./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2898414881 <...> Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. execve("./syz-executor2898414881", ["./syz-executor2898414881"], 0x7ffebb06bb20 /* 10 vars */) = 0 brk(NULL) = 0x55556cebf000 brk(0x55556cebfd40) = 0x55556cebfd40 arch_prctl(ARCH_SET_FS, 0x55556cebf3c0) = 0 set_tid_address(0x55556cebf690) = 5078 set_robust_list(0x55556cebf6a0, 24) = 0 rseq(0x55556cebfce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2898414881", 4096) = 28 getrandom("\xf8\x4a\x0a\x99\x2d\x6f\x9f\x0e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556cebfd40 brk(0x55556cee0d40) = 0x55556cee0d40 brk(0x55556cee1000) = 0x55556cee1000 mprotect(0x7f60df276000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x55556cebf6a0, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556cebf690) = 5079 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] mkdir("./syzkaller.tkfCm1", 0700./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x55556cebf6a0, 24 [pid 5078] <... clone resumed>, child_tidptr=0x55556cebf690) = 5080 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... set_robust_list resumed>) = 0 [pid 5079] chmod("./syzkaller.tkfCm1", 0777) = 0 ./strace-static-x86_64: Process 5081 attached [pid 5080] mkdir("./syzkaller.v8FtDj", 0700 [pid 5081] set_robust_list(0x55556cebf6a0, 24 [pid 5079] chdir("./syzkaller.tkfCm1" [pid 5081] <... set_robust_list resumed>) = 0 [pid 5079] <... chdir resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x55556cebf690) = 5081 [pid 5081] mkdir("./syzkaller.sNw1Rh", 0700 [pid 5079] unshare(CLONE_NEWPID [pid 5080] <... mkdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] chmod("./syzkaller.v8FtDj", 0777 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... chmod resumed>) = 0 [pid 5079] <... unshare resumed>) = 0 [pid 5081] chmod("./syzkaller.sNw1Rh", 0777./strace-static-x86_64: Process 5082 attached [pid 5078] <... clone resumed>, child_tidptr=0x55556cebf690) = 5082 [pid 5081] <... chmod resumed>) = 0 [pid 5080] chdir("./syzkaller.v8FtDj" [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] set_robust_list(0x55556cebf6a0, 24 [pid 5081] chdir("./syzkaller.sNw1Rh" [pid 5080] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5083 attached [pid 5082] <... set_robust_list resumed>) = 0 [pid 5081] <... chdir resumed>) = 0 [pid 5080] unshare(CLONE_NEWPID./strace-static-x86_64: Process 5084 attached [pid 5078] <... clone resumed>, child_tidptr=0x55556cebf690) = 5083 [pid 5083] set_robust_list(0x55556cebf6a0, 24 [pid 5084] set_robust_list(0x55556cebf6a0, 24 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5081] unshare(CLONE_NEWPID [pid 5080] <... unshare resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x55556cebf690) = 5084 [pid 5084] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5081] <... unshare resumed>) = 0 [pid 5083] mkdir("./syzkaller.vuQclR", 0700 [pid 5082] mkdir("./syzkaller.yYoDde", 0700 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5083] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x55556cebf6a0, 24 [pid 5084] <... socket resumed>) = 3 [pid 5083] chmod("./syzkaller.vuQclR", 0777 [pid 5082] <... mkdir resumed>) = 0 [pid 5082] chmod("./syzkaller.yYoDde", 0777./strace-static-x86_64: Process 5086 attached [pid 5085] <... set_robust_list resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5083] <... chmod resumed>) = 0 [pid 5082] <... chmod resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x55556cebf690) = 5085 [pid 5086] set_robust_list(0x55556cebf6a0, 24 [pid 5085] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5083] chdir("./syzkaller.vuQclR" [pid 5082] chdir("./syzkaller.yYoDde" [pid 5080] <... clone resumed>, child_tidptr=0x55556cebf690) = 5086 [pid 5084] <... openat resumed>) = 4 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] dup2(4, 202 [pid 5083] <... chdir resumed>) = 0 [pid 5082] <... chdir resumed>) = 0 [pid 5085] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5086] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5084] <... dup2 resumed>) = 202 [pid 5083] unshare(CLONE_NEWPID [pid 5082] unshare(CLONE_NEWPID [pid 5086] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] <... socket resumed>) = 3 [pid 5083] <... unshare resumed>) = 0 [pid 5084] close(4 [pid 5082] <... unshare resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5084] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] write(202, "\xff\x00", 2 [pid 5086] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] <... socket resumed>) = 3 [pid 5086] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 ./strace-static-x86_64: Process 5087 attached [pid 5086] dup2(4, 202 [pid 5087] set_robust_list(0x55556cebf6a0, 24 [pid 5086] <... dup2 resumed>) = 202 [pid 5086] close(4 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5087] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5086] <... close resumed>) = 0 [pid 5086] write(202, "\xff\x00", 2 [pid 5085] <... openat resumed>) = 4 [pid 5083] <... clone resumed>, child_tidptr=0x55556cebf690) = 5087 [pid 5087] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] dup2(4, 202 [pid 5087] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5087] openat(AT_FDCWD, "/dev/vhci", O_RDWR./strace-static-x86_64: Process 5088 attached [pid 5086] <... write resumed>) = 2 [pid 5085] <... dup2 resumed>) = 202 [pid 5084] <... write resumed>) = 2 [pid 5082] <... clone resumed>, child_tidptr=0x55556cebf690) = 5088 [pid 5087] <... openat resumed>) = 4 [pid 5085] close(4 [pid 5088] set_robust_list(0x55556cebf6a0, 24) = 0 [pid 5085] <... close resumed>) = 0 [pid 5088] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5087] dup2(4, 202 [pid 5085] write(202, "\xff\x00", 2 [pid 5087] <... dup2 resumed>) = 202 [pid 5084] read(202, [pid 5087] close(4 [pid 5086] read(202, [pid 5084] <... read resumed>"\xff\x00\x00\x00", 4) = 4 [pid 5087] <... close resumed>) = 0 [pid 5086] <... read resumed>"\xff\x00\x01\x00", 4) = 4 [pid 5084] rt_sigaction(SIGRT_1, {sa_handler=0x7f60df217de0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f60df208f60}, [pid 5086] rt_sigaction(SIGRT_1, {sa_handler=0x7f60df217de0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f60df208f60}, [pid 5087] write(202, "\xff\x00", 2 [pid 5086] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5088] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5088] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5086] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... mmap resumed>) = 0x7f60de800000 [pid 5086] <... mmap resumed>) = 0x7f60de800000 [pid 5088] <... socket resumed>) = 3 [pid 5085] <... write resumed>) = 2 [pid 5088] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5085] read(202, [pid 5086] mprotect(0x7f60de801000, 8388608, PROT_READ|PROT_WRITE [pid 5084] mprotect(0x7f60de801000, 8388608, PROT_READ|PROT_WRITE [pid 5088] <... openat resumed>) = 4 [pid 5086] <... mprotect resumed>) = 0 [pid 5085] <... read resumed>"\xff\x00\x02\x00", 4) = 4 [pid 5084] <... mprotect resumed>) = 0 [pid 5088] dup2(4, 202 [pid 5086] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] rt_sigaction(SIGRT_1, {sa_handler=0x7f60df217de0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f60df208f60}, [pid 5084] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5088] <... dup2 resumed>) = 202 [pid 5086] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5088] close(4) = 0 [pid 5084] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5088] write(202, "\xff\x00", 2 [pid 5085] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f60df000990, parent_tid=0x7f60df000990, exit_signal=0, stack=0x7f60de800000, stack_size=0x800300, tls=0x7f60df0006c0} [pid 5084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f60df000990, parent_tid=0x7f60df000990, exit_signal=0, stack=0x7f60de800000, stack_size=0x800300, tls=0x7f60df0006c0}./strace-static-x86_64: Process 5098 attached ./strace-static-x86_64: Process 5096 attached [pid 5086] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5098] rseq(0x7f60df000fe0, 0x20, 0, 0x53053053 [pid 5096] rseq(0x7f60df000fe0, 0x20, 0, 0x53053053 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5098] <... rseq resumed>) = 0 [pid 5096] <... rseq resumed>) = 0 [pid 5088] <... write resumed>) = 2 [pid 5087] <... write resumed>) = 2 [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] rt_sigprocmask(SIG_SETMASK, [], [pid 5098] set_robust_list(0x7f60df0009a0, 24 [pid 5096] set_robust_list(0x7f60df0009a0, 24 [pid 5088] read(202, [pid 5087] read(202, [pid 5086] ioctl(3, HCIDEVUP [pid 5085] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5088] <... read resumed>"\xff\x00\x04\x00", 4) = 4 [pid 5084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... mmap resumed>) = 0x7f60de800000 [pid 5088] rt_sigaction(SIGRT_1, {sa_handler=0x7f60df217de0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f60df208f60}, [pid 5085] mprotect(0x7f60de801000, 8388608, PROT_READ|PROT_WRITE [pid 5088] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5087] <... read resumed>"\xff\x00\x03\x00", 4) = 4 [pid 5085] <... mprotect resumed>) = 0 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5087] rt_sigaction(SIGRT_1, {sa_handler=0x7f60df217de0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f60df208f60}, [pid 5085] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] ioctl(3, HCIDEVUP [pid 5096] read(202, [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5085] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], [pid 5096] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5088] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f60df000990, parent_tid=0x7f60df000990, exit_signal=0, stack=0x7f60de800000, stack_size=0x800300, tls=0x7f60df0006c0}./strace-static-x86_64: Process 5101 attached [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... mmap resumed>) = 0x7f60de800000 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] rseq(0x7f60df000fe0, 0x20, 0, 0x53053053 [pid 5098] read(202, [pid 5096] <... writev resumed>) = 255 [pid 5088] mprotect(0x7f60de801000, 8388608, PROT_READ|PROT_WRITE [pid 5101] <... rseq resumed>) = 0 [pid 5098] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5096] read(202, [pid 5088] <... mprotect resumed>) = 0 [pid 5087] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5101] set_robust_list(0x7f60df0009a0, 24 [pid 5098] <... writev resumed>) = 255 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5087] <... mmap resumed>) = 0x7f60de800000 [pid 5085] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] <... set_robust_list resumed>) = 0 [pid 5088] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f60df000990, parent_tid=0x7f60df000990, exit_signal=0, stack=0x7f60de800000, stack_size=0x800300, tls=0x7f60df0006c0} [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] read(202, [pid 5096] <... writev resumed>) = 255 [pid 5087] mprotect(0x7f60de801000, 8388608, PROT_READ|PROT_WRITE [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5103 attached [pid 5101] read(202, [pid 5096] read(202, [pid 5088] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5103] rseq(0x7f60df000fe0, 0x20, 0, 0x53053053 [pid 5101] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5103] <... rseq resumed>) = 0 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5103] set_robust_list(0x7f60df0009a0, 24 [pid 5101] <... writev resumed>) = 255 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] ioctl(3, HCIDEVUP [pid 5103] <... set_robust_list resumed>) = 0 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] read(202, [pid 5098] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5096] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5087] <... mprotect resumed>) = 0 [pid 5085] ioctl(3, HCIDEVUP [pid 5103] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5103] read(202, [pid 5096] <... writev resumed>) = 255 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f60df000990, parent_tid=0x7f60df000990, exit_signal=0, stack=0x7f60de800000, stack_size=0x800300, tls=0x7f60df0006c0}./strace-static-x86_64: Process 5105 attached [pid 5103] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5101] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] read(202, [pid 5105] rseq(0x7f60df000fe0, 0x20, 0, 0x53053053 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [ 61.194439][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.205034][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.213296][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.221832][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.223633][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.237390][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [pid 5087] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5105] <... rseq resumed>) = 0 [pid 5103] <... writev resumed>) = 255 [pid 5101] <... writev resumed>) = 255 [pid 5098] <... writev resumed>) = 255 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5105] set_robust_list(0x7f60df0009a0, 24 [pid 5103] read(202, [pid 5098] read(202, [pid 5087] rt_sigprocmask(SIG_SETMASK, [], [pid 5105] <... set_robust_list resumed>) = 0 [pid 5098] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] ioctl(3, HCIDEVUP [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5103] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5101] read(202, [pid 5098] <... writev resumed>) = 255 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5101] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5105] read(202, [pid 5103] <... writev resumed>) = 255 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] read(202, [pid 5096] <... writev resumed>) = 13 [pid 5105] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5096] read(202, [pid 5105] <... writev resumed>) = 255 [pid 5103] read(202, [pid 5101] <... writev resumed>) = 255 [pid 5098] <... writev resumed>) = 13 [pid 5096] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5105] read(202, [pid 5098] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5105] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 14 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [ 61.238454][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.244964][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.254806][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.261153][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.268837][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.273224][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.282675][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [pid 5103] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5101] read(202, [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5096] read(202, [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5101] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5105] read(202, [pid 5096] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5103] <... writev resumed>) = 255 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5105] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5103] read(202, [pid 5101] <... writev resumed>) = 13 [pid 5098] <... writev resumed>) = 14 [pid 5096] <... writev resumed>) = 255 [pid 5105] <... writev resumed>) = 255 [pid 5103] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5101] read(202, [pid 5098] read(202, [pid 5096] read(202, [pid 5105] read(202, [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5101] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5103] <... writev resumed>) = 13 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5103] read(202, [pid 5101] <... writev resumed>) = 14 [pid 5098] <... writev resumed>) = 255 [pid 5096] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5096] read(202, [pid 5105] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5105] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5103] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5101] read(202, [pid 5098] read(202, [pid 5096] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5101] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] <... writev resumed>) = 14 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... writev resumed>) = 255 [pid 5105] read(202, [pid 5101] <... writev resumed>) = 255 [pid 5098] <... writev resumed>) = 255 [pid 5096] read(202, [pid 5101] read(202, [ 61.294911][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.295468][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.309866][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.316496][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.332865][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [pid 5098] read(202, [pid 5105] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5103] <... writev resumed>) = 14 [pid 5101] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] <... writev resumed>) = 255 [pid 5103] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] read(202, [pid 5103] <... writev resumed>) = 255 [pid 5101] <... writev resumed>) = 255 [pid 5098] <... writev resumed>) = 255 [pid 5096] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5103] read(202, [pid 5105] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5103] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5101] read(202, [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] <... writev resumed>) = 255 [pid 5103] <... writev resumed>) = 255 [pid 5105] read(202, [pid 5103] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5098] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5103] read(202, [pid 5101] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5103] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] read(202, [pid 5105] <... writev resumed>) = 255 [pid 5101] <... writev resumed>) = 255 [pid 5098] <... writev resumed>) = 255 [pid 5096] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [ 61.334008][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.341518][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.348244][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.354333][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.365364][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.369315][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.375967][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.382631][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [pid 5105] read(202, [pid 5098] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] read(202, [pid 5098] <... writev resumed>) = 255 [pid 5096] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5098] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5096] <... writev resumed>) = 255 [pid 5084] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5096] read(202, [pid 5084] ioctl(3, HCISETSCAN [pid 5098] read(202, [pid 5096] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5105] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5101] read(202, [pid 5096] <... writev resumed>) = 7 [pid 5086] <... ioctl resumed>, 0x1) = -1 EALREADY (Operation already in progress) [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5086] ioctl(3, HCISETSCAN [pid 5105] <... writev resumed>) = 255 [pid 5105] read(202, [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] madvise(0x7f60de800000, 8372224, MADV_DONTNEED) = 0 [pid 5103] <... writev resumed>) = 255 [pid 5101] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5098] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5084] <... ioctl resumed>, 0x7ffd60867c00) = 0 [pid 5098] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5096] exit(0 [pid 5098] <... writev resumed>) = 7 [pid 5096] <... exit resumed>) = ? [pid 5086] <... ioctl resumed>, 0x7ffd60867c00) = 0 [pid 5084] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5098] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5096] +++ exited with 0 +++ [pid 5086] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5086] <... writev resumed>) = 13 [pid 5084] <... writev resumed>) = 13 [pid 5098] madvise(0x7f60de800000, 8372224, MADV_DONTNEED [pid 5086] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5084] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5103] read(202, [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] <... madvise resumed>) = 0 [pid 5086] <... writev resumed>) = 14 [pid 5105] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5103] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5101] <... writev resumed>) = 255 [pid 5086] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5084] <... writev resumed>) = 14 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5101] read(202, [pid 5086] <... writev resumed>) = 14 [pid 5103] <... writev resumed>) = 255 [pid 5086] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5103] read(202, [pid 5086] <... writev resumed>) = 22 [pid 5086] futex(0x7f60df000990, FUTEX_WAIT_BITSET|FUTEX_CLOCK_REALTIME, 2, NULL, FUTEX_BITSET_MATCH_ANY [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5103] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5084] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5105] <... writev resumed>) = 255 [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5084] <... writev resumed>) = 14 [pid 5105] read(202, [pid 5103] read(202, [pid 5101] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5098] exit(0 [pid 5088] <... ioctl resumed>, 0x4) = -1 EALREADY (Operation already in progress) [pid 5105] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5098] <... exit resumed>) = ? [pid 5088] ioctl(3, HCISETSCAN [pid 5084] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5103] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5101] <... writev resumed>) = 255 [pid 5098] +++ exited with 0 +++ [pid 5086] <... futex resumed>) = 0 [pid 5084] <... writev resumed>) = 22 [pid 5105] read(202, [pid 5103] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5101] read(202, [pid 5087] <... ioctl resumed>, 0x3) = -1 EALREADY (Operation already in progress) [pid 5086] close(3 [pid 5084] close(3 [pid 5103] <... writev resumed>) = 7 [pid 5101] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5087] ioctl(3, HCISETSCAN [pid 5086] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5103] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... ioctl resumed>, 0x7ffd60867c00) = 0 [pid 5105] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5103] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] <... writev resumed>) = 255 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... ioctl resumed>, 0x2) = -1 EALREADY (Operation already in progress) [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5105] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5103] madvise(0x7f60de800000, 8372224, MADV_DONTNEED [pid 5101] read(202, [pid 5088] <... writev resumed>) = 13 [pid 5086] <... prctl resumed>) = 0 [pid 5085] ioctl(3, HCISETSCAN [pid 5084] <... prctl resumed>) = 0 [pid 5105] <... writev resumed>) = 7 [pid 5103] <... madvise resumed>) = 0 [pid 5101] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5087] <... ioctl resumed>, 0x7ffd60867c00) = 0 [pid 5086] setsid( [pid 5103] exit(0 [pid 5101] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5088] <... writev resumed>) = 14 [pid 5086] <... setsid resumed>) = 1 [pid 5105] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5103] <... exit resumed>) = ? [pid 5101] <... writev resumed>) = 7 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5086] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5084] setsid( [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5103] +++ exited with 0 +++ [pid 5101] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5088] <... writev resumed>) = 14 [pid 5087] <... writev resumed>) = 13 [pid 5085] <... ioctl resumed>, 0x7ffd60867c00) = 0 [pid 5084] <... setsid resumed>) = 1 [pid 5105] madvise(0x7f60de800000, 8372224, MADV_DONTNEED [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5086] <... openat resumed>) = 3 [pid 5085] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5084] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5105] <... madvise resumed>) = 0 [pid 5101] madvise(0x7f60de800000, 8372224, MADV_DONTNEED [pid 5088] <... writev resumed>) = 22 [pid 5087] <... writev resumed>) = 14 [pid 5084] <... openat resumed>) = 3 [pid 5101] <... madvise resumed>) = 0 [pid 5088] close(3 [pid 5105] exit(0 [pid 5101] exit(0 [pid 5086] dup2(3, 201 [pid 5085] <... writev resumed>) = 13 [pid 5105] <... exit resumed>) = ? [pid 5088] <... close resumed>) = 0 [pid 5086] <... dup2 resumed>) = 201 [pid 5085] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5101] <... exit resumed>) = ? [pid 5105] +++ exited with 0 +++ [pid 5101] +++ exited with 0 +++ [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5086] close(3 [pid 5085] <... writev resumed>) = 14 [pid 5084] dup2(3, 201) = 201 [pid 5084] close(3) = 0 [pid 5084] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5088] <... prctl resumed>) = 0 [pid 5087] <... writev resumed>) = 14 [pid 5086] <... close resumed>) = 0 [pid 5085] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5088] setsid( [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5086] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5088] <... setsid resumed>) = 1 [pid 5087] <... writev resumed>) = 22 [pid 5086] <... prlimit64 resumed>NULL) = 0 [pid 5085] <... writev resumed>) = 14 [pid 5084] <... prlimit64 resumed>NULL) = 0 [pid 5086] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5087] close(3 [pid 5086] <... prlimit64 resumed>NULL) = 0 [pid 5085] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5088] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5084] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5087] <... close resumed>) = 0 [pid 5086] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5085] <... writev resumed>) = 22 [pid 5085] close(3 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... prlimit64 resumed>NULL) = 0 [pid 5085] <... close resumed>) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5087] <... prctl resumed>) = 0 [pid 5086] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... prlimit64 resumed>NULL) = 0 [pid 5088] dup2(3, 201 [pid 5087] setsid( [pid 5086] <... prlimit64 resumed>NULL) = 0 [pid 5085] <... prctl resumed>) = 0 [pid 5088] <... dup2 resumed>) = 201 [pid 5087] <... setsid resumed>) = 1 [pid 5086] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5085] setsid( [ 61.388718][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.405547][ T4479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.405698][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.423233][ T4479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [pid 5084] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5088] close(3 [pid 5087] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5086] <... prlimit64 resumed>NULL) = 0 [pid 5085] <... setsid resumed>) = 1 [pid 5084] <... prlimit64 resumed>NULL) = 0 [pid 5088] <... close resumed>) = 0 [pid 5086] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5085] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5084] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5088] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5084] <... prlimit64 resumed>NULL) = 0 [pid 5088] <... prlimit64 resumed>NULL) = 0 [pid 5086] <... prlimit64 resumed>NULL) = 0 [pid 5084] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5088] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5084] <... prlimit64 resumed>NULL) = 0 [pid 5088] <... prlimit64 resumed>NULL) = 0 [pid 5086] unshare(CLONE_NEWNS [pid 5085] <... openat resumed>) = 3 [pid 5084] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5088] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5084] <... prlimit64 resumed>NULL) = 0 [pid 5088] <... prlimit64 resumed>NULL) = 0 [pid 5084] unshare(CLONE_NEWNS [pid 5088] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5087] <... openat resumed>) = 3 [pid 5086] <... unshare resumed>) = 0 [pid 5085] dup2(3, 201 [pid 5084] <... unshare resumed>) = 0 [pid 5088] <... prlimit64 resumed>NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5088] unshare(CLONE_NEWNS [pid 5087] dup2(3, 201 [pid 5086] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5085] <... dup2 resumed>) = 201 [pid 5084] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5088] <... unshare resumed>) = 0 [pid 5088] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5087] <... dup2 resumed>) = 201 [pid 5086] <... mount resumed>) = 0 [pid 5085] close(3 [pid 5084] <... mount resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5085] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5085] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5084] unshare(CLONE_NEWIPC [pid 5088] <... mount resumed>) = 0 [pid 5087] close(3 [pid 5086] unshare(CLONE_NEWIPC [pid 5085] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5084] <... unshare resumed>) = 0 [pid 5085] <... prlimit64 resumed>NULL) = 0 [pid 5087] <... close resumed>) = 0 [pid 5085] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5084] unshare(CLONE_NEWCGROUP [pid 5088] unshare(CLONE_NEWIPC [pid 5087] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5086] <... unshare resumed>) = 0 [pid 5085] <... prlimit64 resumed>NULL) = 0 [pid 5084] <... unshare resumed>) = 0 [pid 5087] <... prlimit64 resumed>NULL) = 0 [pid 5086] unshare(CLONE_NEWCGROUP [pid 5087] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5086] <... unshare resumed>) = 0 [pid 5087] <... prlimit64 resumed>NULL) = 0 [pid 5086] unshare(CLONE_NEWUTS [pid 5087] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5086] <... unshare resumed>) = 0 [pid 5087] <... prlimit64 resumed>NULL) = 0 [pid 5087] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5086] unshare(CLONE_SYSVSEM [pid 5087] <... prlimit64 resumed>NULL) = 0 [pid 5086] <... unshare resumed>) = 0 [pid 5087] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5087] <... prlimit64 resumed>NULL) = 0 [pid 5088] <... unshare resumed>) = 0 [pid 5087] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5086] <... openat resumed>) = 3 [pid 5085] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5084] unshare(CLONE_NEWUTS [pid 5088] unshare(CLONE_NEWCGROUP [pid 5087] <... prlimit64 resumed>NULL) = 0 [pid 5085] <... prlimit64 resumed>NULL) = 0 [pid 5084] <... unshare resumed>) = 0 [pid 5088] <... unshare resumed>) = 0 [pid 5085] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5084] unshare(CLONE_SYSVSEM [pid 5088] unshare(CLONE_NEWUTS [pid 5087] unshare(CLONE_NEWNS [pid 5086] write(3, "16777216", 8 [pid 5085] <... prlimit64 resumed>NULL) = 0 [pid 5084] <... unshare resumed>) = 0 [pid 5088] <... unshare resumed>) = 0 [pid 5086] <... write resumed>) = 8 [pid 5085] unshare(CLONE_NEWNS [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5088] unshare(CLONE_SYSVSEM [pid 5087] <... unshare resumed>) = 0 [pid 5086] close(3 [pid 5084] <... openat resumed>) = 3 [pid 5088] <... unshare resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5084] write(3, "16777216", 8 [pid 5088] <... openat resumed>) = 3 [pid 5086] <... close resumed>) = 0 [pid 5084] <... write resumed>) = 8 [pid 5088] write(3, "16777216", 8 [pid 5085] <... unshare resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5084] close(3 [pid 5088] <... write resumed>) = 8 [pid 5087] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5086] <... openat resumed>) = 3 [pid 5085] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5084] <... close resumed>) = 0 [pid 5088] close(3 [pid 5087] <... mount resumed>) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5086] write(3, "536870912", 9 [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5088] <... close resumed>) = 0 [pid 5086] <... write resumed>) = 9 [pid 5086] close(3 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5087] unshare(CLONE_NEWIPC [pid 5086] <... close resumed>) = 0 [pid 5085] unshare(CLONE_NEWIPC [pid 5084] <... openat resumed>) = 3 [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5087] <... unshare resumed>) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5085] <... unshare resumed>) = 0 [pid 5084] write(3, "536870912", 9 [pid 5087] unshare(CLONE_NEWCGROUP [pid 5088] write(3, "536870912", 9 [pid 5084] <... write resumed>) = 9 [pid 5086] write(3, "1024", 4 [pid 5088] <... write resumed>) = 9 [pid 5087] <... unshare resumed>) = 0 [pid 5085] unshare(CLONE_NEWCGROUP [pid 5084] close(3 [pid 5088] close(3 [pid 5087] unshare(CLONE_NEWUTS [pid 5086] <... write resumed>) = 4 [pid 5085] <... unshare resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5088] <... close resumed>) = 0 [pid 5087] <... unshare resumed>) = 0 [pid 5086] close(3 [pid 5085] unshare(CLONE_NEWUTS [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5087] unshare(CLONE_SYSVSEM [pid 5086] <... close resumed>) = 0 [pid 5085] <... unshare resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 3 [pid 5087] <... unshare resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5085] unshare(CLONE_SYSVSEM [pid 5084] write(3, "1024", 4 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5086] <... openat resumed>) = 3 [pid 5085] <... unshare resumed>) = 0 [pid 5084] <... write resumed>) = 4 [pid 5088] write(3, "1024", 4 [pid 5087] <... openat resumed>) = 3 [pid 5088] <... write resumed>) = 4 [pid 5088] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5087] write(3, "16777216", 8 [pid 5086] write(3, "8192", 4 [pid 5084] close(3 [pid 5087] <... write resumed>) = 8 [pid 5084] <... close resumed>) = 0 [pid 5087] close(3 [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5086] <... write resumed>) = 4 [pid 5087] <... close resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5088] write(3, "8192", 4 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5086] close(3 [pid 5085] <... openat resumed>) = 3 [pid 5088] <... write resumed>) = 4 [pid 5088] close(3) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5086] <... close resumed>) = 0 [pid 5087] write(3, "536870912", 9 [pid 5085] write(3, "16777216", 8 [pid 5084] write(3, "8192", 4 [pid 5088] <... openat resumed>) = 3 [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5085] <... write resumed>) = 8 [pid 5084] <... write resumed>) = 4 [pid 5088] write(3, "1024", 4 [pid 5087] <... write resumed>) = 9 [pid 5084] close(3 [pid 5085] close(3 [pid 5088] <... write resumed>) = 4 [pid 5087] close(3 [pid 5086] <... openat resumed>) = 3 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5088] close(3 [pid 5087] <... close resumed>) = 0 [pid 5086] write(3, "1024", 4 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5086] <... write resumed>) = 4 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5086] close(3) = 0 [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5085] write(3, "536870912", 9 [pid 5084] write(3, "1024", 4 [pid 5088] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5086] <... openat resumed>) = 3 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1024", 4 [pid 5085] <... write resumed>) = 9 [pid 5084] <... write resumed>) = 4 [pid 5088] write(3, "1024", 4 [pid 5087] <... openat resumed>) = 3 [pid 5088] <... write resumed>) = 4 [pid 5087] write(3, "1024", 4 [pid 5088] close(3 [pid 5087] <... write resumed>) = 4 [pid 5088] <... close resumed>) = 0 [pid 5087] close(3 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5087] <... close resumed>) = 0 [pid 5086] <... write resumed>) = 4 [pid 5085] close(3 [pid 5084] close(3 [pid 5086] close(3 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5088] <... openat resumed>) = 3 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5086] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5085] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5087] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5087] write(3, "8192", 4 [pid 5085] write(3, "1024", 4 [pid 5088] write(3, "1024 1048576 500 1024", 21 [pid 5087] <... write resumed>) = 4 [pid 5086] write(3, "1024 1048576 500 1024", 21 [pid 5085] <... write resumed>) = 4 [pid 5084] write(3, "1024", 4 [pid 5088] <... write resumed>) = 21 [pid 5087] close(3 [pid 5086] <... write resumed>) = 21 [pid 5085] close(3 [pid 5084] <... write resumed>) = 4 [pid 5088] close(3 [pid 5087] <... close resumed>) = 0 [pid 5088] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5086] close(3 [pid 5085] <... close resumed>) = 0 [pid 5084] close(3 [pid 5087] <... openat resumed>) = 3 [pid 5088] getpid( [pid 5086] <... close resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5084] <... close resumed>) = 0 [pid 5086] getpid( [pid 5085] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5086] <... getpid resumed>) = 1 [pid 5086] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5085] write(3, "8192", 4 [pid 5084] <... openat resumed>) = 3 [pid 5086] <... capget resumed>{effective=1<) = 4 [pid 5086] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5086] unshare(CLONE_NEWNET [pid 5085] <... close resumed>) = 0 [pid 5084] write(3, "1024 1048576 500 1024", 21 [pid 5088] <... getpid resumed>) = 1 [pid 5087] write(3, "1024", 4 [pid 5088] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5087] <... write resumed>) = 4 [pid 5088] <... capget resumed>{effective=1< [pid 5088] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5087] <... close resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5084] <... write resumed>) = 21 [pid 5088] <... capset resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5085] <... openat resumed>) = 3 [pid 5084] close(3 [pid 5088] unshare(CLONE_NEWNET [pid 5084] <... close resumed>) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5084] getpid( [pid 5085] write(3, "1024", 4 [pid 5084] <... getpid resumed>) = 1 [pid 5085] <... write resumed>) = 4 [pid 5087] write(3, "1024", 4 [pid 5084] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5085] close(3 [pid 5084] <... capget resumed>{effective=1<) = 0 [pid 5084] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5087] <... write resumed>) = 4 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5084] <... capset resumed>) = 0 [pid 5087] close(3 [pid 5085] <... openat resumed>) = 3 [pid 5084] unshare(CLONE_NEWNET [pid 5087] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5087] close(3) = 0 [pid 5087] getpid() = 1 [pid 5087] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5085] write(3, "1024", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5085] close(3) = 0 [pid 5085] getpid() = 1 [pid 5085] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5086] <... unshare resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "0 65535", 7) = 7 [pid 5086] close(3) = 0 [pid 5088] <... unshare resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5088] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5086] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 3 [pid 5088] write(3, "0 65535", 7 [pid 5086] write(3, "100000", 6 [pid 5088] <... write resumed>) = 7 [pid 5087] <... unshare resumed>) = 0 [pid 5088] close(3) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5086] <... write resumed>) = 6 [pid 5088] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] close(3 [pid 5088] write(3, "100000", 6 [pid 5086] <... close resumed>) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5086] mkdir("./syz-tmp", 0777 [pid 5088] <... write resumed>) = 6 [pid 5086] <... mkdir resumed>) = 0 [pid 5087] write(3, "0 65535", 7 [pid 5088] close(3 [pid 5087] <... write resumed>) = 7 [pid 5088] <... close resumed>) = 0 [pid 5087] close(3 [pid 5088] mkdir("./syz-tmp", 0777 [pid 5087] <... close resumed>) = 0 [pid 5086] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5088] <... mkdir resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5086] <... mount resumed>) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5086] mkdir("./syz-tmp/newroot", 0777 [pid 5088] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5087] write(3, "100000", 6 [pid 5088] <... mount resumed>) = 0 [pid 5087] <... write resumed>) = 6 [pid 5086] <... mkdir resumed>) = 0 [pid 5084] <... unshare resumed>) = 0 [pid 5087] close(3) = 0 [pid 5086] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5087] mkdir("./syz-tmp", 0777 [pid 5086] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5088] mkdir("./syz-tmp/newroot", 0777 [pid 5087] <... mkdir resumed>) = 0 [pid 5086] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5084] <... openat resumed>) = 3 [pid 5088] <... mkdir resumed>) = 0 [pid 5086] <... mount resumed>) = 0 [pid 5088] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5087] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5084] write(3, "0 65535", 7 [pid 5086] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5087] <... mount resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5084] <... write resumed>) = 7 [pid 5086] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5088] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5086] <... mount resumed>) = 0 [pid 5084] close(3 [pid 5088] <... mount resumed>) = 0 [pid 5087] mkdir("./syz-tmp/newroot", 0777 [pid 5084] <... close resumed>) = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5086] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5084] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5088] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5087] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5086] <... mkdir resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5088] <... mkdir resumed>) = 0 [pid 5084] write(3, "100000", 6) = 6 [pid 5087] <... mkdir resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] mkdir("./syz-tmp", 0777 [pid 5088] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5087] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5086] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5084] <... mkdir resumed>) = 0 [pid 5086] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5084] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5088] <... mount resumed>) = 0 [pid 5087] <... mount resumed>) = 0 [pid 5086] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5085] <... unshare resumed>) = 0 [pid 5088] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5087] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5084] <... mount resumed>) = 0 [pid 5084] mkdir("./syz-tmp/newroot", 0777 [pid 5088] <... mkdir resumed>) = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5086] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5085] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5088] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5087] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5086] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... mkdir resumed>) = 0 [pid 5087] <... mount resumed>) = 0 [pid 5085] write(3, "0 65535", 7 [pid 5084] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5086] <... mkdir resumed>) = 0 [pid 5085] <... write resumed>) = 7 [pid 5084] <... mkdir resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5088] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5087] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5086] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5085] <... openat resumed>) = 3 [pid 5084] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5088] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5087] <... mkdir resumed>) = 0 [pid 5086] <... mount resumed>) = 0 [pid 5085] write(3, "100000", 6 [pid 5088] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5084] <... mount resumed>) = 0 [pid 5087] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5088] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5087] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5088] <... mkdir resumed>) = 0 [pid 5086] mkdir("./syz-tmp/pivot", 0777 [pid 5087] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5088] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5086] <... mkdir resumed>) = 0 [pid 5085] <... write resumed>) = 6 [pid 5084] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5085] close(3) = 0 [pid 5087] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5086] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5087] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5084] <... mkdir resumed>) = 0 [pid 5088] <... mount resumed>) = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5086] <... pivot_root resumed>) = 0 [pid 5085] mkdir("./syz-tmp", 0777 [pid 5084] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5087] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5086] chdir("/" [pid 5088] mkdir("./syz-tmp/pivot", 0777 [pid 5087] <... mount resumed>) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... mount resumed>) = 0 [pid 5088] <... mkdir resumed>) = 0 [pid 5084] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5088] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5087] mkdir("./syz-tmp/pivot", 0777 [pid 5086] umount2("./pivot", MNT_DETACH [pid 5085] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5084] <... mkdir resumed>) = 0 [pid 5088] <... pivot_root resumed>) = 0 [pid 5088] chdir("/") = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5088] umount2("./pivot", MNT_DETACH [pid 5085] <... mount resumed>) = 0 [pid 5084] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5087] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5086] <... umount2 resumed>) = 0 [pid 5084] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5085] mkdir("./syz-tmp/newroot", 0777 [pid 5088] <... umount2 resumed>) = 0 [pid 5087] <... pivot_root resumed>) = 0 [pid 5086] chroot("./newroot" [pid 5084] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5088] chroot("./newroot" [pid 5087] chdir("/" [pid 5086] <... chroot resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5088] <... chroot resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5086] chdir("/" [pid 5084] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5088] chdir("/" [pid 5087] umount2("./pivot", MNT_DETACH [pid 5086] <... chdir resumed>) = 0 [pid 5085] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5088] <... chdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5088] mkdir("/dev/binderfs", 0777 [pid 5087] <... umount2 resumed>) = 0 [pid 5086] mkdir("/dev/binderfs", 0777 [pid 5085] <... mkdir resumed>) = 0 [pid 5088] <... mkdir resumed>) = 0 [pid 5084] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5088] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5087] chroot("./newroot" [pid 5086] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5086] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5087] <... chroot resumed>) = 0 [pid 5086] <... mount resumed>) = 0 [pid 5085] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5084] <... mount resumed>) = 0 [pid 5088] <... mount resumed>) = 0 [pid 5087] chdir("/" [pid 5086] mkdir("./0", 0777 [pid 5088] mkdir("./0", 0777 [pid 5087] <... chdir resumed>) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5084] mkdir("./syz-tmp/pivot", 0777 [pid 5086] <... mkdir resumed>) = 0 [pid 5088] <... mkdir resumed>) = 0 [pid 5087] mkdir("/dev/binderfs", 0777 [pid 5085] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5087] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5085] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5084] pivot_root("./syz-tmp", "./syz-tmp/pivot"./strace-static-x86_64: Process 5112 attached ./strace-static-x86_64: Process 5113 attached [pid 5085] <... mount resumed>) = 0 [pid 5084] <... pivot_root resumed>) = 0 [pid 5113] set_robust_list(0x55556cebf6a0, 24 [pid 5085] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5112] set_robust_list(0x55556cebf6a0, 24 [pid 5113] <... set_robust_list resumed>) = 0 [pid 5088] <... clone resumed>, child_tidptr=0x55556cebf690) = 3 [pid 5087] <... mount resumed>) = 0 [pid 5086] <... clone resumed>, child_tidptr=0x55556cebf690) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] chdir("/" [pid 5112] <... set_robust_list resumed>) = 0 [pid 5113] chdir("./0" [pid 5112] chdir("./0" [pid 5087] mkdir("./0", 0777 [pid 5085] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5084] <... chdir resumed>) = 0 [pid 5113] <... chdir resumed>) = 0 [pid 5112] <... chdir resumed>) = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5085] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5084] umount2("./pivot", MNT_DETACH [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5112] <... prctl resumed>) = 0 [pid 5113] <... prctl resumed>) = 0 [pid 5085] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5084] <... umount2 resumed>) = 0 [pid 5112] setpgid(0, 0 [pid 5113] setpgid(0, 0 [pid 5085] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5112] <... setpgid resumed>) = 0 [pid 5113] <... setpgid resumed>) = 0 [pid 5085] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5084] chroot("./newroot"./strace-static-x86_64: Process 5114 attached [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... chroot resumed>) = 0 [pid 5084] chdir("/" [pid 5114] set_robust_list(0x55556cebf6a0, 24 [pid 5112] <... openat resumed>) = 3 [pid 5113] <... openat resumed>) = 3 [pid 5087] <... clone resumed>, child_tidptr=0x55556cebf690) = 3 [pid 5085] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5114] <... set_robust_list resumed>) = 0 [pid 5112] write(3, "1000", 4 [pid 5113] write(3, "1000", 4 [pid 5085] <... mount resumed>) = 0 [pid 5084] <... chdir resumed>) = 0 [pid 5114] chdir("./0" [pid 5112] <... write resumed>) = 4 [pid 5085] mkdir("./syz-tmp/pivot", 0777 [pid 5084] mkdir("/dev/binderfs", 0777 [pid 5114] <... chdir resumed>) = 0 [pid 5112] close(3 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5114] <... prctl resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5113] <... write resumed>) = 4 [pid 5113] close(3 [pid 5114] setpgid(0, 0 [pid 5113] <... close resumed>) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs" executing program [pid 5084] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5114] <... setpgid resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5113] <... symlink resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5113] write(1, "executing program\n", 18) = 18 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5112] write(1, "executing program\n", 18 [pid 5085] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5113] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLYexecuting program ) = 3 [pid 5113] setns(201, 0 [pid 5114] <... openat resumed>) = 3 [pid 5112] <... write resumed>) = 18 [pid 5085] <... pivot_root resumed>) = 0 [pid 5084] <... mount resumed>) = 0 [pid 5114] write(3, "1000", 4 [pid 5112] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5113] <... setns resumed>) = 0 [pid 5085] chdir("/" [pid 5084] mkdir("./0", 0777 [pid 5114] <... write resumed>) = 4 [pid 5112] <... openat resumed>) = 3 [pid 5113] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5085] <... chdir resumed>) = 0 [pid 5114] close(3 [pid 5113] <... socket resumed>) = 4 [pid 5084] <... mkdir resumed>) = 0 [pid 5114] <... close resumed>) = 0 [pid 5112] setns(201, 0 [pid 5113] setns(3, 0 [pid 5114] symlink("/dev/binderfs", "./binderfs" [pid 5112] <... setns resumed>) = 0 [pid 5113] <... setns resumed>) = 0 [pid 5085] umount2("./pivot", MNT_DETACH [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5114] <... symlink resumed>) = 0 [pid 5112] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5113] close(3 [pid 5114] write(1, "executing program\n", 18 [pid 5112] <... socket resumed>) = 4 [pid 5113] <... close resumed>) = 0 executing program [pid 5114] <... write resumed>) = 18 [pid 5112] setns(3, 0 [pid 5113] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8./strace-static-x86_64: Process 5115 attached [pid 5114] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5112] <... setns resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5115] set_robust_list(0x55556cebf6a0, 24 [pid 5112] close(3 [pid 5085] chroot("./newroot" [pid 5115] <... set_robust_list resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5085] <... chroot resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x55556cebf690) = 3 [pid 5115] chdir("./0" [pid 5114] <... openat resumed>) = 3 [pid 5113] <... bind resumed>) = 0 [pid 5085] chdir("/" [pid 5112] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5085] <... chdir resumed>) = 0 [pid 5085] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5085] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5115] <... chdir resumed>) = 0 [pid 5114] setns(201, 0 [pid 5112] <... bind resumed>) = 0 [pid 5113] listen(4, 0 [pid 5085] <... mount resumed>) = 0 [pid 5114] <... setns resumed>) = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5114] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5112] listen(4, 0 [pid 5113] <... listen resumed>) = 0 [pid 5085] mkdir("./0", 0777 [pid 5115] <... prctl resumed>) = 0 [pid 5114] <... socket resumed>) = 4 [pid 5112] <... listen resumed>) = -1 EADDRINUSE (Address already in use) [pid 5113] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5115] setpgid(0, 0 [pid 5114] setns(3, 0 [pid 5112] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5113] <... write resumed>) = 13 [pid 5085] <... mkdir resumed>) = 0 [pid 5115] <... setpgid resumed>) = 0 [pid 5114] <... setns resumed>) = 0 [pid 5112] <... write resumed>) = 13 [pid 5113] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5114] close(3 [pid 5112] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5113] <... write resumed>) = 20 [pid 5112] <... write resumed>) = 20 [pid 5114] <... close resumed>) = 0 [pid 5115] <... openat resumed>) = 3 [pid 5114] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5112] close(3 [pid 5113] close(3 [pid 5114] <... bind resumed>) = 0 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(4 [pid 5115] write(3, "1000", 4 [pid 5114] listen(4, 0 [pid 5112] <... close resumed>) = 0 [pid 5113] close(4 [pid 5115] <... write resumed>) = 4 [pid 5114] <... listen resumed>) = -1 EADDRINUSE (Address already in use) [pid 5113] <... close resumed>) = 0 [pid 5115] close(3 [pid 5114] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5112] close(5 [pid 5115] <... close resumed>) = 0 [pid 5114] <... write resumed>) = 13 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(5 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5114] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5112] close(6 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... symlink resumed>) = 0 [pid 5114] <... write resumed>) = 20 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(6 [pid 5085] <... clone resumed>, child_tidptr=0x55556cebf690) = 3 [pid 5115] write(1, "executing program\n", 18 [pid 5114] close(3executing program [pid 5112] close(7 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... write resumed>) = 18 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(7 [pid 5115] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5114] close(4 [pid 5112] close(8 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... openat resumed>) = 3 [pid 5114] <... close resumed>) = 0 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(8 [pid 5112] close(9 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(9 [pid 5115] setns(201, 0 [pid 5114] close(5 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... setns resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(10 [pid 5113] close(10 [pid 5115] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5114] close(6 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... socket resumed>) = 4 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(11 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] setns(3, 0 [pid 5114] close(7 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(11 [pid 5115] <... setns resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] close(3 [pid 5114] close(8 [pid 5112] close(12 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(12 [pid 5115] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5114] close(9 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... bind resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(13 [pid 5113] close(13./strace-static-x86_64: Process 5116 attached [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] set_robust_list(0x55556cebf6a0, 24 [pid 5115] listen(4, 0 [pid 5114] close(10 [pid 5112] close(14 [pid 5113] close(14 [pid 5116] <... set_robust_list resumed>) = 0 [pid 5115] <... listen resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] chdir("./0" [pid 5115] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5114] close(11 [pid 5112] close(15 [pid 5113] close(15 [pid 5116] <... chdir resumed>) = 0 [pid 5115] <... write resumed>) = 13 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(12 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5115] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(16 [ 61.969273][ T5092] BUG: sleeping function called from invalid context at net/core/sock.c:3536 [ 61.978291][ T5092] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5092, name: kworker/u9:2 [ 61.987969][ T5092] preempt_count: 1, expected: 0 [ 61.992844][ T5092] RCU nest depth: 0, expected: 0 [ 61.998113][ T5092] 6 locks held by kworker/u9:2/5092: [ 62.003403][ T5092] #0: ffff888021bc4148 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [pid 5113] close(16 [pid 5115] <... write resumed>) = 20 [pid 5114] close(13 [pid 5116] <... prctl resumed>) = 0 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] setpgid(0, 0 [pid 5115] close(3 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(17 [pid 5113] close(17 [pid 5116] <... setpgid resumed>) = 0 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(14 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5115] close(4 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(18 [pid 5113] close(18 [pid 5116] <... openat resumed>) = 3 [pid 5115] <... close resumed>) = 0 [pid 5114] close(15 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] close(5 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(19 [pid 5113] close(19 [pid 5116] write(3, "1000", 4 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(16 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... write resumed>) = 4 [pid 5115] close(6 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(20 [pid 5116] close(3 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(17 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(20 [pid 5116] <... close resumed>) = 0 [pid 5115] close(7 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(21 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(18 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(21 [pid 5116] <... symlink resumed>) = 0 [pid 5115] close(8 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(22 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(19 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(22executing program [pid 5116] write(1, "executing program\n", 18 [pid 5115] close(9 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(23 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... write resumed>) = 18 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(20 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(23 [pid 5116] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5115] close(10 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(24 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... openat resumed>) = 3 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(21 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(24 [pid 5115] close(11 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(25 [pid 5116] setns(201, 0 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(22 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... setns resumed>) = 0 [pid 5115] close(12 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(26 [pid 5113] close(25 [pid 5116] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(23 [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... socket resumed>) = 4 [pid 5115] close(13 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] close(27 [pid 5113] close(26 [pid 5116] setns(3, 0 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... setns resumed>) = 0 [pid 5115] close(14 [pid 5114] close(24 [pid 5112] close(28 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(3 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(27 [pid 5116] <... close resumed>) = 0 [pid 5115] close(15 [pid 5114] close(25 [pid 5112] close(29 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] close(28 [pid 5116] <... bind resumed>) = 0 [pid 5115] close(16 [pid 5114] close(26 [pid 5116] listen(4, 0 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] exit_group(0 [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... listen resumed>) = 0 [pid 5115] close(17 [pid 5114] close(27 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5115] close(18 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5112] <... exit_group resumed>) = ? [pid 5113] close(29 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(28 [pid 5116] <... write resumed>) = 13 [pid 5115] close(19 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5113] exit_group(0 [pid 5116] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5115] close(20 [pid 5114] close(29 [pid 5112] +++ exited with 0 +++ [pid 5113] <... exit_group resumed>) = ? [pid 5116] <... write resumed>) = 20 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5116] close(3 [pid 5115] close(21 [pid 5114] exit_group(0 [pid 5113] +++ exited with 0 +++ [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... exit_group resumed>) = ? [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5116] close(4 [pid 5115] close(22 [pid 5114] +++ exited with 0 +++ [pid 5116] <... close resumed>) = 0 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5116] close(5 [pid 5115] close(23 [pid 5087] restart_syscall(<... resuming interrupted clone ...> [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] close(24 [pid 5116] close(6) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 62.014474][ T5092] #1: ffffc900036afd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 62.026556][ T5092] #2: ffff888023958078 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb1/0xaa0 [ 62.036817][ T5092] #3: ffffffff8f744688 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x532/0xaa0 [ 62.047632][ T5092] #4: ffff88807ed84020 (&conn->lock#2){+.+.}-{2:2}, at: sco_connect_cfm+0x28a/0xb40 [ 62.057239][ T5092] #5: ffff88807538e258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x461/0xb40 [pid 5116] close(7 [pid 5115] close(25 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(8 [pid 5115] close(26 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(9 [pid 5115] close(27 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(10 [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(11 [pid 5115] close(28 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(12) = -1 EBADF (Bad file descriptor) [pid 5115] close(29 [pid 5116] close(13 [pid 5087] <... restart_syscall resumed>) = 0 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5116] close(14 [ 62.068484][ T5092] Preemption disabled at: [ 62.068498][ T5092] [<0000000000000000>] 0x0 [ 62.077335][ T5092] CPU: 1 PID: 5092 Comm: kworker/u9:2 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 62.087231][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.097281][ T5092] Workqueue: hci1 hci_rx_work [ 62.101972][ T5092] Call Trace: [ 62.105248][ T5092] [ 62.108178][ T5092] dump_stack_lvl+0x241/0x360 [ 62.112852][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.118048][ T5092] ? __pfx__printk+0x10/0x10 [ 62.122640][ T5092] __might_resched+0x5d4/0x780 [ 62.127398][ T5092] ? __pfx_lock_acquire+0x10/0x10 [ 62.132419][ T5092] ? __pfx___might_resched+0x10/0x10 [ 62.137699][ T5092] ? __pfx_lock_release+0x10/0x10 [ 62.142713][ T5092] ? do_raw_spin_lock+0x14f/0x370 [ 62.147737][ T5092] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.153110][ T5092] lock_sock_nested+0x5d/0x100 [ 62.157873][ T5092] sco_connect_cfm+0x461/0xb40 [ 62.162633][ T5092] ? __pfx_sco_connect_cfm+0x10/0x10 [ 62.167917][ T5092] ? hci_conn_add_sysfs+0xfc/0x200 [ 62.173024][ T5092] ? __pfx_sco_connect_cfm+0x10/0x10 [ 62.178297][ T5092] hci_sync_conn_complete_evt+0x5ab/0xaa0 [ 62.184014][ T5092] hci_event_packet+0xac0/0x1540 [ 62.188946][ T5092] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 62.195187][ T5092] ? __pfx_hci_event_packet+0x10/0x10 [ 62.200548][ T5092] ? do_raw_spin_unlock+0x13c/0x8b0 [ 62.205746][ T5092] ? kcov_remote_start+0x9e/0x7e0 [ 62.210766][ T5092] ? hci_send_to_monitor+0xd8/0x7f0 [ 62.215959][ T5092] ? skb_dequeue+0x113/0x150 [ 62.220542][ T5092] hci_rx_work+0x3e8/0xca0 [ 62.224958][ T5092] ? process_scheduled_works+0x945/0x1830 [ 62.230685][ T5092] process_scheduled_works+0xa2c/0x1830 [ 62.236263][ T5092] ? __pfx_process_scheduled_works+0x10/0x10 [ 62.242250][ T5092] ? assign_work+0x364/0x3d0 [ 62.246840][ T5092] worker_thread+0x86d/0xd40 [ 62.251441][ T5092] ? __kthread_parkme+0x169/0x1d0 [ 62.256467][ T5092] ? __pfx_worker_thread+0x10/0x10 [ 62.261580][ T5092] kthread+0x2f0/0x390 [ 62.265646][ T5092] ? __pfx_worker_thread+0x10/0x10 [pid 5087] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] exit_group(0 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5116] close(15 [pid 5115] <... exit_group resumed>) = ? [pid 5087] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5115] +++ exited with 0 +++ [pid 5088] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5087] newfstatat(3, "", [pid 5086] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5116] close(16 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5116] close(17 [pid 5088] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] getdents64(3, [pid 5086] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] <... getdents64 resumed>0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5086] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 3 [pid 5086] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5086] getdents64(3, 0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5086] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5086] unlink("./0/binderfs") = 0 [pid 5086] getdents64(3, [pid 5087] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5086] <... getdents64 resumed>0x55556cec0850 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./0" [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] <... rmdir resumed>) = 0 [pid 5086] mkdir("./1", 0777 [pid 5088] newfstatat(3, "", [pid 5086] <... mkdir resumed>) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5116] close(18) = -1 EBADF (Bad file descriptor) [pid 5116] close(19) = -1 EBADF (Bad file descriptor) [pid 5084] <... restart_syscall resumed>) = 0 [pid 5116] close(20 [pid 5088] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5088] getdents64(3, [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5087] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] <... getdents64 resumed>0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5087] unlink("./0/binderfs" [pid 5084] <... openat resumed>) = 3 [pid 5086] <... clone resumed>, child_tidptr=0x55556cebf690) = 4 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5087] <... unlink resumed>) = 0 [pid 5084] getdents64(3, 0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5116] close(21 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 62.270752][ T5092] ? __pfx_kthread+0x10/0x10 [ 62.275336][ T5092] ret_from_fork+0x4b/0x80 [ 62.280010][ T5092] ? __pfx_kthread+0x10/0x10 [ 62.284604][ T5092] ret_from_fork_asm+0x1a/0x30 [ 62.289385][ T5092] [ 62.293163][ T5092] ================================================================== [ 62.301240][ T5092] BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x1fd0 [ 62.308883][ T5092] Read of size 8 at addr ffff88807538e1d8 by task kworker/u9:2/5092 [ 62.316864][ T5092] [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] getdents64(3, [pid 5084] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./0/binderfs") = 0 [pid 5087] <... getdents64 resumed>0x55556cec0850 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5084] getdents64(3, 0x55556cec0850 /* 0 entries */, 32768) = 0 [pid 5088] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 5088] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5084] rmdir("./0" [pid 5088] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5088] unlink("./0/binderfs" [pid 5084] mkdir("./1", 0777 [pid 5088] <... unlink resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5088] getdents64(3, [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] <... getdents64 resumed>0x55556cec0850 /* 0 entries */, 32768) = 0 [pid 5087] rmdir("./0") = 0 [pid 5084] <... clone resumed>, child_tidptr=0x55556cebf690) = 4 [pid 5116] close(22 [pid 5087] mkdir("./1", 0777 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] <... mkdir resumed>) = 0 [pid 5116] close(23 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] close(3) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55556cebf690) = 4 [pid 5088] rmdir("./0" [pid 5116] close(24 [pid 5088] <... rmdir resumed>) = 0 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] mkdir("./1", 0777 [pid 5116] close(25 [pid 5088] <... mkdir resumed>) = 0 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5116] close(26) = -1 EBADF (Bad file descriptor) [pid 5088] <... clone resumed>, child_tidptr=0x55556cebf690) = 4 [pid 5116] close(27./strace-static-x86_64: Process 5117 attached ) = -1 EBADF (Bad file descriptor) [pid 5117] set_robust_list(0x55556cebf6a0, 24 [pid 5116] close(28 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5116] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] chdir("./1" [pid 5116] close(29) = -1 EBADF (Bad file descriptor) [pid 5117] <... chdir resumed>) = 0 [pid 5116] exit_group(0./strace-static-x86_64: Process 5118 attached [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] <... exit_group resumed>) = ? [pid 5116] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5117] <... prctl resumed>) = 0 [pid 5085] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5118] set_robust_list(0x55556cebf6a0, 24 [pid 5117] setpgid(0, 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] <... set_robust_list resumed>) = 0 [pid 5117] <... setpgid resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5118] chdir("./1" [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... openat resumed>) = 3 executing program [pid 5118] <... chdir resumed>) = 0 [pid 5117] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", [pid 5117] write(3, "1000", 4 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5117] <... write resumed>) = 4 [pid 5085] getdents64(3, [pid 5118] <... prctl resumed>) = 0 [pid 5117] close(3 [pid 5085] <... getdents64 resumed>0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5118] setpgid(0, 0 [pid 5117] <... close resumed>) = 0 [pid 5085] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5117] symlink("/dev/binderfs", "./binderfs" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] <... symlink resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./0/binderfs", ./strace-static-x86_64: Process 5119 attached [pid 5117] write(1, "executing program\n", 18 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5119] set_robust_list(0x55556cebf6a0, 24 [pid 5118] <... setpgid resumed>) = 0 [pid 5117] <... write resumed>) = 18 [pid 5085] unlink("./0/binderfs" [pid 5119] <... set_robust_list resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5117] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5085] <... unlink resumed>) = 0 [pid 5119] chdir("./1" [pid 5118] <... openat resumed>) = 3 [pid 5117] <... openat resumed>) = 3 [pid 5085] getdents64(3, ./strace-static-x86_64: Process 5120 attached [pid 5119] <... chdir resumed>) = 0 [pid 5118] write(3, "1000", 4 [pid 5117] setns(201, 0 [pid 5085] <... getdents64 resumed>0x55556cec0850 /* 0 entries */, 32768) = 0 [pid 5120] set_robust_list(0x55556cebf6a0, 24 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5118] <... write resumed>) = 4 [pid 5117] <... setns resumed>) = 0 [pid 5085] close(3 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] <... prctl resumed>) = 0 [pid 5118] close(3 [pid 5117] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5085] <... close resumed>) = 0 [pid 5120] chdir("./1" [pid 5119] setpgid(0, 0 [pid 5118] <... close resumed>) = 0 [pid 5117] <... socket resumed>) = 4 [pid 5085] rmdir("./0" [pid 5120] <... chdir resumed>) = 0 [pid 5119] <... setpgid resumed>) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs" [pid 5117] setns(3, 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5118] <... symlink resumed>) = 0 [pid 5117] <... setns resumed>) = 0 [pid 5085] mkdir("./1", 0777executing program [pid 5118] write(1, "executing program\n", 18 [pid 5117] close(3 [pid 5085] <... mkdir resumed>) = 0 [pid 5118] <... write resumed>) = 18 [pid 5117] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5117] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5119] <... openat resumed>) = 3 [pid 5118] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5117] <... bind resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x55556cebf690) = 4 [pid 5120] <... prctl resumed>) = 0 [pid 5119] write(3, "1000", 4 [pid 5118] <... openat resumed>) = 3 [pid 5117] listen(4, 0 [pid 5120] setpgid(0, 0 [pid 5119] <... write resumed>) = 4 [pid 5117] <... listen resumed>) = 0 [pid 5120] <... setpgid resumed>) = 0 [pid 5119] close(3 [ 62.319196][ T5092] CPU: 1 PID: 5092 Comm: kworker/u9:2 Tainted: G W 6.10.0-syzkaller-01193-g408323581b72 #0 [ 62.330829][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.340891][ T5092] Workqueue: hci1 hci_rx_work [ 62.345587][ T5092] Call Trace: [ 62.348874][ T5092] [ 62.351814][ T5092] dump_stack_lvl+0x241/0x360 [ 62.356512][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.361724][ T5092] ? __pfx__printk+0x10/0x10 [ 62.366327][ T5092] ? _printk+0xd5/0x120 [pid 5117] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5119] <... close resumed>) = 0 [pid 5117] <... write resumed>) = 13 executing program executing program ./strace-static-x86_64: Process 5121 attached [pid 5120] <... openat resumed>) = 3 [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5118] setns(201, 0 [pid 5117] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5121] set_robust_list(0x55556cebf6a0, 24 [pid 5119] <... symlink resumed>) = 0 [pid 5118] <... setns resumed>) = 0 [pid 5117] <... write resumed>) = 20 [pid 5121] <... set_robust_list resumed>) = 0 [pid 5120] write(3, "1000", 4 [pid 5119] write(1, "executing program\n", 18 [pid 5118] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5117] close(3 [pid 5120] <... write resumed>) = 4 [pid 5119] <... write resumed>) = 18 [pid 5118] <... socket resumed>) = 4 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] close(3 [pid 5119] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5118] setns(3, 0 [pid 5117] close(4 [pid 5120] <... close resumed>) = 0 [pid 5119] <... openat resumed>) = 3 [pid 5118] <... setns resumed>) = 0 [pid 5117] <... close resumed>) = 0 [pid 5119] setns(201, 0 [pid 5118] close(3 [pid 5117] close(5 [pid 5119] <... setns resumed>) = 0 [pid 5118] <... close resumed>) = 0 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] symlink("/dev/binderfs", "./binderfs" [pid 5119] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5118] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5117] close(6 [pid 5121] chdir("./1" [pid 5120] <... symlink resumed>) = 0 [pid 5119] <... socket resumed>) = 4 [pid 5118] <... bind resumed>) = 0 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] write(1, "executing program\n", 18 [pid 5119] setns(3, 0 [pid 5118] listen(4, 0 [pid 5117] close(7 [pid 5120] <... write resumed>) = 18 [pid 5119] <... setns resumed>) = 0 [pid 5118] <... listen resumed>) = 0 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5119] close(3 [pid 5118] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5117] close(8 [pid 5120] <... openat resumed>) = 3 [pid 5119] <... close resumed>) = 0 [pid 5118] <... write resumed>) = 13 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5118] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5121] <... chdir resumed>) = 0 [pid 5120] setns(201, 0 [pid 5119] <... bind resumed>) = 0 [pid 5117] close(9 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5120] <... setns resumed>) = 0 [pid 5118] <... write resumed>) = 20 [pid 5121] <... prctl resumed>) = 0 [pid 5120] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5119] listen(4, 0 [pid 5118] close(3 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] setpgid(0, 0 [pid 5120] <... socket resumed>) = 4 [pid 5119] <... listen resumed>) = -1 EADDRINUSE (Address already in use) [pid 5121] <... setpgid resumed>) = 0 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(10 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5120] setns(3, 0 [pid 5119] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5121] <... openat resumed>) = 3 [pid 5118] close(4 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] write(3, "1000", 4 [pid 5119] <... write resumed>) = 13 [pid 5118] <... close resumed>) = 0 [pid 5117] close(11 [pid 5121] <... write resumed>) = 4 [pid 5119] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5118] close(5 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(3 [pid 5119] <... write resumed>) = 20 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(12 [pid 5121] <... close resumed>) = 0 [pid 5119] close(3 [pid 5118] close(6 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] symlink("/dev/binderfs", "./binderfs" [pid 5120] <... setns resumed>) = 0 [pid 5121] <... symlink resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(13 [pid 5121] write(1, "executing program\n", 18 [pid 5120] close(3 [pid 5119] close(4 [pid 5118] close(7 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... write resumed>) = 18 [pid 5120] <... close resumed>) = 0 [pid 5119] <... close resumed>) = 0 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 5120] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5119] close(5 [pid 5117] close(14 [pid 5121] <... openat resumed>) = 3 [pid 5120] <... bind resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(8 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] setns(201, 0) = 0 [pid 5120] listen(4, 0 [pid 5119] close(6 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(15 [pid 5121] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_SCO [pid 5120] <... listen resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(9 [pid 5121] <... socket resumed>) = 4 [pid 5120] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5119] close(7 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] setns(3, 0 [pid 5120] <... write resumed>) = 13 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(10 [pid 5117] close(16 [pid 5121] <... setns resumed>) = 0 [pid 5120] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5119] close(8 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(3 [pid 5120] <... write resumed>) = 20 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(11 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = 0 [pid 5120] close(3 [pid 5119] close(9 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] bind(4, {sa_family=AF_BLUETOOTH, sco_bdaddr=00:00:00:00:00:00}, 8 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(17 [pid 5121] <... bind resumed>) = 0 [pid 5120] close(4 [pid 5119] close(10 [pid 5118] close(12 [pid 5121] listen(4, 0 [pid 5120] <... close resumed>) = 0 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... listen resumed>) = 0 [pid 5120] close(5 [pid 5119] close(11 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] write(202, "\x04\x04\x0a\x00\x00\x00\x00\x00\x00\x54\x67\x92\x00", 13 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(18 [pid 5121] <... write resumed>) = 13 [pid 5120] close(6 [pid 5118] close(13 [pid 5121] write(202, "\x04\x2c\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(12 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... write resumed>) = 20 [pid 5120] close(7 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(3 [pid 5118] close(14 [pid 5117] close(19 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(13 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(4 [pid 5120] close(8 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(15 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = 0 [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(14 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(20 [pid 5121] close(5 [pid 5120] close(9 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(16 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(15 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(6 [pid 5120] close(10 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(17 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(16 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(21 [pid 5121] close(7 [pid 5120] close(11 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(18 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(17 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(8 [pid 5120] close(12 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(19 [pid 5117] close(22 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(18 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(9 [pid 5120] close(13 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(20 [pid 5117] close(23 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(19 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(10 [pid 5120] close(14 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(21 [pid 5117] close(24 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(20 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(11 [pid 5120] close(15 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(22 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(21 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(25 [pid 5121] close(12 [pid 5120] close(16 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(23 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(22 [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(26 [pid 5121] close(13 [pid 5120] close(17 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] close(24 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(23 [pid 5121] close(14 [pid 5120] close(18 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(27 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(24 [pid 5118] close(25 [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] close(15 [pid 5120] close(19 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] close(28 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(25 [pid 5118] close(26 [pid 5121] close(16 [pid 5120] close(20 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(26 [pid 5118] close(27 [pid 5117] close(29 [pid 5121] close(17 [pid 5120] close(21 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 62.370505][ T5092] ? __virt_addr_valid+0x183/0x530 [ 62.375634][ T5092] ? __virt_addr_valid+0x183/0x530 [ 62.380762][ T5092] print_report+0x169/0x550 [ 62.385279][ T5092] ? __virt_addr_valid+0x183/0x530 [ 62.390532][ T5092] ? __virt_addr_valid+0x183/0x530 [ 62.395660][ T5092] ? __virt_addr_valid+0x45f/0x530 [ 62.400786][ T5092] ? __phys_addr+0xba/0x170 [ 62.405303][ T5092] ? __lock_acquire+0x78/0x1fd0 [ 62.410165][ T5092] kasan_report+0x143/0x180 [ 62.414683][ T5092] ? __lock_acquire+0x78/0x1fd0 [pid 5119] close(27 [pid 5118] close(28 [pid 5117] exit_group(0 [pid 5121] close(18 [pid 5120] close(22 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... exit_group resumed>) = ? [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(28 [pid 5118] close(29 [pid 5117] +++ exited with 0 +++ [pid 5121] close(19 [pid 5120] close(23 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] close(29 [pid 5118] exit_group(0 [pid 5086] restart_syscall(<... resuming interrupted clone ...> [pid 5121] close(20 [pid 5120] close(24 [pid 5119] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... exit_group resumed>) = ? [pid 5086] <... restart_syscall resumed>) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] exit_group(0 [pid 5118] +++ exited with 0 +++ [pid 5121] close(21 [pid 5120] close(25 [pid 5119] <... exit_group resumed>) = ? [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5119] +++ exited with 0 +++ [pid 5086] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5121] close(22 [pid 5120] close(26 [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] close(23 [pid 5120] close(27 [pid 5086] <... openat resumed>) = 3 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] newfstatat(3, "", [pid 5121] close(24 [pid 5120] close(28 [pid 5086] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] getdents64(3, [pid 5121] close(25 [pid 5120] close(29 [pid 5086] <... getdents64 resumed>0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5121] close(26 [pid 5120] exit_group(0 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5120] <... exit_group resumed>) = ? [pid 5086] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5084] <... restart_syscall resumed>) = 0 [pid 5121] close(27 [pid 5120] +++ exited with 0 +++ [pid 5086] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5086] unlink("./1/binderfs" [pid 5121] close(28 [pid 5088] restart_syscall(<... resuming interrupted clone ...> [pid 5086] <... unlink resumed>) = 0 [pid 5084] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] getdents64(3, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5121] close(29 [pid 5086] <... getdents64 resumed>0x55556cec0850 /* 0 entries */, 32768) = 0 [pid 5084] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] close(3 [pid 5084] <... openat resumed>) = 3 [pid 5121] exit_group(0 [pid 5086] <... close resumed>) = 0 [pid 5084] newfstatat(3, "", [pid 5121] <... exit_group resumed>) = ? [pid 5088] <... restart_syscall resumed>) = 0 [pid 5086] rmdir("./1" [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5121] +++ exited with 0 +++ [pid 5086] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5086] mkdir("./2", 0777 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5084] <... getdents64 resumed>0x55556cec0850 /* 3 entries */, 32768) = 80 [pid 5088] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5087] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5086] <... mkdir resumed>) = 0 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5084] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... restart_syscall resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 62.419550][ T5092] __lock_acquire+0x78/0x1fd0 [ 62.424240][ T5092] ? dump_stack_lvl+0x301/0x360 [ 62.429108][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.434321][ T5092] lock_acquire+0x1ed/0x550 [ 62.438837][ T5092] ? lock_sock_nested+0x6a/0x100 [ 62.443793][ T5092] ? __pfx_lock_acquire+0x10/0x10 [ 62.448828][ T5092] ? lock_sock_nested+0x6a/0x100 [ 62.453777][ T5092] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 62.459589][ T5092] ? __pfx_lock_release+0x10/0x10 [ 62.464602][ T5092] ? do_raw_spin_lock+0x14f/0x370 [ 62.469621][ T5092] ? lock_sock_nested+0x6a/0x100 [ 62.474551][ T5092] _raw_spin_lock_bh+0x35/0x50 [ 62.479301][ T5092] ? lock_sock_nested+0x6a/0x100 [ 62.484224][ T5092] lock_sock_nested+0x6a/0x100 [ 62.488975][ T5092] sco_connect_cfm+0x461/0xb40 [ 62.493728][ T5092] ? __pfx_sco_connect_cfm+0x10/0x10 [ 62.498999][ T5092] ? hci_conn_add_sysfs+0xfc/0x200 [ 62.504097][ T5092] ? __pfx_sco_connect_cfm+0x10/0x10 [ 62.509363][ T5092] hci_sync_conn_complete_evt+0x5ab/0xaa0 [ 62.515069][ T5092] hci_event_packet+0xac0/0x1540 [ 62.519995][ T5092] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 62.526224][ T5092] ? __pfx_hci_event_packet+0x10/0x10 [ 62.531580][ T5092] ? do_raw_spin_unlock+0x13c/0x8b0 [ 62.536773][ T5092] ? kcov_remote_start+0x9e/0x7e0 [ 62.541788][ T5092] ? hci_send_to_monitor+0xd8/0x7f0 [ 62.546976][ T5092] ? skb_dequeue+0x113/0x150 [ 62.551559][ T5092] hci_rx_work+0x3e8/0xca0 [ 62.555967][ T5092] ? process_scheduled_works+0x945/0x1830 [ 62.561671][ T5092] process_scheduled_works+0xa2c/0x1830 [ 62.567214][ T5092] ? __pfx_process_scheduled_works+0x10/0x10 [ 62.573181][ T5092] ? assign_work+0x364/0x3d0 [ 62.577758][ T5092] worker_thread+0x86d/0xd40 [ 62.582342][ T5092] ? __kthread_parkme+0x169/0x1d0 [ 62.587360][ T5092] ? __pfx_worker_thread+0x10/0x10 [ 62.592456][ T5092] kthread+0x2f0/0x390 [ 62.596513][ T5092] ? __pfx_worker_thread+0x10/0x10 [ 62.601613][ T5092] ? __pfx_kthread+0x10/0x10 [ 62.606188][ T5092] ret_from_fork+0x4b/0x80 [ 62.610592][ T5092] ? __pfx_kthread+0x10/0x10 [ 62.615167][ T5092] ret_from_fork_asm+0x1a/0x30 [ 62.619924][ T5092] [ 62.622926][ T5092] [ 62.625234][ T5092] Allocated by task 5113: [ 62.629544][ T5092] kasan_save_track+0x3f/0x80 [ 62.634217][ T5092] __kasan_kmalloc+0x98/0xb0 [ 62.638790][ T5092] __kmalloc_noprof+0x1f9/0x400 [ 62.643632][ T5092] sk_prot_alloc+0xe0/0x210 [ 62.648129][ T5092] sk_alloc+0x38/0x370 [ 62.652185][ T5092] bt_sock_alloc+0x3c/0x340 [ 62.656679][ T5092] sco_sock_create+0xbb/0x390 [ 62.661336][ T5092] bt_sock_create+0x161/0x230 [ 62.665998][ T5092] __sock_create+0x490/0x920 [ 62.670574][ T5092] __sys_socket+0x150/0x3c0 [ 62.675058][ T5092] __x64_sys_socket+0x7a/0x90 [ 62.679721][ T5092] do_syscall_64+0xf3/0x230 [ 62.684206][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.690081][ T5092] [ 62.692389][ T5092] Freed by task 5113: [ 62.696348][ T5092] kasan_save_track+0x3f/0x80 [ 62.701015][ T5092] kasan_save_free_info+0x40/0x50 [ 62.706022][ T5092] poison_slab_object+0xe0/0x150 [ 62.710957][ T5092] __kasan_slab_free+0x37/0x60 [ 62.715733][ T5092] kfree+0x149/0x360 [ 62.719620][ T5092] __sk_destruct+0x476/0x5f0 [ 62.724204][ T5092] sco_sock_release+0x25e/0x320 [ 62.729040][ T5092] sock_close+0xbc/0x240 [ 62.733281][ T5092] __fput+0x24a/0x8a0 [ 62.737265][ T5092] __x64_sys_close+0x7f/0x110 [ 62.741932][ T5092] do_syscall_64+0xf3/0x230 [ 62.746418][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.752295][ T5092] [ 62.754602][ T5092] The buggy address belongs to the object at ffff88807538e000 [ 62.754602][ T5092] which belongs to the cache kmalloc-2k of size 2048 [ 62.768636][ T5092] The buggy address is located 472 bytes inside of [ 62.768636][ T5092] freed 2048-byte region [ffff88807538e000, ffff88807538e800) [ 62.782500][ T5092] [ 62.784807][ T5092] The buggy address belongs to the physical page: [ 62.791208][ T5092] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75388 [ 62.799956][ T5092] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 62.808440][ T5092] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 62.815970][ T5092] page_type: 0xffffefff(slab) [ 62.820633][ T5092] raw: 00fff00000000040 ffff888015042000 dead000000000122 0000000000000000 [ 62.829197][ T5092] raw: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 62.837764][ T5092] head: 00fff00000000040 ffff888015042000 dead000000000122 0000000000000000 [ 62.846434][ T5092] head: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 62.855087][ T5092] head: 00fff00000000003 ffffea0001d4e201 ffffffffffffffff 0000000000000000 [ 62.863737][ T5092] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 62.872385][ T5092] page dumped because: kasan: bad access detected [ 62.878781][ T5092] page_owner tracks the page as allocated [ 62.884474][ T5092] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5085, tgid 5085 (syz-executor289), ts 61801569049, free_ts 14985715302 [ 62.906078][ T5092] post_alloc_hook+0x1f3/0x230 [ 62.910832][ T5092] get_page_from_freelist+0x2e4c/0x2f10 [ 62.916365][ T5092] __alloc_pages_noprof+0x256/0x6c0 [ 62.921546][ T5092] alloc_slab_page+0x5f/0x120 [ 62.926203][ T5092] allocate_slab+0x5a/0x2f0 [ 62.930689][ T5092] ___slab_alloc+0xcd1/0x14b0 [ 62.935352][ T5092] __slab_alloc+0x58/0xa0 [ 62.939667][ T5092] kmalloc_trace_noprof+0x1d5/0x2c0 [ 62.944850][ T5092] rxrpc_alloc_connection+0x7b/0x560 [ 62.950120][ T5092] rxrpc_prealloc_service_connection+0x26/0x300 [ 62.956348][ T5092] rxrpc_service_prealloc_one+0x2cb/0xd70 [ 62.962054][ T5092] rxrpc_kernel_charge_accept+0xd2/0x100 [ 62.967673][ T5092] afs_charge_preallocation+0xba/0x2c0 [ 62.973118][ T5092] afs_open_socket+0x459/0x610 [ 62.977869][ T5092] afs_net_init+0x7b9/0x9a0 [ 62.982355][ T5092] ops_init+0x359/0x610 [ 62.986499][ T5092] page last free pid 1 tgid 1 stack trace: [ 62.992282][ T5092] free_unref_page+0xd19/0xea0 [ 62.997031][ T5092] free_contig_range+0x9e/0x160 [ 63.001868][ T5092] destroy_args+0x8a/0x890 [ 63.006274][ T5092] debug_vm_pgtable+0x4be/0x550 [ 63.011112][ T5092] do_one_initcall+0x248/0x880 [ 63.015861][ T5092] do_initcall_level+0x157/0x210 [ 63.020779][ T5092] do_initcalls+0x3f/0x80 [ 63.025088][ T5092] kernel_init_freeable+0x435/0x5d0 [ 63.030267][ T5092] kernel_init+0x1d/0x2b0 [ 63.034586][ T5092] ret_from_fork+0x4b/0x80 [ 63.038989][ T5092] ret_from_fork_asm+0x1a/0x30 [ 63.043739][ T5092] [ 63.046045][ T5092] Memory state around the buggy address: [ 63.051655][ T5092] ffff88807538e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.059695][ T5092] ffff88807538e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.067739][ T5092] >ffff88807538e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.075775][ T5092] ^ [ 63.082686][ T5092] ffff88807538e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.090726][ T5092] ffff88807538e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.098766][ T5092] ================================================================== [ 63.106807][ T5092] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 63.113981][ T5092] CPU: 1 PID: 5092 Comm: kworker/u9:2 Tainted: G W 6.10.0-syzkaller-01193-g408323581b72 #0 [ 63.125330][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.135368][ T5092] Workqueue: hci1 hci_rx_work [ 63.140042][ T5092] Call Trace: [ 63.143309][ T5092] [ 63.146231][ T5092] dump_stack_lvl+0x241/0x360 [ 63.150896][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.156085][ T5092] ? __pfx__printk+0x10/0x10 [ 63.160679][ T5092] ? rcu_is_watching+0x15/0xb0 [ 63.165438][ T5092] ? lock_release+0xbf/0x9f0 [ 63.170028][ T5092] ? vscnprintf+0x5d/0x90 [ 63.174355][ T5092] panic+0x349/0x860 [ 63.178255][ T5092] ? check_panic_on_warn+0x21/0xb0 [ 63.183361][ T5092] ? __pfx_panic+0x10/0x10 [ 63.187763][ T5092] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.192957][ T5092] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.198837][ T5092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 63.205156][ T5092] ? print_report+0x502/0x550 [ 63.209824][ T5092] check_panic_on_warn+0x86/0xb0 [ 63.214751][ T5092] ? __lock_acquire+0x78/0x1fd0 [ 63.219588][ T5092] end_report+0x77/0x160 [ 63.223833][ T5092] kasan_report+0x154/0x180 [ 63.228337][ T5092] ? __lock_acquire+0x78/0x1fd0 [ 63.233179][ T5092] __lock_acquire+0x78/0x1fd0 [ 63.237848][ T5092] ? dump_stack_lvl+0x301/0x360 [ 63.242693][ T5092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.247879][ T5092] lock_acquire+0x1ed/0x550 [ 63.252372][ T5092] ? lock_sock_nested+0x6a/0x100 [ 63.257304][ T5092] ? __pfx_lock_acquire+0x10/0x10 [ 63.262317][ T5092] ? lock_sock_nested+0x6a/0x100 [ 63.267245][ T5092] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 63.273039][ T5092] ? __pfx_lock_release+0x10/0x10 [ 63.278051][ T5092] ? do_raw_spin_lock+0x14f/0x370 [ 63.283114][ T5092] ? lock_sock_nested+0x6a/0x100 [ 63.288042][ T5092] _raw_spin_lock_bh+0x35/0x50 [ 63.292801][ T5092] ? lock_sock_nested+0x6a/0x100 [ 63.297725][ T5092] lock_sock_nested+0x6a/0x100 [ 63.302479][ T5092] sco_connect_cfm+0x461/0xb40 [ 63.307235][ T5092] ? __pfx_sco_connect_cfm+0x10/0x10 [ 63.312508][ T5092] ? hci_conn_add_sysfs+0xfc/0x200 [ 63.317611][ T5092] ? __pfx_sco_connect_cfm+0x10/0x10 [ 63.322878][ T5092] hci_sync_conn_complete_evt+0x5ab/0xaa0 [ 63.328585][ T5092] hci_event_packet+0xac0/0x1540 [ 63.333529][ T5092] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 63.339769][ T5092] ? __pfx_hci_event_packet+0x10/0x10 [ 63.345129][ T5092] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.350333][ T5092] ? kcov_remote_start+0x9e/0x7e0 [ 63.355373][ T5092] ? hci_send_to_monitor+0xd8/0x7f0 [ 63.360564][ T5092] ? skb_dequeue+0x113/0x150 [ 63.365145][ T5092] hci_rx_work+0x3e8/0xca0 [ 63.369554][ T5092] ? process_scheduled_works+0x945/0x1830 [ 63.375257][ T5092] process_scheduled_works+0xa2c/0x1830 [ 63.380798][ T5092] ? __pfx_process_scheduled_works+0x10/0x10 [ 63.386768][ T5092] ? assign_work+0x364/0x3d0 [ 63.391343][ T5092] worker_thread+0x86d/0xd40 [ 63.395924][ T5092] ? __kthread_parkme+0x169/0x1d0 [ 63.400934][ T5092] ? __pfx_worker_thread+0x10/0x10 [ 63.406034][ T5092] kthread+0x2f0/0x390 [ 63.410093][ T5092] ? __pfx_worker_thread+0x10/0x10 [ 63.415189][ T5092] ? __pfx_kthread+0x10/0x10 [ 63.419767][ T5092] ret_from_fork+0x4b/0x80 [ 63.424185][ T5092] ? __pfx_kthread+0x10/0x10 [ 63.428760][ T5092] ret_from_fork_asm+0x1a/0x30 [ 63.433519][ T5092] [ 63.436725][ T5092] Kernel Offset: disabled [ 63.441036][ T5092] Rebooting in 86400 seconds..