./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3577821206 <...> Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. execve("./syz-executor3577821206", ["./syz-executor3577821206"], 0x7ffdd7449370 /* 10 vars */) = 0 brk(NULL) = 0x55557e793000 brk(0x55557e793d00) = 0x55557e793d00 arch_prctl(ARCH_SET_FS, 0x55557e793380) = 0 set_tid_address(0x55557e793650) = 5836 set_robust_list(0x55557e793660, 24) = 0 rseq(0x55557e793ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3577821206", 4096) = 28 getrandom("\x09\x98\xb8\x58\x63\x18\x49\xc0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e793d00 brk(0x55557e7b4d00) = 0x55557e7b4d00 brk(0x55557e7b5000) = 0x55557e7b5000 mprotect(0x7fe8999b1000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5837 attached , child_tidptr=0x55557e793650) = 5837 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5837] set_robust_list(0x55557e793660, 24) = 0 [pid 5837] mkdir("./syzkaller.Wo8DDj", 0700./strace-static-x86_64: Process 5838 attached ) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55557e793650) = 5838 [pid 5838] set_robust_list(0x55557e793660, 24 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5837] chmod("./syzkaller.Wo8DDj", 0777 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5837] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5839 attached [pid 5837] chdir("./syzkaller.Wo8DDj" [pid 5836] <... clone resumed>, child_tidptr=0x55557e793650) = 5839 [pid 5839] set_robust_list(0x55557e793660, 24 [pid 5838] getrandom( [pid 5837] <... chdir resumed>) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5839] <... set_robust_list resumed>) = 0 [pid 5837] unshare(CLONE_NEWPID [pid 5838] <... getrandom resumed>"\xb4\x39\x42\xf7\xfe\x24\x07\x16", 8, GRND_NONBLOCK) = 8 [pid 5837] <... unshare resumed>) = 0 ./strace-static-x86_64: Process 5840 attached [pid 5839] mkdir("./syzkaller.auHHPq", 0700 [pid 5838] mkdir("./syzkaller.SuqaRI", 0700 [pid 5836] <... clone resumed>, child_tidptr=0x55557e793650) = 5840 [pid 5839] <... mkdir resumed>) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... mkdir resumed>) = 0 [pid 5840] set_robust_list(0x55557e793660, 24 [pid 5838] chmod("./syzkaller.SuqaRI", 0777./strace-static-x86_64: Process 5841 attached [pid 5840] <... set_robust_list resumed>) = 0 [pid 5840] mkdir("./syzkaller.KaxaD4", 0700 [pid 5839] chmod("./syzkaller.auHHPq", 0777./strace-static-x86_64: Process 5842 attached ) = 0 [pid 5839] chdir("./syzkaller.auHHPq") = 0 [pid 5839] unshare(CLONE_NEWPID) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55557e793650) = 5841 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached [pid 5842] set_robust_list(0x55557e793660, 24 [pid 5841] set_robust_list(0x55557e793660, 24 [pid 5840] <... mkdir resumed>) = 0 [pid 5838] <... chmod resumed>) = 0 [pid 5837] <... clone resumed>, child_tidptr=0x55557e793650) = 5842 [pid 5843] set_robust_list(0x55557e793660, 24 [pid 5842] <... set_robust_list resumed>) = 0 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5840] chmod("./syzkaller.KaxaD4", 0777 [pid 5839] <... clone resumed>, child_tidptr=0x55557e793650) = 5843 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5838] chdir("./syzkaller.SuqaRI" [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] <... prctl resumed>) = 0 [pid 5838] <... chdir resumed>) = 0 [pid 5842] getppid( [pid 5843] <... prctl resumed>) = 0 [pid 5842] <... getppid resumed>) = 0 [pid 5843] getppid( [pid 5842] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5840] <... chmod resumed>) = 0 [pid 5841] mkdir("./syzkaller.F4awre", 0700 [pid 5838] unshare(CLONE_NEWPID [pid 5843] <... getppid resumed>) = 0 [pid 5842] <... prlimit64 resumed>NULL) = 0 [pid 5843] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5842] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5843] <... prlimit64 resumed>NULL) = 0 [pid 5842] <... prlimit64 resumed>NULL) = 0 [pid 5843] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5842] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5843] <... prlimit64 resumed>NULL) = 0 [pid 5842] <... prlimit64 resumed>NULL) = 0 [pid 5843] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5842] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5843] <... prlimit64 resumed>NULL) = 0 [pid 5842] <... prlimit64 resumed>NULL) = 0 [pid 5843] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5842] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5843] <... prlimit64 resumed>NULL) = 0 [pid 5842] <... prlimit64 resumed>NULL) = 0 [pid 5838] <... unshare resumed>) = 0 [pid 5843] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5842] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5843] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5842] <... prlimit64 resumed>NULL) = 0 [pid 5843] <... prlimit64 resumed>NULL) = 0 [pid 5842] unshare(CLONE_NEWNS [pid 5841] <... mkdir resumed>) = 0 [pid 5840] chdir("./syzkaller.KaxaD4" [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] unshare(CLONE_NEWNS [pid 5842] <... unshare resumed>) = 0 [pid 5843] <... unshare resumed>) = 0 [pid 5842] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5841] chmod("./syzkaller.F4awre", 0777 [pid 5840] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5844 attached [pid 5843] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5842] <... mount resumed>) = 0 [pid 5840] unshare(CLONE_NEWPID [pid 5844] set_robust_list(0x55557e793660, 24 [pid 5841] <... chmod resumed>) = 0 [pid 5840] <... unshare resumed>) = 0 [pid 5838] <... clone resumed>, child_tidptr=0x55557e793650) = 5844 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5841] chdir("./syzkaller.F4awre" [pid 5840] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] unshare(CLONE_NEWIPC) = 0 ./strace-static-x86_64: Process 5845 attached [pid 5843] <... mount resumed>) = 0 [pid 5843] unshare(CLONE_NEWIPC [pid 5845] set_robust_list(0x55557e793660, 24 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] <... unshare resumed>) = 0 [pid 5842] unshare(CLONE_NEWCGROUP [pid 5841] <... chdir resumed>) = 0 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] <... prctl resumed>) = 0 [pid 5841] unshare(CLONE_NEWPID [pid 5840] <... clone resumed>, child_tidptr=0x55557e793650) = 5845 [pid 5843] unshare(CLONE_NEWCGROUP [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] getppid( [pid 5842] <... unshare resumed>) = 0 [pid 5841] <... unshare resumed>) = 0 [pid 5844] <... getppid resumed>) = 0 [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] unshare(CLONE_NEWUTS [pid 5843] <... unshare resumed>) = 0 [pid 5843] unshare(CLONE_NEWUTS) = 0 [pid 5843] unshare(CLONE_SYSVSEM) = 0 ./strace-static-x86_64: Process 5846 attached [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5842] <... unshare resumed>) = 0 [pid 5845] <... prctl resumed>) = 0 [pid 5844] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5846] set_robust_list(0x55557e793660, 24 [pid 5845] getppid( [pid 5844] <... prlimit64 resumed>NULL) = 0 [pid 5842] unshare(CLONE_SYSVSEM [pid 5841] <... clone resumed>, child_tidptr=0x55557e793650) = 5846 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5842] <... unshare resumed>) = 0 [pid 5845] <... getppid resumed>) = 0 [pid 5844] <... prlimit64 resumed>NULL) = 0 [pid 5846] <... prctl resumed>) = 0 [pid 5843] write(3, "16777216", 8 [pid 5846] getppid( [pid 5845] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5844] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5843] <... write resumed>) = 8 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5846] <... getppid resumed>) = 0 [pid 5845] <... prlimit64 resumed>NULL) = 0 [pid 5844] <... prlimit64 resumed>NULL) = 0 [pid 5843] close(3 [pid 5846] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5843] <... close resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5846] <... prlimit64 resumed>NULL) = 0 [pid 5845] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5844] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5843] <... openat resumed>) = 3 [pid 5842] <... openat resumed>) = 3 [pid 5845] <... prlimit64 resumed>NULL) = 0 [pid 5844] <... prlimit64 resumed>NULL) = 0 [pid 5845] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5842] write(3, "16777216", 8 [pid 5845] <... prlimit64 resumed>NULL) = 0 [pid 5844] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5845] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5844] <... prlimit64 resumed>NULL) = 0 [pid 5842] <... write resumed>) = 8 [pid 5845] <... prlimit64 resumed>NULL) = 0 [pid 5844] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5842] close(3 [pid 5845] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5844] <... prlimit64 resumed>NULL) = 0 [pid 5846] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5845] <... prlimit64 resumed>NULL) = 0 [pid 5844] unshare(CLONE_NEWNS [pid 5843] write(3, "536870912", 9 [pid 5842] <... close resumed>) = 0 [pid 5846] <... prlimit64 resumed>NULL) = 0 [pid 5845] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5843] <... write resumed>) = 9 [pid 5846] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5843] close(3 [pid 5846] <... prlimit64 resumed>NULL) = 0 [pid 5843] <... close resumed>) = 0 [pid 5846] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5846] <... prlimit64 resumed>NULL) = 0 [pid 5845] <... prlimit64 resumed>NULL) = 0 [pid 5844] <... unshare resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5846] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5845] unshare(CLONE_NEWNS [pid 5846] <... prlimit64 resumed>NULL) = 0 [pid 5843] write(3, "1024", 4 [pid 5846] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5843] <... write resumed>) = 4 [pid 5846] <... prlimit64 resumed>NULL) = 0 [pid 5846] unshare(CLONE_NEWNS [pid 5843] close(3 [pid 5846] <... unshare resumed>) = 0 [pid 5845] <... unshare resumed>) = 0 [pid 5844] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5842] <... openat resumed>) = 3 [pid 5846] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5845] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5843] <... close resumed>) = 0 [pid 5842] write(3, "536870912", 9 [pid 5846] <... mount resumed>) = 0 [pid 5845] <... mount resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5842] <... write resumed>) = 9 [pid 5846] unshare(CLONE_NEWIPC [pid 5845] unshare(CLONE_NEWIPC [pid 5844] <... mount resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5842] close(3 [pid 5846] <... unshare resumed>) = 0 [pid 5845] <... unshare resumed>) = 0 [pid 5843] write(3, "8192", 4 [pid 5845] unshare(CLONE_NEWCGROUP [pid 5844] unshare(CLONE_NEWIPC [pid 5842] <... close resumed>) = 0 [pid 5846] unshare(CLONE_NEWCGROUP [pid 5843] <... write resumed>) = 4 [pid 5846] <... unshare resumed>) = 0 [pid 5843] close(3) = 0 [pid 5846] unshare(CLONE_NEWUTS [pid 5844] <... unshare resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5846] <... unshare resumed>) = 0 [pid 5845] <... unshare resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5846] unshare(CLONE_SYSVSEM [pid 5843] <... openat resumed>) = 3 [pid 5842] <... openat resumed>) = 3 [pid 5846] <... unshare resumed>) = 0 [pid 5842] write(3, "1024", 4 [pid 5845] unshare(CLONE_NEWUTS [pid 5842] <... write resumed>) = 4 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5845] <... unshare resumed>) = 0 [pid 5844] unshare(CLONE_NEWCGROUP [pid 5842] close(3 [pid 5845] unshare(CLONE_SYSVSEM [pid 5843] write(3, "1024", 4 [pid 5846] <... openat resumed>) = 3 [pid 5845] <... unshare resumed>) = 0 [pid 5844] <... unshare resumed>) = 0 [pid 5843] <... write resumed>) = 4 [pid 5842] <... close resumed>) = 0 [pid 5843] close(3 [pid 5846] write(3, "16777216", 8 [pid 5843] <... close resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5846] <... write resumed>) = 8 [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5846] close(3 [pid 5844] unshare(CLONE_NEWUTS [pid 5843] <... openat resumed>) = 3 [pid 5842] <... openat resumed>) = 3 [pid 5846] <... close resumed>) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5844] <... unshare resumed>) = 0 [pid 5842] write(3, "8192", 4 [pid 5845] write(3, "16777216", 8 [pid 5844] unshare(CLONE_SYSVSEM [pid 5842] <... write resumed>) = 4 [pid 5844] <... unshare resumed>) = 0 [pid 5845] <... write resumed>) = 8 [pid 5842] close(3 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5843] write(3, "1024", 4 [pid 5846] <... openat resumed>) = 3 [pid 5845] close(3 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5843] <... write resumed>) = 4 [pid 5842] <... close resumed>) = 0 [pid 5846] write(3, "536870912", 9 [pid 5845] <... close resumed>) = 0 [pid 5843] close(3 [pid 5846] <... write resumed>) = 9 [pid 5844] <... openat resumed>) = 3 [pid 5843] <... close resumed>) = 0 [pid 5846] close(3 [pid 5843] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5846] <... close resumed>) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5844] write(3, "16777216", 8 [pid 5843] <... openat resumed>) = 3 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5843] write(3, "1024 1048576 500 1024", 21 [pid 5846] <... openat resumed>) = 3 [pid 5845] <... openat resumed>) = 3 [pid 5843] <... write resumed>) = 21 [pid 5844] <... write resumed>) = 8 [pid 5842] <... openat resumed>) = 3 [pid 5844] close(3 [pid 5843] close(3 [pid 5846] write(3, "1024", 4 [pid 5845] write(3, "536870912", 9 [pid 5844] <... close resumed>) = 0 [pid 5843] <... close resumed>) = 0 [pid 5842] write(3, "1024", 4 [pid 5846] <... write resumed>) = 4 [pid 5842] <... write resumed>) = 4 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5842] close(3 [pid 5845] <... write resumed>) = 9 [pid 5846] close(3 [pid 5843] getpid( [pid 5842] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5843] <... getpid resumed>) = 1 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5843] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5846] <... openat resumed>) = 3 [pid 5843] <... capget resumed>{effective=1< [pid 5844] <... openat resumed>) = 3 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5845] <... close resumed>) = 0 [pid 5844] write(3, "536870912", 9 [pid 5843] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5844] <... write resumed>) = 9 [pid 5843] <... capset resumed>) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5846] write(3, "8192", 4 [pid 5843] unshare(CLONE_NEWNET [pid 5846] <... write resumed>) = 4 [pid 5845] <... openat resumed>) = 3 [pid 5844] close(3 [pid 5842] write(3, "1024", 4 [pid 5845] write(3, "1024", 4 [pid 5844] <... close resumed>) = 0 [pid 5845] <... write resumed>) = 4 [pid 5842] <... write resumed>) = 4 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5845] close(3 [pid 5842] close(3 [pid 5846] close(3 [pid 5842] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] <... close resumed>) = 0 [pid 5844] <... openat resumed>) = 3 [pid 5842] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5844] write(3, "1024", 4 [pid 5846] write(3, "1024", 4) = 4 [pid 5842] <... openat resumed>) = 3 [pid 5844] <... write resumed>) = 4 [pid 5846] close(3) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5844] close(3 [pid 5842] write(3, "1024 1048576 500 1024", 21 [pid 5845] write(3, "8192", 4 [pid 5844] <... close resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5845] <... write resumed>) = 4 [pid 5842] <... write resumed>) = 21 [pid 5846] <... openat resumed>) = 3 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5846] write(3, "1024", 4 [pid 5842] close(3 [pid 5846] <... write resumed>) = 4 [pid 5846] close(3 [pid 5844] <... openat resumed>) = 3 [pid 5846] <... close resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5844] write(3, "8192", 4 [pid 5846] <... openat resumed>) = 3 [pid 5845] close(3 [pid 5842] getpid( [pid 5846] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5846] close(3) = 0 [pid 5846] getpid( [pid 5842] <... getpid resumed>) = 1 [pid 5846] <... getpid resumed>) = 1 [pid 5845] <... close resumed>) = 0 [pid 5842] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5846] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5844] <... write resumed>) = 4 [pid 5842] <... capget resumed>{effective=1<{effective=1< [pid 5842] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5846] <... capset resumed>) = 0 [pid 5846] unshare(CLONE_NEWNET [pid 5842] <... capset resumed>) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5844] close(3 [pid 5842] unshare(CLONE_NEWNET [pid 5844] <... close resumed>) = 0 [pid 5845] write(3, "1024", 4) = 4 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5845] close(3) = 0 [pid 5844] <... openat resumed>) = 3 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5844] write(3, "1024", 4) = 4 [pid 5844] close(3 [pid 5845] <... openat resumed>) = 3 [pid 5844] <... close resumed>) = 0 [pid 5845] write(3, "1024", 4 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5845] <... write resumed>) = 4 [pid 5845] close(3 [pid 5844] <... openat resumed>) = 3 [pid 5845] <... close resumed>) = 0 [pid 5844] write(3, "1024", 4 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5844] <... write resumed>) = 4 [pid 5845] <... openat resumed>) = 3 [pid 5845] write(3, "1024 1048576 500 1024", 21 [pid 5844] close(3 [pid 5845] <... write resumed>) = 21 [pid 5844] <... close resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] close(3 [pid 5844] write(3, "1024 1048576 500 1024", 21 [pid 5845] <... close resumed>) = 0 [pid 5844] <... write resumed>) = 21 [pid 5844] close(3 [pid 5845] getpid() = 1 [pid 5844] <... close resumed>) = 0 [pid 5845] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5844] getpid( [pid 5845] <... capget resumed>{effective=1<) = 1 [pid 5845] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5844] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5845] <... capset resumed>) = 0 [pid 5844] <... capget resumed>{effective=1< [pid 5844] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5843] <... unshare resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "0 65535", 7) = 7 [pid 5843] close(3) = 0 [pid 5843] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 5843] dup2(3, 200) = 200 [pid 5843] close(3) = 0 [pid 5843] ioctl(200, TUNSETIFF, 0x7ffcd7ef3ef0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "0", 1) = 1 [pid 5843] close(3) = 0 [pid 5843] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "0", 1) = 1 [pid 5843] close(3) = 0 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5843] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5843] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5843] close(4) = 0 [pid 5843] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] <... unshare resumed>) = 0 [pid 5842] <... unshare resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5845] <... unshare resumed>) = 0 [pid 5843] <... sendto resumed>) = 40 [pid 5842] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5846] <... openat resumed>) = 3 [pid 5843] recvfrom(3, [pid 5842] <... openat resumed>) = 3 [pid 5843] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] write(3, "0 65535", 7 [pid 5846] write(3, "0 65535", 7 [pid 5845] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5843] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5842] <... write resumed>) = 7 [pid 5846] <... write resumed>) = 7 [pid 5842] close(3 [pid 5846] close(3 [pid 5843] <... socket resumed>) = 4 [pid 5842] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5843] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5842] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5846] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5845] <... openat resumed>) = 3 [pid 5843] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5846] <... openat resumed>) = 3 [pid 5843] close(4 [pid 5842] dup2(3, 200) = 200 [pid 5846] dup2(3, 200 [pid 5845] write(3, "0 65535", 7 [pid 5843] <... close resumed>) = 0 [pid 5842] close(3 [pid 5846] <... dup2 resumed>) = 200 [pid 5845] <... write resumed>) = 7 [pid 5843] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5842] <... close resumed>) = 0 [pid 5846] close(3 [pid 5845] close(3 [pid 5842] ioctl(200, TUNSETIFF, 0x7ffcd7ef3ef0 [pid 5846] <... close resumed>) = 0 [pid 5846] ioctl(200, TUNSETIFF, 0x7ffcd7ef3ef0 [pid 5845] <... close resumed>) = 0 [pid 5845] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 5845] dup2(3, 200) = 200 [pid 5845] close(3) = 0 [pid 5845] ioctl(200, TUNSETIFF, 0x7ffcd7ef3ef0 [pid 5843] <... sendto resumed>) = 64 [pid 5842] <... ioctl resumed>) = 0 [pid 5843] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5843] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5843] close(4) = 0 [pid 5842] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5843] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] <... ioctl resumed>) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5842] write(3, "0", 1) = 1 [pid 5846] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5845] <... ioctl resumed>) = 0 [pid 5844] <... unshare resumed>) = 0 [pid 5843] <... sendto resumed>) = 48 [pid 5842] close(3 [pid 5845] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5843] recvfrom(3, [pid 5846] <... openat resumed>) = 3 [pid 5845] <... openat resumed>) = 3 [pid 5844] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5843] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] <... close resumed>) = 0 [pid 5846] write(3, "0", 1 [pid 5845] write(3, "0", 1 [pid 5844] <... openat resumed>) = 3 [pid 5843] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5842] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5846] <... write resumed>) = 1 [pid 5845] <... write resumed>) = 1 [pid 5843] <... socket resumed>) = 4 [pid 5845] close(3 [pid 5843] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5846] close(3 [pid 5845] <... close resumed>) = 0 [pid 5844] write(3, "0 65535", 7 [pid 5843] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5846] <... close resumed>) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5844] <... write resumed>) = 7 [pid 5843] close(4 [pid 5842] write(3, "0", 1 [pid 5846] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5845] <... openat resumed>) = 3 [pid 5844] close(3 [pid 5843] <... close resumed>) = 0 [pid 5846] <... openat resumed>) = 3 [pid 5845] write(3, "0", 1 [pid 5844] <... close resumed>) = 0 [pid 5843] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5842] <... write resumed>) = 1 [pid 5846] write(3, "0", 1 [pid 5845] <... write resumed>) = 1 [pid 5844] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5843] <... sendto resumed>) = 60 [pid 5842] close(3 [pid 5846] <... write resumed>) = 1 [pid 5845] close(3 [pid 5843] recvfrom(3, [pid 5846] close(3 [pid 5845] <... close resumed>) = 0 [pid 5843] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5845] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5844] <... openat resumed>) = 3 [pid 5843] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5845] <... socket resumed>) = 3 [pid 5843] <... socket resumed>) = 4 [pid 5845] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5843] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5842] <... socket resumed>) = 3 [pid 5846] <... socket resumed>) = 3 [pid 5845] <... socket resumed>) = 4 [pid 5844] dup2(3, 200 [pid 5843] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] close(4 [pid 5842] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5846] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5844] <... dup2 resumed>) = 200 [pid 5843] <... close resumed>) = 0 [pid 5846] <... socket resumed>) = 4 [pid 5845] close(4 [pid 5844] close(3 [pid 5843] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5842] <... socket resumed>) = 4 [pid 5846] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5845] <... close resumed>) = 0 [pid 5844] <... close resumed>) = 0 [pid 5846] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5844] ioctl(200, TUNSETIFF, 0x7ffcd7ef3ef0 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5846] close(4 [pid 5845] <... sendto resumed>) = 40 [pid 5843] <... sendto resumed>) = 44 [pid 5842] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5846] <... close resumed>) = 0 [pid 5845] recvfrom(3, [pid 5844] <... ioctl resumed>) = 0 [pid 5843] recvfrom(3, [pid 5846] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5845] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] close(4 [pid 5846] <... sendto resumed>) = 40 [pid 5844] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5843] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] recvfrom(3, [pid 5845] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5844] <... openat resumed>) = 3 [pid 5843] close(3 [pid 5842] <... close resumed>) = 0 [pid 5845] <... socket resumed>) = 4 [pid 5843] <... close resumed>) = 0 [pid 5845] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5846] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5846] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] close(4 [pid 5844] write(3, "0", 1 [pid 5843] write(3, "100000", 6 [pid 5842] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] <... socket resumed>) = 4 [pid 5845] <... close resumed>) = 0 [pid 5844] <... write resumed>) = 1 [pid 5843] <... write resumed>) = 6 [pid 5845] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5843] close(3 [pid 5846] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5844] close(3 [pid 5843] <... close resumed>) = 0 [pid 5842] <... sendto resumed>) = 40 [pid 5846] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] <... sendto resumed>) = 64 [pid 5844] <... close resumed>) = 0 [pid 5843] mkdir("./syz-tmp", 0777 [pid 5846] close(4 [pid 5844] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5843] <... mkdir resumed>) = 0 [pid 5842] recvfrom(3, [pid 5845] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] <... close resumed>) = 0 [pid 5845] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5844] <... openat resumed>) = 3 [pid 5843] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5842] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5845] <... socket resumed>) = 4 [pid 5844] write(3, "0", 1 [pid 5843] <... mount resumed>) = 0 [pid 5845] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] mkdir("./syz-tmp/newroot", 0777 [pid 5842] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5846] <... sendto resumed>) = 64 [pid 5845] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5844] <... write resumed>) = 1 [pid 5843] <... mkdir resumed>) = 0 [pid 5842] <... socket resumed>) = 4 [pid 5845] close(4 [pid 5843] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5845] <... close resumed>) = 0 [pid 5845] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] recvfrom(3, [pid 5845] <... sendto resumed>) = 48 [pid 5844] close(3 [pid 5843] <... mkdir resumed>) = 0 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5846] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] recvfrom(3, [pid 5844] <... close resumed>) = 0 [pid 5843] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5846] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5843] <... mount resumed>) = 0 [pid 5842] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5846] <... socket resumed>) = 4 [pid 5845] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5846] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5845] <... socket resumed>) = 4 [pid 5844] <... socket resumed>) = 3 [pid 5843] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5842] close(4 [pid 5846] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5844] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5843] <... mkdir resumed>) = 0 [pid 5845] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5842] <... close resumed>) = 0 [pid 5846] close(4 [pid 5845] close(4 [pid 5844] <... socket resumed>) = 4 [pid 5842] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] <... close resumed>) = 0 [pid 5845] <... close resumed>) = 0 [pid 5844] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5845] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5843] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5846] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5845] <... sendto resumed>) = 60 [pid 5844] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5843] <... mount resumed>) = 0 [pid 5842] <... sendto resumed>) = 64 [pid 5845] recvfrom(3, [pid 5844] close(4 [pid 5843] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5845] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] <... mkdir resumed>) = 0 [pid 5846] <... sendto resumed>) = 48 [pid 5845] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5844] <... close resumed>) = 0 [pid 5842] recvfrom(3, [pid 5846] recvfrom(3, [pid 5845] <... socket resumed>) = 4 [pid 5846] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5846] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5844] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5842] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] <... socket resumed>) = 4 [pid 5846] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5845] close(4 [pid 5844] <... sendto resumed>) = 40 [pid 5843] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5845] <... close resumed>) = 0 [pid 5843] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5846] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5844] recvfrom(3, [pid 5843] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5846] close(4 [pid 5842] <... socket resumed>) = 4 [pid 5846] <... close resumed>) = 0 [pid 5844] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5845] <... sendto resumed>) = 44 [pid 5844] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5843] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5846] <... sendto resumed>) = 60 [pid 5845] recvfrom(3, [pid 5844] <... socket resumed>) = 4 [pid 5843] <... mkdir resumed>) = 0 [pid 5846] recvfrom(3, [pid 5845] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5844] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5846] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] close(3 [pid 5844] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5843] <... mount resumed>) = 0 [pid 5842] close(4 [pid 5846] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] <... close resumed>) = 0 [pid 5844] close(4 [pid 5845] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5842] <... close resumed>) = 0 [pid 5846] <... socket resumed>) = 4 [pid 5845] <... openat resumed>) = 3 [pid 5844] <... close resumed>) = 0 [pid 5843] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5844] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5843] <... mount resumed>) = 0 [pid 5846] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] write(3, "100000", 6 [pid 5843] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] <... sendto resumed>) = 48 [pid 5846] close(4 [pid 5845] <... write resumed>) = 6 [pid 5843] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5845] close(3 [pid 5844] <... sendto resumed>) = 64 [pid 5843] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5845] <... close resumed>) = 0 [pid 5843] <... mount resumed>) = 0 [pid 5845] mkdir("./syz-tmp", 0777 [pid 5846] <... close resumed>) = 0 [pid 5845] <... mkdir resumed>) = 0 [pid 5844] recvfrom(3, [pid 5842] recvfrom(3, [pid 5846] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5845] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5844] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] <... mount resumed>) = 0 [pid 5843] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5842] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5844] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 5844] <... socket resumed>) = 4 [pid 5843] <... mkdir resumed>) = 0 [pid 5842] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5845] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5843] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5845] <... mkdir resumed>) = 0 [pid 5844] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5842] <... socket resumed>) = 4 [pid 5845] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5844] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] mkdir("./syz-tmp/pivot", 0777 [pid 5846] <... sendto resumed>) = 44 [pid 5844] close(4 [pid 5843] <... mkdir resumed>) = 0 [pid 5842] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5845] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5842] close(4 [pid 5845] <... mkdir resumed>) = 0 [pid 5843] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5846] recvfrom(3, [pid 5844] <... close resumed>) = 0 [pid 5843] <... pivot_root resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5845] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5846] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] <... mount resumed>) = 0 [pid 5844] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5842] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] close(3 [pid 5844] <... sendto resumed>) = 48 [pid 5845] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5843] chdir("/" [pid 5846] <... close resumed>) = 0 [pid 5845] <... mkdir resumed>) = 0 [pid 5844] recvfrom(3, [pid 5843] <... chdir resumed>) = 0 [pid 5842] <... sendto resumed>) = 60 [pid 5846] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5845] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5843] umount2("./pivot", MNT_DETACH [pid 5846] <... openat resumed>) = 3 [pid 5845] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5844] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] recvfrom(3, [pid 5846] write(3, "100000", 6 [pid 5845] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5843] <... umount2 resumed>) = 0 [pid 5846] <... write resumed>) = 6 [pid 5845] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5844] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5843] chroot("./newroot" [pid 5842] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] close(3 [pid 5845] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5844] <... socket resumed>) = 4 [pid 5843] <... chroot resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5845] <... mkdir resumed>) = 0 [pid 5844] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] chdir("/" [pid 5842] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5846] mkdir("./syz-tmp", 0777 [pid 5845] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5843] <... chdir resumed>) = 0 [pid 5845] <... mount resumed>) = 0 [pid 5844] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5843] mkdir("/dev/gadgetfs", 0777 [pid 5842] <... socket resumed>) = 4 [pid 5843] <... mkdir resumed>) = 0 [pid 5845] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5843] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5846] <... mkdir resumed>) = 0 [pid 5845] <... mount resumed>) = 0 [pid 5844] close(4 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5844] <... close resumed>) = 0 [pid 5844] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5845] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5844] <... sendto resumed>) = 60 [pid 5843] <... mount resumed>) = 0 [pid 5842] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5846] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5844] recvfrom(3, [pid 5842] close(4 [pid 5845] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5844] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] mkdir("/dev/binderfs", 0777 [pid 5846] <... mount resumed>) = 0 [pid 5845] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] <... close resumed>) = 0 [pid 5846] mkdir("./syz-tmp/newroot", 0777 [pid 5845] <... mount resumed>) = 0 [pid 5844] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5843] <... mkdir resumed>) = 0 [pid 5842] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] <... mkdir resumed>) = 0 [pid 5844] <... socket resumed>) = 4 [pid 5845] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5843] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5846] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5845] <... mkdir resumed>) = 0 [pid 5844] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5843] <... mount resumed>) = 0 [pid 5845] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5844] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5846] <... mkdir resumed>) = 0 [pid 5844] close(4 [pid 5845] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 5845] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5846] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5844] <... close resumed>) = 0 [pid 5845] <... pivot_root resumed>) = 0 [pid 5844] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5846] <... mount resumed>) = 0 [pid 5845] chdir("/" [pid 5843] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5842] <... sendto resumed>) = 44 [pid 5845] <... chdir resumed>) = 0 [pid 5843] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5845] umount2("./pivot", MNT_DETACH [pid 5842] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5845] <... umount2 resumed>) = 0 [pid 5844] <... sendto resumed>) = 44 [pid 5845] chroot("./newroot" [pid 5843] mkdir("./0", 0777 [pid 5842] close(3 [pid 5846] <... mkdir resumed>) = 0 [pid 5845] <... chroot resumed>) = 0 [pid 5844] recvfrom(3, [pid 5843] <... mkdir resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5846] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5845] chdir("/" [pid 5844] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5853 attached [pid 5846] <... mount resumed>) = 0 [pid 5845] <... chdir resumed>) = 0 [pid 5844] close(3 [pid 5842] <... openat resumed>) = 3 [pid 5846] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5845] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 5844] <... close resumed>) = 0 [pid 5845] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5846] <... mkdir resumed>) = 0 [pid 5845] <... mount resumed>) = 0 [pid 5853] set_robust_list(0x55557e793660, 24 [pid 5845] mkdir("/dev/binderfs", 0777 [pid 5842] write(3, "100000", 6 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5846] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5845] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5844] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5843] <... clone resumed>, child_tidptr=0x55557e793650) = 2 [pid 5842] <... write resumed>) = 6 [pid 5845] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5842] close(3 [pid 5853] chdir("./0" [pid 5846] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5845] <... mount resumed>) = 0 [pid 5844] <... openat resumed>) = 3 [pid 5842] <... close resumed>) = 0 [pid 5842] mkdir("./syz-tmp", 0777 [pid 5844] write(3, "100000", 6 [pid 5853] <... chdir resumed>) = 0 [pid 5846] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5844] <... write resumed>) = 6 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5844] close(3 [pid 5853] setpgid(0, 0 [pid 5842] <... mkdir resumed>) = 0 [pid 5853] <... setpgid resumed>) = 0 [pid 5846] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5845] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5844] <... close resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5846] <... mkdir resumed>) = 0 [pid 5845] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5844] mkdir("./syz-tmp", 0777 [pid 5842] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 5844] <... mkdir resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5846] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5845] mkdir("./0", 0777 [pid 5844] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5842] mkdir("./syz-tmp/newroot", 0777 [pid 5853] write(3, "1000", 4 [pid 5846] <... mount resumed>) = 0 [pid 5845] <... mkdir resumed>) = 0 [pid 5853] <... write resumed>) = 4 [pid 5846] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] <... mount resumed>) = 0 [pid 5842] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5854 attached [pid 5853] close(3 [pid 5846] <... mount resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5853] read(200, [pid 5842] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5853] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5846] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] <... mkdir resumed>) = 0 [pid 5853] read(200, [pid 5854] set_robust_list(0x55557e793660, 24) = 0 [pid 5853] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5844] mkdir("./syz-tmp/newroot", 0777 [pid 5853] symlink("/dev/binderfs", "./binderfs" [pid 5846] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5845] <... clone resumed>, child_tidptr=0x55557e793650) = 2 [pid 5844] <... mkdir resumed>) = 0 [pid 5842] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] chdir("./0" [pid 5853] <... symlink resumed>) = 0 [pid 5846] <... mount resumed>) = 0 [pid 5844] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5842] <... mount resumed>) = 0 executing program [pid 5854] <... chdir resumed>) = 0 [pid 5853] write(1, "executing program\n", 18 [pid 5844] <... mkdir resumed>) = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5853] <... write resumed>) = 18 [pid 5846] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5854] <... prctl resumed>) = 0 [pid 5853] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5846] <... mkdir resumed>) = 0 [pid 5844] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5854] setpgid(0, 0 [pid 5853] <... socket resumed>) = 3 [pid 5842] <... mkdir resumed>) = 0 [pid 5854] <... setpgid resumed>) = 0 [pid 5853] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5846] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5844] <... mount resumed>) = 0 [pid 5842] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5853] <... socket resumed>) = 4 [pid 5846] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5854] <... openat resumed>) = 3 [pid 5853] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5846] mkdir("./syz-tmp/pivot", 0777 [pid 5844] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5842] <... mount resumed>) = 0 [pid 5854] write(3, "1000", 4 [pid 5853] <... setsockopt resumed>) = 0 [pid 5846] <... mkdir resumed>) = 0 [pid 5844] <... mkdir resumed>) = 0 [pid 5853] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5854] <... write resumed>) = 4 [pid 5846] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5844] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5842] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5846] <... pivot_root resumed>) = 0 [pid 5844] <... mount resumed>) = 0 [pid 5842] <... mkdir resumed>) = 0 [pid 5854] close(3 [pid 5842] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5846] chdir("/" [pid 5844] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5854] <... close resumed>) = 0 [pid 5846] <... chdir resumed>) = 0 [pid 5842] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5854] read(200, [pid 5853] <... setsockopt resumed>) = 0 [pid 5846] umount2("./pivot", MNT_DETACH [pid 5844] <... mkdir resumed>) = 0 [pid 5842] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5853] setsockopt(3, SOL_IP, IP_ADD_MEMBERSHIP, {imr_multiaddr=inet_addr("224.0.3.0"), imr_interface=inet_addr("172.20.20.170")}, 8 [pid 5846] <... umount2 resumed>) = 0 [pid 5842] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5854] read(200, [pid 5853] <... setsockopt resumed>) = 0 [pid 5846] chroot("./newroot" [pid 5844] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5854] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5842] <... mkdir resumed>) = 0 [pid 5854] read(200, [pid 5846] <... chroot resumed>) = 0 [pid 5842] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5842] <... mount resumed>) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs" [pid 5846] chdir("/" [pid 5844] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... symlink resumed>) = 0 [pid 5853] write(200, "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xbb\x08\x00\x45\x00\x00\x1c\x00\x00\x00\x00\x00\x02\xd7\xe0\x00\x00\x00\x00\xe0\x00\x03\x00\x11\x00\xee\xff\x00\x00\x00\x00", 42 [pid 5846] <... chdir resumed>) = 0 [pid 5844] <... mount resumed>) = -1 ENOENT (No such file or directory) executing program [pid 5854] write(1, "executing program\n", 18 [pid 5853] <... write resumed>) = 42 [pid 5846] mkdir("/dev/gadgetfs", 0777 [pid 5842] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... write resumed>) = 18 [pid 5854] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5846] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5844] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5854] <... socket resumed>) = 3 [pid 5846] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5844] <... mkdir resumed>) = 0 [pid 5846] <... mount resumed>) = 0 [pid 5842] <... mount resumed>) = 0 [pid 5854] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5853] close(3 [pid 5846] mkdir("/dev/binderfs", 0777 [pid 5844] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... socket resumed>) = 4 [pid 5844] <... mount resumed>) = 0 [pid 5842] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] <... close resumed>) = 0 [pid 5846] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5854] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5846] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5842] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5846] <... mount resumed>) = 0 [pid 5842] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... setsockopt resumed>) = 0 [pid 5853] close(4 [pid 5846] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [ 91.215065][ T5853] syz_tun: entered allmulticast mode [pid 5844] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] <... close resumed>) = 0 [pid 5844] <... mount resumed>) = 0 [pid 5846] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5854] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5844] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5842] <... mount resumed>) = 0 [pid 5854] <... setsockopt resumed>) = 0 [pid 5853] close(5 [pid 5846] mkdir("./0", 0777 [pid 5844] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5854] setsockopt(3, SOL_IP, IP_ADD_MEMBERSHIP, {imr_multiaddr=inet_addr("224.0.3.0"), imr_interface=inet_addr("172.20.20.170")}, 8 [pid 5844] <... mount resumed>) = 0 [pid 5842] <... mkdir resumed>) = 0 [pid 5854] <... setsockopt resumed>) = 0 [pid 5846] <... mkdir resumed>) = 0 [pid 5844] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5842] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] write(200, "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xbb\x08\x00\x45\x00\x00\x1c\x00\x00\x00\x00\x00\x02\xd7\xe0\x00\x00\x00\x00\xe0\x00\x03\x00\x11\x00\xee\xff\x00\x00\x00\x00", 42 [pid 5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] <... mkdir resumed>) = 0 [pid 5842] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5842] mkdir("./syz-tmp/pivot", 0777./strace-static-x86_64: Process 5855 attached [pid 5854] <... write resumed>) = 42 [pid 5853] close(6 [pid 5846] <... clone resumed>, child_tidptr=0x55557e793650) = 2 [pid 5844] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5842] <... mkdir resumed>) = 0 [pid 5855] set_robust_list(0x55557e793660, 24 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] close(7 [pid 5844] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5842] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] close(3 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] mkdir("./syz-tmp/pivot", 0777 [pid 5855] chdir("./0" [pid 5853] close(8 [pid 5842] <... pivot_root resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] <... mkdir resumed>) = 0 [pid 5842] chdir("/" [pid 5855] <... chdir resumed>) = 0 [pid 5854] close(4 [pid 5853] close(9 [pid 5844] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] <... chdir resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] <... prctl resumed>) = 0 [pid 5842] umount2("./pivot", MNT_DETACH [pid 5844] <... pivot_root resumed>) = 0 [pid 5855] setpgid(0, 0 [pid 5844] chdir("/") = 0 [ 91.240225][ T5853] syz_tun: left allmulticast mode [ 91.247688][ T5854] syz_tun: entered allmulticast mode [pid 5855] <... setpgid resumed>) = 0 [pid 5853] close(10 [pid 5844] umount2("./pivot", MNT_DETACH [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5842] <... umount2 resumed>) = 0 [pid 5842] chroot("./newroot" [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] <... umount2 resumed>) = 0 [pid 5842] <... chroot resumed>) = 0 [pid 5844] chroot("./newroot" [pid 5853] close(11 [pid 5855] <... openat resumed>) = 3 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] close(12 [pid 5844] <... chroot resumed>) = 0 [pid 5842] chdir("/" [pid 5855] write(3, "1000", 4 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] chdir("/" [pid 5853] close(13 [pid 5855] <... write resumed>) = 4 [pid 5844] <... chdir resumed>) = 0 [pid 5842] <... chdir resumed>) = 0 [pid 5854] close(5 [pid 5855] close(3 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] mkdir("/dev/gadgetfs", 0777 [pid 5842] mkdir("/dev/gadgetfs", 0777 [pid 5855] <... close resumed>) = 0 [pid 5854] close(6 [pid 5853] close(14 [pid 5844] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5842] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5855] read(200, [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5854] close(7 [pid 5853] close(15 [pid 5844] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5842] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5855] read(200, [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(8 [pid 5853] close(16 [pid 5842] <... mount resumed>) = 0 [pid 5855] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5842] mkdir("/dev/binderfs", 0777 [pid 5855] symlink("/dev/binderfs", "./binderfs" [pid 5854] close(9 [pid 5853] close(17 [pid 5842] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5842] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5854] close(10 [pid 5853] close(18 [pid 5844] <... mount resumed>) = 0 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] mkdir("/dev/binderfs", 0777 [pid 5842] <... mount resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] close(19 [pid 5844] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5854] close(11 [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5854] close(12 [pid 5853] close(20 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(13 [pid 5853] close(21 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(14 [pid 5853] close(22 [pid 5855] <... symlink resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 5844] <... mount resumed>) = 0 [pid 5842] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5855] write(1, "executing program\n", 18 [pid 5854] close(15 [pid 5853] close(23 [pid 5844] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5842] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] <... write resumed>) = 18 [pid 5854] close(16 [pid 5853] close(24 [pid 5844] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5842] mkdir("./0", 0777 [pid 5855] <... socket resumed>) = 3 [pid 5854] close(17 [pid 5853] close(25 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(18 [pid 5853] close(26 [pid 5855] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5842] <... mkdir resumed>) = 0 [pid 5844] mkdir("./0", 0777 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(19 [pid 5853] close(27 [pid 5855] <... socket resumed>) = 4 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] <... mkdir resumed>) = 0 [pid 5855] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5854] close(20 [pid 5853] close(28 [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 91.290800][ T5854] syz_tun: left allmulticast mode [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] <... setsockopt resumed>) = 0 [pid 5854] close(21 [pid 5853] close(29 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(22 [pid 5853] exit_group(0 [pid 5855] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5856 attached [pid 5854] close(23 [pid 5853] +++ exited with 0 +++ [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(24 [pid 5856] set_robust_list(0x55557e793660, 24 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5854] close(25 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] chdir("./0" [pid 5854] close(26) = -1 EBADF (Bad file descriptor) [pid 5854] close(27) = -1 EBADF (Bad file descriptor) [pid 5854] close(28) = -1 EBADF (Bad file descriptor) [pid 5856] <... chdir resumed>) = 0 [pid 5854] close(29) = -1 EBADF (Bad file descriptor) [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] exit_group(0 [pid 5856] <... prctl resumed>) = 0 [pid 5854] <... exit_group resumed>) = ? [pid 5856] setpgid(0, 0) = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5857 attached ) = 3 [pid 5855] <... setsockopt resumed>) = 0 [pid 5854] +++ exited with 0 +++ [pid 5844] <... clone resumed>, child_tidptr=0x55557e793650) = 2 [pid 5843] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5857] set_robust_list(0x55557e793660, 24 [pid 5856] write(3, "1000", 4 [pid 5855] setsockopt(3, SOL_IP, IP_ADD_MEMBERSHIP, {imr_multiaddr=inet_addr("224.0.3.0"), imr_interface=inet_addr("172.20.20.170")}, 8 [pid 5845] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5843] restart_syscall(<... resuming interrupted clone ...> [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] <... write resumed>) = 4 [pid 5855] <... setsockopt resumed>) = 0 [pid 5843] <... restart_syscall resumed>) = 0 [pid 5842] <... clone resumed>, child_tidptr=0x55557e793650) = 2 [pid 5857] chdir("./0" [pid 5856] close(3 [pid 5855] write(200, "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xbb\x08\x00\x45\x00\x00\x1c\x00\x00\x00\x00\x00\x02\xd7\xe0\x00\x00\x00\x00\xe0\x00\x03\x00\x11\x00\xee\xff\x00\x00\x00\x00", 42 [pid 5857] <... chdir resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] <... write resumed>) = 42 [pid 5845] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5856] read(200, [pid 5845] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] <... prctl resumed>) = 0 [pid 5856] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5855] close(3 [pid 5845] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] setpgid(0, 0 [pid 5856] read(200, [pid 5855] <... close resumed>) = 0 [pid 5843] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5857] <... setpgid resumed>) = 0 [pid 5856] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5855] close(4 [pid 5845] <... openat resumed>) = 3 [pid 5843] <... openat resumed>) = 3 [ 91.316143][ T5855] syz_tun: entered allmulticast mode [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] symlink("/dev/binderfs", "./binderfs" [pid 5845] newfstatat(3, "", [pid 5843] newfstatat(3, "", [pid 5856] <... symlink resumed>) = 0 [pid 5843] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5845] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5845] getdents64(3, [pid 5843] getdents64(3, [pid 5856] write(1, "executing program\n", 18 [pid 5845] <... getdents64 resumed>0x55557e7946f0 /* 3 entries */, 32768) = 80 [pid 5843] <... getdents64 resumed>0x55557e7946f0 /* 3 entries */, 32768) = 80 [pid 5843] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] <... openat resumed>) = 3 [pid 5843] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5843] unlink("./0/binderfs"executing program [pid 5856] <... write resumed>) = 18 [pid 5845] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5843] <... unlink resumed>) = 0 [pid 5857] write(3, "1000", 4 [pid 5856] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5843] getdents64(3, 0x55557e7946f0 /* 0 entries */, 32768) = 0 [pid 5843] close(3) = 0 [pid 5845] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] rmdir("./0" [pid 5856] <... socket resumed>) = 3 [pid 5845] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5857] <... write resumed>) = 4 [pid 5857] close(3 [pid 5856] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5845] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5843] <... rmdir resumed>) = 0 [pid 5857] <... close resumed>) = 0 [pid 5845] unlink("./0/binderfs" [pid 5843] mkdir("./1", 0777 [pid 5857] read(200, [pid 5845] <... unlink resumed>) = 0 [pid 5843] <... mkdir resumed>) = 0 [pid 5857] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5845] getdents64(3, [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5857] read(200, [pid 5856] <... socket resumed>) = 4 [pid 5845] <... getdents64 resumed>0x55557e7946f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5858 attached [pid 5857] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] <... clone resumed>, child_tidptr=0x55557e793650) = 3 [pid 5858] set_robust_list(0x55557e793660, 24 [pid 5857] symlink("/dev/binderfs", "./binderfs" [pid 5856] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5855] <... close resumed>) = 0 [pid 5845] close(3 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5845] <... close resumed>) = 0 [pid 5858] chdir("./1" [pid 5856] <... setsockopt resumed>) = 0 [pid 5855] close(5 [pid 5857] <... symlink resumed>) = 0 [pid 5856] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 91.343356][ T5855] syz_tun: left allmulticast mode [pid 5845] rmdir("./0" [pid 5858] <... chdir resumed>) = 0 [pid 5857] write(1, "executing program\n", 18 [pid 5856] <... setsockopt resumed>) = 0 [pid 5855] close(6executing program [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] <... write resumed>) = 18 [pid 5858] <... prctl resumed>) = 0 [pid 5845] <... rmdir resumed>) = 0 [pid 5858] setpgid(0, 0 [pid 5857] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5856] setsockopt(3, SOL_IP, IP_ADD_MEMBERSHIP, {imr_multiaddr=inet_addr("224.0.3.0"), imr_interface=inet_addr("172.20.20.170")}, 8 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5845] mkdir("./1", 0777 [pid 5858] <... setpgid resumed>) = 0 [pid 5857] <... socket resumed>) = 3 [pid 5856] <... setsockopt resumed>) = 0 [pid 5855] close(7 [pid 5856] write(200, "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xbb\x08\x00\x45\x00\x00\x1c\x00\x00\x00\x00\x00\x02\xd7\xe0\x00\x00\x00\x00\xe0\x00\x03\x00\x11\x00\xee\xff\x00\x00\x00\x00", 42 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5845] <... mkdir resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5857] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5856] <... write resumed>) = 42 [pid 5855] close(8) = -1 EBADF (Bad file descriptor) [pid 5855] close(9 [pid 5857] <... socket resumed>) = 4 [pid 5856] close(3 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5858] <... openat resumed>) = 3 [pid 5857] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5856] <... close resumed>) = 0 [ 91.368437][ T5856] syz_tun: entered allmulticast mode [pid 5856] close(4./strace-static-x86_64: Process 5859 attached [pid 5858] write(3, "1000", 4 [pid 5855] close(10 [pid 5859] set_robust_list(0x55557e793660, 24 [pid 5858] <... write resumed>) = 4 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5845] <... clone resumed>, child_tidptr=0x55557e793650) = 3 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5858] close(3 [pid 5855] close(11 [pid 5858] <... close resumed>) = 0 [pid 5858] read(200, [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] chdir("./1" [pid 5858] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5855] close(12 [pid 5859] <... chdir resumed>) = 0 [pid 5858] read(200, [pid 5857] <... setsockopt resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5858] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5855] close(13 [pid 5856] close(5) = -1 EBADF (Bad file descriptor) [pid 5856] close(6) = -1 EBADF (Bad file descriptor) [pid 5856] close(7) = -1 EBADF (Bad file descriptor) [pid 5856] close(8) = -1 EBADF (Bad file descriptor) [pid 5856] close(9) = -1 EBADF (Bad file descriptor) [pid 5859] <... prctl resumed>) = 0 [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5857] <... setsockopt resumed>) = 0 [pid 5856] close(10 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] setpgid(0, 0 [pid 5858] <... symlink resumed>) = 0 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(14 [pid 5857] setsockopt(3, SOL_IP, IP_ADD_MEMBERSHIP, {imr_multiaddr=inet_addr("224.0.3.0"), imr_interface=inet_addr("172.20.20.170")}, 8 [pid 5859] <... setpgid resumed>) = 0 [pid 5858] write(1, "executing program\n", 18 [pid 5856] close(11executing program [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5858] <... write resumed>) = 18 [pid 5857] <... setsockopt resumed>) = 0 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(15 [pid 5859] <... openat resumed>) = 3 [pid 5858] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5857] write(200, "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xbb\x08\x00\x45\x00\x00\x1c\x00\x00\x00\x00\x00\x02\xd7\xe0\x00\x00\x00\x00\xe0\x00\x03\x00\x11\x00\xee\xff\x00\x00\x00\x00", 42 [pid 5856] close(12 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] write(3, "1000", 4 [pid 5858] <... socket resumed>) = 3 [pid 5857] <... write resumed>) = 42 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(16 [pid 5859] <... write resumed>) = 4 [pid 5858] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] close(3 [pid 5858] <... socket resumed>) = 4 [pid 5857] close(3 [pid 5856] close(13 [pid 5855] close(17 [pid 5859] <... close resumed>) = 0 [pid 5858] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5857] <... close resumed>) = 0 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] read(200, [pid 5855] close(18 [pid 5859] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5856] close(14 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] read(200, [pid 5858] <... setsockopt resumed>) = 0 [ 91.390590][ T5856] syz_tun: left allmulticast mode [ 91.401155][ T5857] syz_tun: entered allmulticast mode [pid 5857] close(4 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(19 [pid 5859] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(15 [pid 5859] symlink("/dev/binderfs", "./binderfs" [pid 5855] close(20 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] <... symlink resumed>) = 0 [pid 5856] close(16 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 5858] <... setsockopt resumed>) = 0 [pid 5855] close(21 [pid 5859] write(1, "executing program\n", 18 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] <... write resumed>) = 18 [pid 5857] <... close resumed>) = 0 [pid 5856] close(17 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5858] setsockopt(3, SOL_IP, IP_ADD_MEMBERSHIP, {imr_multiaddr=inet_addr("224.0.3.0"), imr_interface=inet_addr("172.20.20.170")}, 8 [pid 5857] close(5 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(22 [pid 5859] <... socket resumed>) = 3 [pid 5858] <... setsockopt resumed>) = 0 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(18 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5857] close(6 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(23 [pid 5859] <... socket resumed>) = 4 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(19 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5858] write(200, "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xbb\x08\x00\x45\x00\x00\x1c\x00\x00\x00\x00\x00\x02\xd7\xe0\x00\x00\x00\x00\xe0\x00\x03\x00\x11\x00\xee\xff\x00\x00\x00\x00", 42 [pid 5857] close(7 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(24 [pid 5859] <... setsockopt resumed>) = 0 [pid 5858] <... write resumed>) = 42 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(20 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] setsockopt(4, SOL_IP, 0xca /* IP_??? */, "\x00\x00\x00\x00\x00\x00\x00\x00\xac\x14\x14\xaa\xac\x14\x14\x00", 16 [pid 5857] close(8 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(25 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(21 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] close(9 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(26 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(22 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] close(10 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(27 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(23 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5858] close(3 [pid 5857] close(11 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(28 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(24 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] close(12 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] close(29 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(25 [pid 5855] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] close(13 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] exit_group(0 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(26 [pid 5855] <... exit_group resumed>) = ? [pid 5857] close(14 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5855] +++ exited with 0 +++ [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(27 [pid 5857] close(15 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(28 [pid 5857] close(16 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] close(29 [pid 5857] close(17 [pid 5856] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] exit_group(0 [pid 5857] close(18 [pid 5856] <... exit_group resumed>) = ? [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5856] +++ exited with 0 +++ [pid 5846] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5857] close(19 [pid 5846] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5844] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 91.430879][ T5857] syz_tun: left allmulticast mode [ 91.439180][ T5858] syz_tun: entered allmulticast mode [ 91.450785][ T5859] syz_tun: entered allmulticast mode [ 91.468756][ C0] ------------[ cut here ]------------ [pid 5846] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5844] restart_syscall(<... resuming interrupted clone ...> [pid 5846] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5844] <... restart_syscall resumed>) = 0 [pid 5846] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5846] newfstatat(3, "", [pid 5844] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5846] getdents64(3, [pid 5844] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5844] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5846] <... getdents64 resumed>0x55557e7946f0 /* 3 entries */, 32768) = 80 [pid 5844] newfstatat(3, "", [pid 5846] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5844] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5846] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5844] getdents64(3, [pid 5846] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5846] unlink("./0/binderfs" [pid 5844] <... getdents64 resumed>0x55557e7946f0 /* 3 entries */, 32768) = 80 [pid 5846] <... unlink resumed>) = 0 [pid 5844] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5846] getdents64(3, 0x55557e7946f0 /* 0 entries */, 32768) = 0 [pid 5844] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5846] close(3) = 0 [pid 5844] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5846] rmdir("./0") = 0 [pid 5844] unlink("./0/binderfs" [pid 5846] mkdir("./1", 0777 [pid 5844] <... unlink resumed>) = 0 [pid 5846] <... mkdir resumed>) = 0 [pid 5844] getdents64(3, 0x55557e7946f0 /* 0 entries */, 32768) = 0 [pid 5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] close(3) = 0 [pid 5844] rmdir("./0") = 0 [pid 5844] mkdir("./1", 0777) = 0 [ 91.474432][ C0] WARNING: CPU: 0 PID: 5859 at net/ipv4/ipmr.c:2302 ip_mr_output+0xbb1/0xe70 [ 91.483325][ C0] Modules linked in: [ 91.487374][ C0] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor357 Not tainted 6.16.0-rc1-syzkaller-00413-gfc4842cd0f11 #0 PREEMPT(full) [ 91.499902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.510081][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] <... clone resumed>, child_tidptr=0x55557e793650) = 3 [pid 5844] <... clone resumed>, child_tidptr=0x55557e793650) = 3 [pid 5857] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] close(20) = -1 EBADF (Bad file descriptor) [pid 5857] close(21) = -1 EBADF (Bad file descriptor) [pid 5857] close(22) = -1 EBADF (Bad file descriptor) [pid 5857] close(23) = -1 EBADF (Bad file descriptor) [pid 5857] close(24) = -1 EBADF (Bad file descriptor) [pid 5857] close(25) = -1 EBADF (Bad file descriptor) [pid 5857] close(26) = -1 EBADF (Bad file descriptor) [pid 5857] close(27) = -1 EBADF (Bad file descriptor) [pid 5857] close(28) = -1 EBADF (Bad file descriptor) [pid 5857] close(29) = -1 EBADF (Bad file descriptor) [pid 5857] exit_group(0) = ? [pid 5857] +++ exited with 0 +++ [pid 5842] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 91.515703][ C0] Code: df e9 63 f6 ff ff e8 8e 72 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 ea 14 4c ff e9 45 f6 ff ff e8 70 72 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 62 72 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 91.535487][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 91.541632][ C0] RAX: ffffffff89f9ec80 RBX: ffff888033053780 RCX: ffff8880277c9e00 [ 91.549654][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.557731][ C0] RBP: ffffc90000007a10 R08: 0000000000000000 R09: ffffffff89d71b5d [ 91.565758][ C0] R10: dffffc0000000000 R11: ffffffff89f9e0d0 R12: 0000000000000010 [ 91.573821][ C0] R13: dffffc0000000000 R14: ffff888075dfb100 R15: 0000000000000000 [pid 5842] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5861 attached ./strace-static-x86_64: Process 5860 attached ) = 0 [pid 5861] set_robust_list(0x55557e793660, 24 [pid 5860] set_robust_list(0x55557e793660, 24) = 0 [pid 5842] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] <... set_robust_list resumed>) = 0 [pid 5860] chdir("./1" [pid 5861] chdir("./1" [pid 5860] <... chdir resumed>) = 0 [pid 5861] <... chdir resumed>) = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5860] <... prctl resumed>) = 0 [pid 5861] <... prctl resumed>) = 0 [pid 5860] setpgid(0, 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5860] <... setpgid resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] <... openat resumed>) = 3 [pid 5861] write(3, "1000", 4 [pid 5860] <... openat resumed>) = 3 [pid 5842] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5861] <... write resumed>) = 4 [pid 5842] <... openat resumed>) = 3 [pid 5861] close(3 [pid 5860] write(3, "1000", 4 [pid 5842] newfstatat(3, "", [pid 5861] <... close resumed>) = 0 [pid 5860] <... write resumed>) = 4 [pid 5842] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 5861] read(200, 0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5842] getdents64(3, [pid 5861] symlink("/dev/binderfs", "./binderfs" [ 91.581960][ C0] FS: 000055557e793380(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 91.591030][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.597691][ C0] CR2: 00007fe8999b9270 CR3: 00000000291c0000 CR4: 00000000003526f0 [ 91.605731][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.613821][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.621895][ C0] Call Trace: [ 91.625248][ C0] [pid 5860] close(3 [pid 5861] <... symlink resumed>) = 0 [pid 5860] <... close resumed>) = 0 [pid 5842] <... getdents64 resumed>0x55557e7946f0 /* 3 entries */, 32768) = 80 [pid 5860] read(200, [pid 5842] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] write(1, "executing program\n", 18 [pid 5860] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5842] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5861] <... write resumed>) = 18 [pid 5860] read(200, [pid 5842] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5861] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5860] <... read resumed>0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5842] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5861] <... socket resumed>) = 3 [pid 5860] symlink("/dev/binderfs", "./binderfs" [pid 5842] unlink("./0/binderfs" [pid 5861] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5860] <... symlink resumed>) = 0 [pid 5861] <... socket resumed>) = 4 [pid 5842] <... unlink resumed>) = 0 [pid 5861] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5842] getdents64(3, [pid 5860] write(1, "executing program\n", 18 [pid 5842] <... getdents64 resumed>0x55557e7946f0 /* 0 entries */, 32768) = 0 [pid 5842] close(3) = 0 [pid 5842] rmdir("./0"executing program [pid 5860] <... write resumed>) = 18 [pid 5842] <... rmdir resumed>) = 0 [pid 5860] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP [pid 5842] mkdir("./1", 0777 [pid 5860] <... socket resumed>) = 3 [pid 5842] <... mkdir resumed>) = 0 [pid 5860] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5860] <... socket resumed>) = 4 [pid 5860] setsockopt(4, SOL_IP, 0xc8 /* IP_??? */, [0], 4 [pid 5842] <... clone resumed>, child_tidptr=0x55557e793650) = 3 [ 91.628194][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.633105][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 91.638621][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 91.644738][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 91.649883][ C0] ? skb_dst+0x4f/0xd0 [ 91.654052][ C0] ? dst_output+0x177/0x1c0 [ 91.659156][ C0] igmp_send_report+0x89e/0xdb0 [ 91.664072][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 91.669527][ C0] ? do_raw_spin_lock+0x121/0x290 [ 91.674611][ C0] ? do_raw_spin_unlock+0x122/0x240 ./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x55557e793660, 24) = 0 [pid 5862] chdir("./1") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [ 91.680103][ C0] igmp_timer_expire+0x204/0x510 [ 91.685178][ C0] call_timer_fn+0x17e/0x5f0 [ 91.689852][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 91.695372][ C0] ? call_timer_fn+0xbe/0x5f0 [ 91.700122][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 91.705290][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.710592][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.715843][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 91.721380][ C0] __run_timer_base+0x61a/0x860 [ 91.726288][ C0] ? ktime_get+0x3e/0x1f0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] read(200, 0x7ffcd7ef38d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] write(1, "executing program\n", 18executing program ) = 18 [pid 5862] socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = 3 [pid 5862] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 4 [ 91.730765][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 91.736269][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 91.742638][ C0] run_timer_softirq+0xb7/0x180 [ 91.747598][ C0] handle_softirqs+0x286/0x870 [ 91.752408][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 91.757210][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 91.762591][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 91.767837][ C0] __irq_exit_rcu+0xca/0x1f0 [ 91.772465][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 91.777763][ C0] irq_exit_rcu+0x9/0x30 [ 91.782063][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 91.787768][ C0] [ 91.790708][ C0] [ 91.793643][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.799686][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 91.806227][ C0] Code: 74 05 e8 cb 4e 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 3a 28 f6 65 8b 05 bc 43 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 91.825882][ C0] RSP: 0018:ffffc9000445f640 EFLAGS: 00000206 [ 91.832012][ C0] RAX: 718848643f7ff500 RBX: 0000000000000a02 RCX: 718848643f7ff500 [ 91.840050][ C0] RDX: 0000000000000006 RSI: ffffffff8d982ba6 RDI: 0000000000000001 [ 91.848259][ C0] RBP: ffffc9000445f6c0 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 91.856272][ C0] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 91.864333][ C0] R13: ffffffff8f574a40 R14: ffffffff8f574a00 R15: 1ffff9200088bec8 [ 91.872423][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.878869][ C0] __wake_up_common_lock+0x190/0x1f0 [ 91.884208][ C0] netlink_broadcast_filtered+0x108a/0x1140 [ 91.890183][ C0] ? __build_skb_around+0x257/0x3e0 [ 91.895432][ C0] nlmsg_notify+0xf0/0x1a0 [ 91.899930][ C0] vif_add+0x93f/0x1420 [ 91.904129][ C0] ? __lock_acquire+0xab9/0xd20 [ 91.909071][ C0] ? __pfx_vif_add+0x10/0x10 [ 91.913718][ C0] ? __might_fault+0xb0/0x130 [ 91.918496][ C0] ip_mroute_setsockopt+0xe12/0xf60 [ 91.923746][ C0] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 91.929548][ C0] ? __lock_acquire+0xab9/0xd20 [ 91.934462][ C0] do_ip_setsockopt+0xf11/0x2d00 [ 91.939478][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.944897][ C0] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 91.950339][ C0] ? aa_sk_perm+0x81e/0x950 [ 91.954881][ C0] ? _raw_spin_lock_irq+0xae/0xf0 [ 91.959978][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 91.964886][ C0] ip_setsockopt+0x66/0x110 [ 91.969463][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 91.975407][ C0] do_sock_setsockopt+0x25a/0x3e0 [ 91.980504][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 91.986113][ C0] __x64_sys_setsockopt+0x18b/0x220 [ 91.991401][ C0] do_syscall_64+0xfa/0x3b0 [ 91.995955][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.001251][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.007365][ C0] ? clear_bhb_loop+0x60/0xb0 [ 92.012145][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.018195][ C0] RIP: 0033:0x7fe8999384c9 [ 92.022628][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 92.042346][ C0] RSP: 002b:00007ffcd7ef3cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.050844][ C0] RAX: ffffffffffffffda RBX: 0000000000016417 RCX: 00007fe8999384c9 [ 92.058895][ C0] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 92.066915][ C0] RBP: 0000000000000000 R08: 0000000000000010 R09: 0000000000000000 [ 92.074967][ C0] R10: 0000200000003d80 R11: 0000000000000246 R12: 00007ffcd7ef3cec [ 92.083010][ C0] R13: 00007ffcd7ef3d20 R14: 00007ffcd7ef3d00 R15: 0000000000000001 [ 92.091089][ C0] [ 92.094143][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.101434][ C0] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor357 Not tainted 6.16.0-rc1-syzkaller-00413-gfc4842cd0f11 #0 PREEMPT(full) [ 92.114024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.124096][ C0] Call Trace: [ 92.127400][ C0] [ 92.130256][ C0] dump_stack_lvl+0x99/0x250 [ 92.134883][ C0] ? __asan_memcpy+0x40/0x70 [ 92.139520][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.144742][ C0] ? __pfx__printk+0x10/0x10 [ 92.149374][ C0] panic+0x2db/0x790 [ 92.153292][ C0] ? __pfx_panic+0x10/0x10 [ 92.157739][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 92.163000][ C0] __warn+0x31b/0x4b0 [ 92.167014][ C0] ? ip_mr_output+0xbb1/0xe70 [ 92.171713][ C0] ? ip_mr_output+0xbb1/0xe70 [ 92.176408][ C0] report_bug+0x2be/0x4f0 [ 92.180877][ C0] ? ip_mr_output+0xbb1/0xe70 [ 92.185576][ C0] ? ip_mr_output+0xbb1/0xe70 [ 92.190274][ C0] ? ip_mr_output+0xbb3/0xe70 [ 92.194971][ C0] handle_bug+0x84/0x160 [ 92.199234][ C0] exc_invalid_op+0x1a/0x50 [ 92.203749][ C0] asm_exc_invalid_op+0x1a/0x20 [ 92.208612][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 92.213921][ C0] Code: df e9 63 f6 ff ff e8 8e 72 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 ea 14 4c ff e9 45 f6 ff ff e8 70 72 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 62 72 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 92.233548][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 92.239643][ C0] RAX: ffffffff89f9ec80 RBX: ffff888033053780 RCX: ffff8880277c9e00 [ 92.247622][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.255631][ C0] RBP: ffffc90000007a10 R08: 0000000000000000 R09: ffffffff89d71b5d [ 92.263615][ C0] R10: dffffc0000000000 R11: ffffffff89f9e0d0 R12: 0000000000000010 [ 92.271597][ C0] R13: dffffc0000000000 R14: ffff888075dfb100 R15: 0000000000000000 [ 92.279582][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 92.284630][ C0] ? nf_hook+0x9d/0x380 [ 92.288804][ C0] ? ip_mr_output+0xbb0/0xe70 [ 92.293515][ C0] ? rcu_is_watching+0x15/0xb0 [ 92.298303][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 92.303701][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 92.309781][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 92.314847][ C0] ? skb_dst+0x4f/0xd0 [ 92.319117][ C0] ? dst_output+0x177/0x1c0 [ 92.323656][ C0] igmp_send_report+0x89e/0xdb0 [ 92.328532][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 92.333925][ C0] ? do_raw_spin_lock+0x121/0x290 [ 92.338972][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 92.344186][ C0] igmp_timer_expire+0x204/0x510 [ 92.349154][ C0] call_timer_fn+0x17e/0x5f0 [ 92.353766][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 92.359236][ C0] ? call_timer_fn+0xbe/0x5f0 [ 92.363928][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 92.369063][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.374280][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.379504][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 92.384986][ C0] __run_timer_base+0x61a/0x860 [ 92.389850][ C0] ? ktime_get+0x3e/0x1f0 [ 92.394206][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 92.399594][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 92.405873][ C0] run_timer_softirq+0xb7/0x180 [ 92.410768][ C0] handle_softirqs+0x286/0x870 [ 92.415560][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 92.420350][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 92.425656][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 92.430884][ C0] __irq_exit_rcu+0xca/0x1f0 [ 92.435500][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 92.440723][ C0] irq_exit_rcu+0x9/0x30 [ 92.444986][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 92.450643][ C0] [ 92.453582][ C0] [ 92.456525][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.462518][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 92.469043][ C0] Code: 74 05 e8 cb 4e 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 3a 28 f6 65 8b 05 bc 43 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 92.488663][ C0] RSP: 0018:ffffc9000445f640 EFLAGS: 00000206 [ 92.494749][ C0] RAX: 718848643f7ff500 RBX: 0000000000000a02 RCX: 718848643f7ff500 [ 92.502730][ C0] RDX: 0000000000000006 RSI: ffffffff8d982ba6 RDI: 0000000000000001 [ 92.510716][ C0] RBP: ffffc9000445f6c0 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 92.518696][ C0] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 92.526679][ C0] R13: ffffffff8f574a40 R14: ffffffff8f574a00 R15: 1ffff9200088bec8 [ 92.534681][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 92.541042][ C0] __wake_up_common_lock+0x190/0x1f0 [ 92.546355][ C0] netlink_broadcast_filtered+0x108a/0x1140 [ 92.552271][ C0] ? __build_skb_around+0x257/0x3e0 [ 92.557498][ C0] nlmsg_notify+0xf0/0x1a0 [ 92.561931][ C0] vif_add+0x93f/0x1420 [ 92.566107][ C0] ? __lock_acquire+0xab9/0xd20 [ 92.570987][ C0] ? __pfx_vif_add+0x10/0x10 [ 92.575597][ C0] ? __might_fault+0xb0/0x130 [ 92.580307][ C0] ip_mroute_setsockopt+0xe12/0xf60 [ 92.585533][ C0] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 92.591281][ C0] ? __lock_acquire+0xab9/0xd20 [ 92.596161][ C0] do_ip_setsockopt+0xf11/0x2d00 [ 92.601113][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.606496][ C0] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 92.611883][ C0] ? aa_sk_perm+0x81e/0x950 [ 92.616489][ C0] ? _raw_spin_lock_irq+0xae/0xf0 [ 92.621532][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 92.626406][ C0] ip_setsockopt+0x66/0x110 [ 92.630918][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 92.636837][ C0] do_sock_setsockopt+0x25a/0x3e0 [ 92.641889][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 92.647467][ C0] __x64_sys_setsockopt+0x18b/0x220 [ 92.652698][ C0] do_syscall_64+0xfa/0x3b0 [ 92.657223][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.662469][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.668545][ C0] ? clear_bhb_loop+0x60/0xb0 [ 92.673235][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.679137][ C0] RIP: 0033:0x7fe8999384c9 [ 92.683566][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 92.703184][ C0] RSP: 002b:00007ffcd7ef3cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.711615][ C0] RAX: ffffffffffffffda RBX: 0000000000016417 RCX: 00007fe8999384c9 [ 92.719681][ C0] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 92.727660][ C0] RBP: 0000000000000000 R08: 0000000000000010 R09: 0000000000000000 [ 92.735644][ C0] R10: 0000200000003d80 R11: 0000000000000246 R12: 00007ffcd7ef3cec [ 92.743625][ C0] R13: 00007ffcd7ef3d20 R14: 00007ffcd7ef3d00 R15: 0000000000000001 [ 92.751654][ C0] [ 92.755022][ C0] Kernel Offset: disabled [ 92.759362][ C0] Rebooting in 86400 seconds..