00) = 0x5555887c7d00 arch_prctl(ARCH_SET_FS, 0x5555887c7380) = 0 set_tid_address(0x5555887c7650) = 5844 set_robust_list(0x5555887c7660, 24) = 0 rseq(0x5555887c7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1912113819", 4096) = 28 getrandom("\xa1\xda\x5d\x20\x73\x48\x53\xdb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555887c7d00 brk(0x5555887e8d00) = 0x5555887e8d00 brk(0x5555887e9000) = 0x5555887e9000 mprotect(0x7f739db5e000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555887c7650) = 5845 ./strace-static-x86_64: Process 5845 attached [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] set_robust_list(0x5555887c7660, 24) = 0 [pid 5845] mkdir("./syzkaller.DvTmFr", 0700./strace-static-x86_64: Process 5846 attached [pid 5844] <... clone resumed>, child_tidptr=0x5555887c7650) = 5846 [pid 5846] set_robust_list(0x5555887c7660, 24) = 0 [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5847 attached [pid 5846] mkdir("./syzkaller.2jXKHy", 0700 [pid 5847] set_robust_list(0x5555887c7660, 24 [pid 5845] chmod("./syzkaller.DvTmFr", 0777) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x5555887c7650) = 5847 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5846] <... mkdir resumed>) = 0 [pid 5847] mkdir("./syzkaller.iDUz9q", 0700 [pid 5845] chdir("./syzkaller.DvTmFr" [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] chmod("./syzkaller.2jXKHy", 0777 [pid 5845] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5848 attached [pid 5847] <... mkdir resumed>) = 0 [pid 5846] <... chmod resumed>) = 0 [pid 5845] unshare(CLONE_NEWPID [pid 5844] <... clone resumed>, child_tidptr=0x5555887c7650) = 5848 [pid 5848] set_robust_list(0x5555887c7660, 24 [pid 5847] chmod("./syzkaller.iDUz9q", 0777 [pid 5846] chdir("./syzkaller.2jXKHy" [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... chmod resumed>) = 0 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5846] <... chdir resumed>) = 0 [pid 5847] chdir("./syzkaller.iDUz9q" [pid 5848] mkdir("./syzkaller.ICUliU", 0700 [pid 5847] <... chdir resumed>) = 0 [pid 5846] unshare(CLONE_NEWPID [pid 5847] unshare(CLONE_NEWPID./strace-static-x86_64: Process 5849 attached [pid 5845] <... unshare resumed>) = 0 [pid 5846] <... unshare resumed>) = 0 [pid 5849] set_robust_list(0x5555887c7660, 24 [pid 5847] <... unshare resumed>) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x5555887c7650) = 5849 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] mkdir("./syzkaller.YF0mgz", 0700./strace-static-x86_64: Process 5850 attached ./strace-static-x86_64: Process 5851 attached [pid 5850] set_robust_list(0x5555887c7660, 24 [pid 5851] set_robust_list(0x5555887c7660, 24) = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] chmod("./syzkaller.ICUliU", 0777 [pid 5846] <... clone resumed>, child_tidptr=0x5555887c7650) = 5850 [pid 5848] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5852 attached [pid 5851] <... prctl resumed>) = 0 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5845] <... clone resumed>, child_tidptr=0x5555887c7650) = 5851 [pid 5851] getppid( [pid 5849] chmod("./syzkaller.YF0mgz", 0777 [pid 5848] chdir("./syzkaller.ICUliU" [pid 5847] <... clone resumed>, child_tidptr=0x5555887c7650) = 5852 [pid 5852] set_robust_list(0x5555887c7660, 24 [pid 5851] <... getppid resumed>) = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... chmod resumed>) = 0 [pid 5848] <... chdir resumed>) = 0 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5851] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5850] <... prctl resumed>) = 0 [pid 5850] getppid( [pid 5848] unshare(CLONE_NEWPID [pid 5850] <... getppid resumed>) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5849] chdir("./syzkaller.YF0mgz" [pid 5848] <... unshare resumed>) = 0 [pid 5851] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5849] <... chdir resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... prctl resumed>) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5849] unshare(CLONE_NEWPID [pid 5852] getppid( [pid 5851] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5850] <... prlimit64 resumed>NULL) = 0 ./strace-static-x86_64: Process 5853 attached [pid 5852] <... getppid resumed>) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5849] <... unshare resumed>) = 0 [pid 5850] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5852] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5851] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... clone resumed>, child_tidptr=0x5555887c7650) = 5853 [pid 5853] set_robust_list(0x5555887c7660, 24 [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5852] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5851] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, ./strace-static-x86_64: Process 5854 attached [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5853] <... prctl resumed>) = 0 [pid 5853] getppid( [pid 5852] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5851] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x5555887c7650) = 5854 [pid 5854] set_robust_list(0x5555887c7660, 24 [pid 5853] <... getppid resumed>) = 0 [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5854] <... set_robust_list resumed>) = 0 [pid 5853] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5852] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5851] unshare(CLONE_NEWNS [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... unshare resumed>) = 0 [pid 5850] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5854] <... prctl resumed>) = 0 [pid 5853] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5852] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5854] getppid( [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5851] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5850] unshare(CLONE_NEWNS [pid 5854] <... getppid resumed>) = 0 [pid 5853] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... mount resumed>) = 0 [pid 5850] <... unshare resumed>) = 0 [pid 5854] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5851] unshare(CLONE_NEWIPC [pid 5850] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5854] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5851] <... unshare resumed>) = 0 [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5853] unshare(CLONE_NEWNS [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] <... unshare resumed>) = 0 [pid 5852] unshare(CLONE_NEWNS [pid 5850] <... mount resumed>) = 0 [pid 5854] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5851] unshare(CLONE_NEWCGROUP [pid 5853] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5852] <... unshare resumed>) = 0 [pid 5851] <... unshare resumed>) = 0 [pid 5850] unshare(CLONE_NEWIPC [pid 5854] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5853] <... mount resumed>) = 0 [pid 5851] unshare(CLONE_NEWUTS [pid 5854] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5853] unshare(CLONE_NEWIPC [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] <... unshare resumed>) = 0 [pid 5851] <... unshare resumed>) = 0 [pid 5852] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5850] <... unshare resumed>) = 0 [pid 5854] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5851] unshare(CLONE_SYSVSEM [pid 5853] unshare(CLONE_NEWCGROUP [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5852] <... mount resumed>) = 0 [pid 5851] <... unshare resumed>) = 0 [pid 5854] unshare(CLONE_NEWNS [pid 5852] unshare(CLONE_NEWIPC [pid 5850] unshare(CLONE_NEWCGROUP [pid 5853] <... unshare resumed>) = 0 [pid 5853] unshare(CLONE_NEWUTS [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5853] <... unshare resumed>) = 0 [pid 5853] unshare(CLONE_SYSVSEM) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5854] <... unshare resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5852] <... unshare resumed>) = 0 [pid 5854] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5851] <... openat resumed>) = 3 [pid 5850] <... unshare resumed>) = 0 [pid 5854] <... mount resumed>) = 0 [pid 5853] write(3, "16777216", 8 [pid 5852] unshare(CLONE_NEWCGROUP [pid 5851] write(3, "16777216", 8 [pid 5850] unshare(CLONE_NEWUTS [pid 5854] unshare(CLONE_NEWIPC [pid 5853] <... write resumed>) = 8 [pid 5852] <... unshare resumed>) = 0 [pid 5851] <... write resumed>) = 8 [pid 5853] close(3 [pid 5851] close(3 [pid 5850] <... unshare resumed>) = 0 [pid 5854] <... unshare resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5852] unshare(CLONE_NEWUTS [pid 5851] <... close resumed>) = 0 [pid 5854] unshare(CLONE_NEWCGROUP [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5852] <... unshare resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5850] unshare(CLONE_SYSVSEM [pid 5851] <... openat resumed>) = 3 [pid 5852] unshare(CLONE_SYSVSEM) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "536870912", 9 [pid 5854] <... unshare resumed>) = 0 [pid 5851] <... write resumed>) = 9 [pid 5853] <... openat resumed>) = 3 [pid 5854] unshare(CLONE_NEWUTS [pid 5850] <... unshare resumed>) = 0 [pid 5853] write(3, "536870912", 9 [pid 5854] <... unshare resumed>) = 0 [pid 5852] write(3, "16777216", 8 [pid 5851] close(3 [pid 5854] unshare(CLONE_SYSVSEM [pid 5853] <... write resumed>) = 9 [pid 5852] <... write resumed>) = 8 [pid 5851] <... close resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5854] <... unshare resumed>) = 0 [pid 5853] close(3 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5853] <... close resumed>) = 0 [pid 5852] close(3 [pid 5851] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5852] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5853] <... openat resumed>) = 3 [pid 5853] write(3, "1024", 4 [pid 5852] <... openat resumed>) = 3 [pid 5851] write(3, "1024", 4 [pid 5850] write(3, "16777216", 8 [pid 5852] write(3, "536870912", 9 [pid 5851] <... write resumed>) = 4 [pid 5852] <... write resumed>) = 9 [pid 5851] close(3 [pid 5852] close(3 [pid 5851] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... write resumed>) = 4 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5850] <... write resumed>) = 8 [pid 5854] write(3, "16777216", 8 [pid 5853] close(3 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 3 [pid 5850] close(3 [pid 5854] <... write resumed>) = 8 [pid 5853] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5854] close(3) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5850] <... close resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5853] <... openat resumed>) = 3 [pid 5852] write(3, "1024", 4 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5853] write(3, "8192", 4 [pid 5852] <... write resumed>) = 4 [pid 5851] write(3, "8192", 4 [pid 5850] <... openat resumed>) = 3 [pid 5853] <... write resumed>) = 4 [pid 5852] close(3 [pid 5851] <... write resumed>) = 4 [pid 5852] <... close resumed>) = 0 [pid 5851] close(3 [pid 5853] close(3 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5851] <... close resumed>) = 0 [pid 5850] write(3, "536870912", 9 [pid 5853] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5850] <... write resumed>) = 9 [pid 5851] <... openat resumed>) = 3 [pid 5853] <... openat resumed>) = 3 [pid 5854] <... openat resumed>) = 3 [pid 5853] write(3, "1024", 4 [pid 5852] write(3, "8192", 4 [pid 5851] write(3, "1024", 4 [pid 5850] close(3 [pid 5854] write(3, "536870912", 9 [pid 5853] <... write resumed>) = 4 [pid 5852] <... write resumed>) = 4 [pid 5851] <... write resumed>) = 4 [pid 5850] <... close resumed>) = 0 [pid 5854] <... write resumed>) = 9 [pid 5853] close(3 [pid 5852] close(3 [pid 5851] close(3 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5854] close(3 [pid 5853] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5852] <... openat resumed>) = 3 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5850] write(3, "1024", 4 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... openat resumed>) = 3 [pid 5851] <... openat resumed>) = 3 [pid 5854] write(3, "1024", 4 [pid 5853] write(3, "1024", 4 [pid 5852] write(3, "1024", 4 [pid 5851] write(3, "1024", 4 [pid 5850] <... write resumed>) = 4 [pid 5854] <... write resumed>) = 4 [pid 5853] <... write resumed>) = 4 [pid 5852] <... write resumed>) = 4 [pid 5851] <... write resumed>) = 4 [pid 5850] close(3 [pid 5854] close(3 [pid 5852] close(3 [pid 5850] <... close resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] close(3 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5853] close(3 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5851] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5854] write(3, "8192", 4 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 3 [pid 5850] write(3, "8192", 4 [pid 5854] <... write resumed>) = 4 [pid 5853] <... openat resumed>) = 3 [pid 5852] write(3, "1024", 4 [pid 5850] <... write resumed>) = 4 [pid 5854] close(3 [pid 5850] close(3 [pid 5854] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5853] write(3, "1024 1048576 500 1024", 21 [pid 5851] write(3, "1024 1048576 500 1024", 21 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5854] <... openat resumed>) = 3 [pid 5853] <... write resumed>) = 21 [pid 5851] <... write resumed>) = 21 [pid 5850] <... openat resumed>) = 3 [pid 5853] close(3) = 0 [pid 5851] close(3 [pid 5854] write(3, "1024", 4 [pid 5853] getpid( [pid 5851] <... close resumed>) = 0 [pid 5850] write(3, "1024", 4 [pid 5854] <... write resumed>) = 4 [pid 5853] <... getpid resumed>) = 1 [pid 5854] close(3 [pid 5853] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5851] getpid( [pid 5850] <... write resumed>) = 4 [pid 5854] <... close resumed>) = 0 [pid 5853] <... capget resumed>{effective=1<) = 1 [pid 5850] close(3 [pid 5852] <... write resumed>) = 4 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5853] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5852] close(3 [pid 5851] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5850] <... close resumed>) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... capset resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... capget resumed>{effective=1< [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5851] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5854] write(3, "1024", 4 [pid 5853] unshare(CLONE_NEWNET [pid 5852] <... openat resumed>) = 3 [pid 5851] <... capset resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5854] <... write resumed>) = 4 [pid 5852] write(3, "1024 1048576 500 1024", 21 [pid 5854] close(3 [pid 5852] <... write resumed>) = 21 [pid 5851] unshare(CLONE_NEWNET [pid 5850] write(3, "1024", 4 [pid 5854] <... close resumed>) = 0 [pid 5852] close(3) = 0 [pid 5852] getpid() = 1 [pid 5852] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5850] <... write resumed>) = 4 [pid 5854] <... openat resumed>) = 3 [pid 5850] close(3 [pid 5854] write(3, "1024 1048576 500 1024", 21 [pid 5850] <... close resumed>) = 0 [pid 5854] <... write resumed>) = 21 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5850] close(3) = 0 [pid 5850] getpid() = 1 [pid 5850] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5854] close(3) = 0 [pid 5854] getpid() = 1 [pid 5854] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5853] <... unshare resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "0 65535", 7) = 7 [pid 5853] close(3) = 0 [pid 5853] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 5853] dup2(3, 200) = 200 [pid 5853] close(3) = 0 [pid 5853] ioctl(200, TUNSETIFF, 0x7fff7cd53e20) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "0", 1) = 1 [pid 5853] close(3) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "0", 1) = 1 [pid 5853] close(3) = 0 [pid 5853] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5853] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5853] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5853] close(4) = 0 [pid 5853] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5850] <... unshare resumed>) = 0 [pid 5853] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5853] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5852] <... unshare resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5852] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5850] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 3 [pid 5850] write(3, "0 65535", 7 [pid 5853] <... socket resumed>) = 4 [pid 5852] write(3, "0 65535", 7 [pid 5850] <... write resumed>) = 7 [pid 5853] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5852] <... write resumed>) = 7 [pid 5850] close(3 [pid 5853] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5852] close(3 [pid 5850] <... close resumed>) = 0 [pid 5853] close(4 [pid 5852] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5850] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5853] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5853] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5852] dup2(3, 200 [pid 5850] dup2(3, 200 [pid 5852] <... dup2 resumed>) = 200 [pid 5850] <... dup2 resumed>) = 200 [pid 5852] close(3 [pid 5850] close(3 [pid 5852] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5852] ioctl(200, TUNSETIFF, 0x7fff7cd53e20 [pid 5850] ioctl(200, TUNSETIFF, 0x7fff7cd53e20 [pid 5852] <... ioctl resumed>) = 0 [pid 5853] <... sendto resumed>) = 64 [pid 5851] <... unshare resumed>) = 0 [pid 5853] recvfrom(3, [pid 5852] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5851] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5853] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] <... openat resumed>) = 3 [pid 5853] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5852] <... openat resumed>) = 3 [pid 5853] <... socket resumed>) = 4 [pid 5852] write(3, "0", 1 [pid 5853] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5852] <... write resumed>) = 1 [pid 5853] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5852] close(3 [pid 5853] close(4 [pid 5852] <... close resumed>) = 0 [pid 5851] write(3, "0 65535", 7 [pid 5853] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5851] <... write resumed>) = 7 [pid 5853] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5852] <... openat resumed>) = 3 [pid 5852] write(3, "0", 1 [pid 5851] close(3 [pid 5852] <... write resumed>) = 1 [pid 5851] <... close resumed>) = 0 [pid 5852] close(3 [pid 5851] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5852] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] dup2(3, 200 [pid 5852] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5851] <... dup2 resumed>) = 200 [pid 5852] <... socket resumed>) = 3 [pid 5851] close(3) = 0 [pid 5851] ioctl(200, TUNSETIFF, 0x7fff7cd53e20 [pid 5852] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5853] <... sendto resumed>) = 48 [pid 5850] <... ioctl resumed>) = 0 [pid 5852] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5853] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5852] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5850] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5853] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5852] close(4 [pid 5853] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5852] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5853] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5852] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5850] write(3, "0", 1 [pid 5854] <... unshare resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5850] <... write resumed>) = 1 [pid 5853] close(4 [pid 5850] close(3 [pid 5853] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5853] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5852] <... sendto resumed>) = 40 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... sendto resumed>) = 60 [pid 5851] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5850] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5854] write(3, "0 65535", 7 [pid 5853] recvfrom(3, [pid 5852] recvfrom(3, [pid 5851] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5854] <... write resumed>) = 7 [pid 5853] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5852] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5850] write(3, "0", 1 [pid 5854] close(3 [pid 5853] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5852] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5851] write(3, "0", 1 [pid 5850] <... write resumed>) = 1 [pid 5854] <... close resumed>) = 0 [pid 5853] <... socket resumed>) = 4 [pid 5852] <... socket resumed>) = 4 [pid 5851] <... write resumed>) = 1 [pid 5850] close(3 [pid 5854] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5853] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5851] close(3 [pid 5850] <... close resumed>) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5852] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5851] <... close resumed>) = 0 [pid 5850] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5854] dup2(3, 200 [pid 5853] close(4 [pid 5852] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5850] <... socket resumed>) = 3 [pid 5854] <... dup2 resumed>) = 200 [pid 5853] <... close resumed>) = 0 [pid 5852] close(4 [pid 5851] <... openat resumed>) = 3 [pid 5850] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] close(3 [pid 5853] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5852] <... close resumed>) = 0 [pid 5851] write(3, "0", 1 [pid 5850] <... socket resumed>) = 4 [pid 5854] <... close resumed>) = 0 [pid 5850] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5851] <... write resumed>) = 1 [pid 5850] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5854] ioctl(200, TUNSETIFF, 0x7fff7cd53e20 [pid 5851] close(3) = 0 [pid 5850] close(4 [pid 5852] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5851] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5850] <... close resumed>) = 0 [pid 5851] <... socket resumed>) = 3 [pid 5850] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5853] <... sendto resumed>) = 44 [pid 5851] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5853] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] <... socket resumed>) = 4 [pid 5854] <... ioctl resumed>) = 0 [pid 5853] close(3 [pid 5852] <... sendto resumed>) = 64 [pid 5851] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5850] <... sendto resumed>) = 40 [pid 5854] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5853] <... close resumed>) = 0 [pid 5852] recvfrom(3, [pid 5851] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5850] recvfrom(3, [pid 5854] <... openat resumed>) = 3 [pid 5853] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5852] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] close(4 [pid 5850] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5854] write(3, "0", 1 [pid 5853] <... openat resumed>) = 3 [pid 5852] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5851] <... close resumed>) = 0 [pid 5850] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] <... write resumed>) = 1 [pid 5853] write(3, "100000", 6 [pid 5852] <... socket resumed>) = 4 [pid 5851] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5850] <... socket resumed>) = 4 [pid 5854] close(3 [pid 5853] <... write resumed>) = 6 [pid 5852] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5851] <... sendto resumed>) = 40 [pid 5850] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5854] <... close resumed>) = 0 [pid 5853] close(3 [pid 5852] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5850] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5853] <... close resumed>) = 0 [pid 5852] close(4 [pid 5850] close(4 [pid 5854] <... openat resumed>) = 3 [pid 5853] mkdir("./syz-tmp", 0777 [pid 5852] <... close resumed>) = 0 [pid 5851] recvfrom(3, [pid 5850] <... close resumed>) = 0 [pid 5854] write(3, "0", 1 [pid 5852] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5851] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5850] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5854] <... write resumed>) = 1 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... sendto resumed>) = 48 [pid 5851] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5850] <... sendto resumed>) = 64 [pid 5854] close(3 [pid 5850] recvfrom(3, [pid 5854] <... close resumed>) = 0 [pid 5853] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5850] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5854] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5852] recvfrom(3, [pid 5851] <... socket resumed>) = 4 [pid 5850] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] <... socket resumed>) = 3 [pid 5852] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5850] <... socket resumed>) = 4 [pid 5854] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5853] <... mount resumed>) = 0 [pid 5852] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5851] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5850] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5854] <... socket resumed>) = 4 [pid 5853] mkdir("./syz-tmp/newroot", 0777 [pid 5852] <... socket resumed>) = 4 [pid 5851] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5850] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5854] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5852] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5851] close(4 [pid 5854] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] close(4 [pid 5854] close(4 [pid 5853] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5852] close(4 [pid 5851] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5850] <... close resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... sendto resumed>) = 64 [pid 5854] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5852] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5850] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5854] <... sendto resumed>) = 40 [pid 5853] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... sendto resumed>) = 60 [pid 5851] recvfrom(3, [pid 5850] <... sendto resumed>) = 48 [pid 5851] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5854] recvfrom(3, [pid 5852] recvfrom(3, [pid 5851] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5850] recvfrom(3, [pid 5854] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5852] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] <... socket resumed>) = 4 [pid 5850] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5854] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5853] <... mount resumed>) = 0 [pid 5852] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5851] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5850] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] <... socket resumed>) = 4 [pid 5853] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5852] <... socket resumed>) = 4 [pid 5851] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5850] <... socket resumed>) = 4 [pid 5854] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5852] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5851] close(4 [pid 5850] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5854] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5854] close(4 [pid 5853] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5852] close(4 [pid 5851] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5850] close(4 [pid 5854] <... close resumed>) = 0 [pid 5853] <... mount resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... sendto resumed>) = 48 [pid 5850] <... close resumed>) = 0 [pid 5854] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5852] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5851] recvfrom(3, [pid 5850] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5854] <... sendto resumed>) = 64 [pid 5853] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5852] <... sendto resumed>) = 44 [pid 5851] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5850] <... sendto resumed>) = 60 [pid 5854] recvfrom(3, [pid 5853] <... mkdir resumed>) = 0 [pid 5851] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] <... socket resumed>) = 4 [pid 5854] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5853] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] recvfrom(3, [pid 5851] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5850] recvfrom(3, [pid 5854] <... socket resumed>) = 4 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5851] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5850] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5854] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5853] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] close(4 [pid 5854] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] close(3 [pid 5851] <... close resumed>) = 0 [pid 5850] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] close(4 [pid 5853] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5851] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5854] <... close resumed>) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... sendto resumed>) = 60 [pid 5850] <... socket resumed>) = 4 [pid 5854] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5851] recvfrom(3, [pid 5854] <... sendto resumed>) = 48 [pid 5853] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5851] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5850] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5854] recvfrom(3, [pid 5852] <... openat resumed>) = 3 [pid 5851] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5854] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5851] <... socket resumed>) = 4 [pid 5850] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5854] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5853] <... mount resumed>) = 0 [pid 5852] write(3, "100000", 6 [pid 5851] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5850] close(4 [pid 5854] <... socket resumed>) = 4 [pid 5853] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... write resumed>) = 6 [pid 5851] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5854] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5852] close(3 [pid 5851] close(4 [pid 5850] <... close resumed>) = 0 [pid 5854] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5854] close(4) = 0 [pid 5851] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5854] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5853] <... mount resumed>) = 0 [pid 5852] mkdir("./syz-tmp", 0777 [pid 5850] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5854] <... sendto resumed>) = 60 [pid 5851] <... sendto resumed>) = 44 [pid 5854] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5854] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5854] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5854] close(4) = 0 [pid 5854] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5853] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5851] recvfrom(3, [pid 5850] <... sendto resumed>) = 44 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5851] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5853] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = 0 [pid 5851] close(3 [pid 5854] <... sendto resumed>) = 44 [pid 5850] recvfrom(3, [pid 5854] recvfrom(3, [pid 5852] mkdir("./syz-tmp/newroot", 0777