./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor616876596 <...> DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb forked to background, child pid 3177 [ 27.601809][ T3178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.611582][ T3178] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.206' (ECDSA) to the list of known hosts. execve("./syz-executor616876596", ["./syz-executor616876596"], 0x7ffffd48e960 /* 10 vars */) = 0 brk(NULL) = 0x55555676a000 brk(0x55555676ac40) = 0x55555676ac40 arch_prctl(ARCH_SET_FS, 0x55555676a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor616876596", 4096) = 27 brk(0x55555678bc40) = 0x55555678bc40 brk(0x55555678c000) = 0x55555678c000 mprotect(0x7ff32cc50000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 3599 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "3599", 4) = 4 close(3) = 0 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 syzkaller login: [ 51.304917][ T3599] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 51.432747][ T3599] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 getpid() = 3599 mkdir("./syzkaller.wqHc2k", 0700) = 0 chmod("./syzkaller.wqHc2k", 0777) = 0 chdir("./syzkaller.wqHc2k") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3600 attached , child_tidptr=0x55555676a5d0) = 3600 [pid 3600] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3600] setsid() = 1 [pid 3600] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3600] unshare(CLONE_NEWNS) = 0 [pid 3600] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3600] unshare(CLONE_NEWIPC) = 0 [pid 3600] unshare(CLONE_NEWCGROUP) = 0 [pid 3600] unshare(CLONE_NEWUTS) = 0 [pid 3600] unshare(CLONE_SYSVSEM) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "16777216", 8) = 8 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "536870912", 9) = 9 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "8192", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3600] close(3) = 0 [pid 3600] getpid() = 1 [pid 3600] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 3600] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./0/binderfs") = 0 [pid 3600] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./0/cgroup") = 0 [pid 3600] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./0/cgroup.net") = 0 [pid 3600] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./0/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./0") = 0 [pid 3600] mkdir("./1", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3618 attached , child_tidptr=0x55555676a5d0) = 4 [pid 3618] chdir("./1") = 0 [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3618] setpgid(0, 0) = 0 [pid 3618] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3618] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3618] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1000", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3618] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3618] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3618] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3618] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3618] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3618] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3618] close(3) = 0 [pid 3618] close(4) = 0 [pid 3618] close(5) = -1 EBADF (Bad file descriptor) [pid 3618] close(6) = -1 EBADF (Bad file descriptor) [pid 3618] close(7) = -1 EBADF (Bad file descriptor) [pid 3618] close(8) = -1 EBADF (Bad file descriptor) [pid 3618] close(9) = -1 EBADF (Bad file descriptor) [pid 3618] close(10) = -1 EBADF (Bad file descriptor) [pid 3618] close(11) = -1 EBADF (Bad file descriptor) [pid 3618] close(12) = -1 EBADF (Bad file descriptor) [pid 3618] close(13) = -1 EBADF (Bad file descriptor) [pid 3618] close(14) = -1 EBADF (Bad file descriptor) [pid 3618] close(15) = -1 EBADF (Bad file descriptor) [pid 3618] close(16) = -1 EBADF (Bad file descriptor) [pid 3618] close(17) = -1 EBADF (Bad file descriptor) [pid 3618] close(18) = -1 EBADF (Bad file descriptor) [pid 3618] close(19) = -1 EBADF (Bad file descriptor) [pid 3618] close(20) = -1 EBADF (Bad file descriptor) [pid 3618] close(21) = -1 EBADF (Bad file descriptor) [pid 3618] close(22) = -1 EBADF (Bad file descriptor) [pid 3618] close(23) = -1 EBADF (Bad file descriptor) [pid 3618] close(24) = -1 EBADF (Bad file descriptor) [pid 3618] close(25) = -1 EBADF (Bad file descriptor) [pid 3618] close(26) = -1 EBADF (Bad file descriptor) [pid 3618] close(27) = -1 EBADF (Bad file descriptor) [pid 3618] close(28) = -1 EBADF (Bad file descriptor) [pid 3618] close(29) = -1 EBADF (Bad file descriptor) [pid 3618] exit_group(0) = ? [pid 3618] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./1/binderfs") = 0 [pid 3600] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./1/cgroup") = 0 [pid 3600] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./1/cgroup.net") = 0 [pid 3600] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./1/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./1") = 0 [pid 3600] mkdir("./2", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3620 attached , child_tidptr=0x55555676a5d0) = 6 [pid 3620] chdir("./2") = 0 [pid 3620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3620] setpgid(0, 0) = 0 [pid 3620] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3620] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3620] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3620] write(3, "1000", 4) = 4 [pid 3620] close(3) = 0 [pid 3620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3620] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3620] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3620] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3620] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3620] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3620] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3620] close(3) = 0 [pid 3620] close(4) = 0 [pid 3620] close(5) = -1 EBADF (Bad file descriptor) [pid 3620] close(6) = -1 EBADF (Bad file descriptor) [pid 3620] close(7) = -1 EBADF (Bad file descriptor) [pid 3620] close(8) = -1 EBADF (Bad file descriptor) [pid 3620] close(9) = -1 EBADF (Bad file descriptor) [pid 3620] close(10) = -1 EBADF (Bad file descriptor) [pid 3620] close(11) = -1 EBADF (Bad file descriptor) [pid 3620] close(12) = -1 EBADF (Bad file descriptor) [pid 3620] close(13) = -1 EBADF (Bad file descriptor) [pid 3620] close(14) = -1 EBADF (Bad file descriptor) [pid 3620] close(15) = -1 EBADF (Bad file descriptor) [pid 3620] close(16) = -1 EBADF (Bad file descriptor) [pid 3620] close(17) = -1 EBADF (Bad file descriptor) [pid 3620] close(18) = -1 EBADF (Bad file descriptor) [pid 3620] close(19) = -1 EBADF (Bad file descriptor) [pid 3620] close(20) = -1 EBADF (Bad file descriptor) [pid 3620] close(21) = -1 EBADF (Bad file descriptor) [pid 3620] close(22) = -1 EBADF (Bad file descriptor) [pid 3620] close(23) = -1 EBADF (Bad file descriptor) [pid 3620] close(24) = -1 EBADF (Bad file descriptor) [pid 3620] close(25) = -1 EBADF (Bad file descriptor) [pid 3620] close(26) = -1 EBADF (Bad file descriptor) [pid 3620] close(27) = -1 EBADF (Bad file descriptor) [pid 3620] close(28) = -1 EBADF (Bad file descriptor) [pid 3620] close(29) = -1 EBADF (Bad file descriptor) [pid 3620] exit_group(0) = ? [pid 3620] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./2/binderfs") = 0 [pid 3600] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./2/cgroup") = 0 [pid 3600] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./2/cgroup.net") = 0 [pid 3600] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./2/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./2") = 0 [pid 3600] mkdir("./3", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3622 attached [pid 3622] chdir("./3") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 8 [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3622] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3622] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3622] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3622] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3622] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3622] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3622] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3622] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3622] close(3) = 0 [pid 3622] close(4) = 0 [pid 3622] close(5) = -1 EBADF (Bad file descriptor) [pid 3622] close(6) = -1 EBADF (Bad file descriptor) [pid 3622] close(7) = -1 EBADF (Bad file descriptor) [pid 3622] close(8) = -1 EBADF (Bad file descriptor) [pid 3622] close(9) = -1 EBADF (Bad file descriptor) [pid 3622] close(10) = -1 EBADF (Bad file descriptor) [pid 3622] close(11) = -1 EBADF (Bad file descriptor) [pid 3622] close(12) = -1 EBADF (Bad file descriptor) [pid 3622] close(13) = -1 EBADF (Bad file descriptor) [pid 3622] close(14) = -1 EBADF (Bad file descriptor) [pid 3622] close(15) = -1 EBADF (Bad file descriptor) [pid 3622] close(16) = -1 EBADF (Bad file descriptor) [pid 3622] close(17) = -1 EBADF (Bad file descriptor) [pid 3622] close(18) = -1 EBADF (Bad file descriptor) [pid 3622] close(19) = -1 EBADF (Bad file descriptor) [pid 3622] close(20) = -1 EBADF (Bad file descriptor) [pid 3622] close(21) = -1 EBADF (Bad file descriptor) [pid 3622] close(22) = -1 EBADF (Bad file descriptor) [pid 3622] close(23) = -1 EBADF (Bad file descriptor) [pid 3622] close(24) = -1 EBADF (Bad file descriptor) [pid 3622] close(25) = -1 EBADF (Bad file descriptor) [pid 3622] close(26) = -1 EBADF (Bad file descriptor) [pid 3622] close(27) = -1 EBADF (Bad file descriptor) [pid 3622] close(28) = -1 EBADF (Bad file descriptor) [pid 3622] close(29) = -1 EBADF (Bad file descriptor) [pid 3622] exit_group(0) = ? [pid 3622] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./3/binderfs") = 0 [pid 3600] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./3/cgroup") = 0 [pid 3600] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./3/cgroup.net") = 0 [pid 3600] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./3/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./3") = 0 [pid 3600] mkdir("./4", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3624 attached , child_tidptr=0x55555676a5d0) = 10 [pid 3624] chdir("./4") = 0 [pid 3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3624] setpgid(0, 0) = 0 [pid 3624] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3624] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3624] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3624] write(3, "1000", 4) = 4 [pid 3624] close(3) = 0 [pid 3624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3624] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3624] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3624] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3624] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3624] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3624] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3624] close(3) = 0 [pid 3624] close(4) = 0 [pid 3624] close(5) = -1 EBADF (Bad file descriptor) [pid 3624] close(6) = -1 EBADF (Bad file descriptor) [pid 3624] close(7) = -1 EBADF (Bad file descriptor) [pid 3624] close(8) = -1 EBADF (Bad file descriptor) [pid 3624] close(9) = -1 EBADF (Bad file descriptor) [pid 3624] close(10) = -1 EBADF (Bad file descriptor) [pid 3624] close(11) = -1 EBADF (Bad file descriptor) [pid 3624] close(12) = -1 EBADF (Bad file descriptor) [pid 3624] close(13) = -1 EBADF (Bad file descriptor) [pid 3624] close(14) = -1 EBADF (Bad file descriptor) [pid 3624] close(15) = -1 EBADF (Bad file descriptor) [pid 3624] close(16) = -1 EBADF (Bad file descriptor) [pid 3624] close(17) = -1 EBADF (Bad file descriptor) [pid 3624] close(18) = -1 EBADF (Bad file descriptor) [pid 3624] close(19) = -1 EBADF (Bad file descriptor) [pid 3624] close(20) = -1 EBADF (Bad file descriptor) [pid 3624] close(21) = -1 EBADF (Bad file descriptor) [pid 3624] close(22) = -1 EBADF (Bad file descriptor) [pid 3624] close(23) = -1 EBADF (Bad file descriptor) [pid 3624] close(24) = -1 EBADF (Bad file descriptor) [pid 3624] close(25) = -1 EBADF (Bad file descriptor) [pid 3624] close(26) = -1 EBADF (Bad file descriptor) [pid 3624] close(27) = -1 EBADF (Bad file descriptor) [pid 3624] close(28) = -1 EBADF (Bad file descriptor) [pid 3624] close(29) = -1 EBADF (Bad file descriptor) [pid 3624] exit_group(0) = ? [pid 3624] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./4/binderfs") = 0 [pid 3600] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./4/cgroup") = 0 [pid 3600] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./4/cgroup.net") = 0 [pid 3600] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./4/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./4") = 0 [pid 3600] mkdir("./5", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3626 attached , child_tidptr=0x55555676a5d0) = 12 [pid 3626] chdir("./5") = 0 [pid 3626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3626] setpgid(0, 0) = 0 [pid 3626] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3626] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3626] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3626] write(3, "1000", 4) = 4 [pid 3626] close(3) = 0 [pid 3626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3626] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3626] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3626] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3626] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3626] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3626] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3626] close(3) = 0 [pid 3626] close(4) = 0 [pid 3626] close(5) = -1 EBADF (Bad file descriptor) [pid 3626] close(6) = -1 EBADF (Bad file descriptor) [pid 3626] close(7) = -1 EBADF (Bad file descriptor) [pid 3626] close(8) = -1 EBADF (Bad file descriptor) [pid 3626] close(9) = -1 EBADF (Bad file descriptor) [pid 3626] close(10) = -1 EBADF (Bad file descriptor) [pid 3626] close(11) = -1 EBADF (Bad file descriptor) [pid 3626] close(12) = -1 EBADF (Bad file descriptor) [pid 3626] close(13) = -1 EBADF (Bad file descriptor) [pid 3626] close(14) = -1 EBADF (Bad file descriptor) [pid 3626] close(15) = -1 EBADF (Bad file descriptor) [pid 3626] close(16) = -1 EBADF (Bad file descriptor) [pid 3626] close(17) = -1 EBADF (Bad file descriptor) [pid 3626] close(18) = -1 EBADF (Bad file descriptor) [pid 3626] close(19) = -1 EBADF (Bad file descriptor) [pid 3626] close(20) = -1 EBADF (Bad file descriptor) [pid 3626] close(21) = -1 EBADF (Bad file descriptor) [pid 3626] close(22) = -1 EBADF (Bad file descriptor) [pid 3626] close(23) = -1 EBADF (Bad file descriptor) [pid 3626] close(24) = -1 EBADF (Bad file descriptor) [pid 3626] close(25) = -1 EBADF (Bad file descriptor) [pid 3626] close(26) = -1 EBADF (Bad file descriptor) [pid 3626] close(27) = -1 EBADF (Bad file descriptor) [pid 3626] close(28) = -1 EBADF (Bad file descriptor) [pid 3626] close(29) = -1 EBADF (Bad file descriptor) [pid 3626] exit_group(0) = ? [pid 3626] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./5/binderfs") = 0 [pid 3600] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./5/cgroup") = 0 [pid 3600] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./5/cgroup.net") = 0 [pid 3600] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./5/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./5") = 0 [pid 3600] mkdir("./6", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3628 attached , child_tidptr=0x55555676a5d0) = 14 [pid 3628] chdir("./6") = 0 [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3628] setpgid(0, 0) = 0 [pid 3628] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3628] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3628] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3628] write(3, "1000", 4) = 4 [pid 3628] close(3) = 0 [pid 3628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3628] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3628] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3628] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3628] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3628] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3628] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3628] close(3) = 0 [pid 3628] close(4) = 0 [pid 3628] close(5) = -1 EBADF (Bad file descriptor) [pid 3628] close(6) = -1 EBADF (Bad file descriptor) [pid 3628] close(7) = -1 EBADF (Bad file descriptor) [pid 3628] close(8) = -1 EBADF (Bad file descriptor) [pid 3628] close(9) = -1 EBADF (Bad file descriptor) [pid 3628] close(10) = -1 EBADF (Bad file descriptor) [pid 3628] close(11) = -1 EBADF (Bad file descriptor) [pid 3628] close(12) = -1 EBADF (Bad file descriptor) [pid 3628] close(13) = -1 EBADF (Bad file descriptor) [pid 3628] close(14) = -1 EBADF (Bad file descriptor) [pid 3628] close(15) = -1 EBADF (Bad file descriptor) [pid 3628] close(16) = -1 EBADF (Bad file descriptor) [pid 3628] close(17) = -1 EBADF (Bad file descriptor) [pid 3628] close(18) = -1 EBADF (Bad file descriptor) [pid 3628] close(19) = -1 EBADF (Bad file descriptor) [pid 3628] close(20) = -1 EBADF (Bad file descriptor) [pid 3628] close(21) = -1 EBADF (Bad file descriptor) [pid 3628] close(22) = -1 EBADF (Bad file descriptor) [pid 3628] close(23) = -1 EBADF (Bad file descriptor) [pid 3628] close(24) = -1 EBADF (Bad file descriptor) [pid 3628] close(25) = -1 EBADF (Bad file descriptor) [pid 3628] close(26) = -1 EBADF (Bad file descriptor) [pid 3628] close(27) = -1 EBADF (Bad file descriptor) [pid 3628] close(28) = -1 EBADF (Bad file descriptor) [pid 3628] close(29) = -1 EBADF (Bad file descriptor) [pid 3628] exit_group(0) = ? [pid 3628] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./6/binderfs") = 0 [pid 3600] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./6/cgroup") = 0 [pid 3600] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./6/cgroup.net") = 0 [pid 3600] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./6/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./6") = 0 [pid 3600] mkdir("./7", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3630 attached , child_tidptr=0x55555676a5d0) = 16 [pid 3630] chdir("./7") = 0 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3630] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3630] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3630] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3630] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3630] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3630] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3630] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3630] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3630] close(3) = 0 [pid 3630] close(4) = 0 [pid 3630] close(5) = -1 EBADF (Bad file descriptor) [pid 3630] close(6) = -1 EBADF (Bad file descriptor) [pid 3630] close(7) = -1 EBADF (Bad file descriptor) [pid 3630] close(8) = -1 EBADF (Bad file descriptor) [pid 3630] close(9) = -1 EBADF (Bad file descriptor) [pid 3630] close(10) = -1 EBADF (Bad file descriptor) [pid 3630] close(11) = -1 EBADF (Bad file descriptor) [pid 3630] close(12) = -1 EBADF (Bad file descriptor) [pid 3630] close(13) = -1 EBADF (Bad file descriptor) [pid 3630] close(14) = -1 EBADF (Bad file descriptor) [pid 3630] close(15) = -1 EBADF (Bad file descriptor) [pid 3630] close(16) = -1 EBADF (Bad file descriptor) [pid 3630] close(17) = -1 EBADF (Bad file descriptor) [pid 3630] close(18) = -1 EBADF (Bad file descriptor) [pid 3630] close(19) = -1 EBADF (Bad file descriptor) [pid 3630] close(20) = -1 EBADF (Bad file descriptor) [pid 3630] close(21) = -1 EBADF (Bad file descriptor) [pid 3630] close(22) = -1 EBADF (Bad file descriptor) [pid 3630] close(23) = -1 EBADF (Bad file descriptor) [pid 3630] close(24) = -1 EBADF (Bad file descriptor) [pid 3630] close(25) = -1 EBADF (Bad file descriptor) [pid 3630] close(26) = -1 EBADF (Bad file descriptor) [pid 3630] close(27) = -1 EBADF (Bad file descriptor) [pid 3630] close(28) = -1 EBADF (Bad file descriptor) [pid 3630] close(29) = -1 EBADF (Bad file descriptor) [pid 3630] exit_group(0) = ? [pid 3630] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./7/binderfs") = 0 [pid 3600] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./7/cgroup") = 0 [pid 3600] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./7/cgroup.net") = 0 [pid 3600] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./7/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./7") = 0 [pid 3600] mkdir("./8", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3632 attached , child_tidptr=0x55555676a5d0) = 18 [pid 3632] chdir("./8") = 0 [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3632] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3632] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3632] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3632] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3632] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3632] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3632] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3632] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3632] close(3) = 0 [pid 3632] close(4) = 0 [pid 3632] close(5) = -1 EBADF (Bad file descriptor) [pid 3632] close(6) = -1 EBADF (Bad file descriptor) [pid 3632] close(7) = -1 EBADF (Bad file descriptor) [pid 3632] close(8) = -1 EBADF (Bad file descriptor) [pid 3632] close(9) = -1 EBADF (Bad file descriptor) [pid 3632] close(10) = -1 EBADF (Bad file descriptor) [pid 3632] close(11) = -1 EBADF (Bad file descriptor) [pid 3632] close(12) = -1 EBADF (Bad file descriptor) [pid 3632] close(13) = -1 EBADF (Bad file descriptor) [pid 3632] close(14) = -1 EBADF (Bad file descriptor) [pid 3632] close(15) = -1 EBADF (Bad file descriptor) [pid 3632] close(16) = -1 EBADF (Bad file descriptor) [pid 3632] close(17) = -1 EBADF (Bad file descriptor) [pid 3632] close(18) = -1 EBADF (Bad file descriptor) [pid 3632] close(19) = -1 EBADF (Bad file descriptor) [pid 3632] close(20) = -1 EBADF (Bad file descriptor) [pid 3632] close(21) = -1 EBADF (Bad file descriptor) [pid 3632] close(22) = -1 EBADF (Bad file descriptor) [pid 3632] close(23) = -1 EBADF (Bad file descriptor) [pid 3632] close(24) = -1 EBADF (Bad file descriptor) [pid 3632] close(25) = -1 EBADF (Bad file descriptor) [pid 3632] close(26) = -1 EBADF (Bad file descriptor) [pid 3632] close(27) = -1 EBADF (Bad file descriptor) [pid 3632] close(28) = -1 EBADF (Bad file descriptor) [pid 3632] close(29) = -1 EBADF (Bad file descriptor) [pid 3632] exit_group(0) = ? [pid 3632] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./8/binderfs") = 0 [pid 3600] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./8/cgroup") = 0 [pid 3600] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./8/cgroup.net") = 0 [pid 3600] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./8/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./8") = 0 [pid 3600] mkdir("./9", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3634 attached [pid 3634] chdir("./9") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 20 [pid 3634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3634] setpgid(0, 0) = 0 [pid 3634] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3634] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3634] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3634] write(3, "1000", 4) = 4 [pid 3634] close(3) = 0 [pid 3634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3634] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3634] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3634] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3634] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3634] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3634] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3634] close(3) = 0 [pid 3634] close(4) = 0 [pid 3634] close(5) = -1 EBADF (Bad file descriptor) [pid 3634] close(6) = -1 EBADF (Bad file descriptor) [pid 3634] close(7) = -1 EBADF (Bad file descriptor) [pid 3634] close(8) = -1 EBADF (Bad file descriptor) [pid 3634] close(9) = -1 EBADF (Bad file descriptor) [pid 3634] close(10) = -1 EBADF (Bad file descriptor) [pid 3634] close(11) = -1 EBADF (Bad file descriptor) [pid 3634] close(12) = -1 EBADF (Bad file descriptor) [pid 3634] close(13) = -1 EBADF (Bad file descriptor) [pid 3634] close(14) = -1 EBADF (Bad file descriptor) [pid 3634] close(15) = -1 EBADF (Bad file descriptor) [pid 3634] close(16) = -1 EBADF (Bad file descriptor) [pid 3634] close(17) = -1 EBADF (Bad file descriptor) [pid 3634] close(18) = -1 EBADF (Bad file descriptor) [pid 3634] close(19) = -1 EBADF (Bad file descriptor) [pid 3634] close(20) = -1 EBADF (Bad file descriptor) [pid 3634] close(21) = -1 EBADF (Bad file descriptor) [pid 3634] close(22) = -1 EBADF (Bad file descriptor) [pid 3634] close(23) = -1 EBADF (Bad file descriptor) [pid 3634] close(24) = -1 EBADF (Bad file descriptor) [pid 3634] close(25) = -1 EBADF (Bad file descriptor) [pid 3634] close(26) = -1 EBADF (Bad file descriptor) [pid 3634] close(27) = -1 EBADF (Bad file descriptor) [pid 3634] close(28) = -1 EBADF (Bad file descriptor) [pid 3634] close(29) = -1 EBADF (Bad file descriptor) [pid 3634] exit_group(0) = ? [pid 3634] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./9/binderfs") = 0 [pid 3600] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./9/cgroup") = 0 [pid 3600] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./9/cgroup.net") = 0 [pid 3600] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./9/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./9") = 0 [pid 3600] mkdir("./10", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3637 attached [pid 3637] chdir("./10") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 22 [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [pid 3637] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3637] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3637] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3637] write(3, "1000", 4) = 4 [pid 3637] close(3) = 0 [pid 3637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3637] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3637] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3637] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3637] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3637] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3637] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3637] close(3) = 0 [pid 3637] close(4) = 0 [pid 3637] close(5) = -1 EBADF (Bad file descriptor) [pid 3637] close(6) = -1 EBADF (Bad file descriptor) [pid 3637] close(7) = -1 EBADF (Bad file descriptor) [pid 3637] close(8) = -1 EBADF (Bad file descriptor) [pid 3637] close(9) = -1 EBADF (Bad file descriptor) [pid 3637] close(10) = -1 EBADF (Bad file descriptor) [pid 3637] close(11) = -1 EBADF (Bad file descriptor) [pid 3637] close(12) = -1 EBADF (Bad file descriptor) [pid 3637] close(13) = -1 EBADF (Bad file descriptor) [pid 3637] close(14) = -1 EBADF (Bad file descriptor) [pid 3637] close(15) = -1 EBADF (Bad file descriptor) [pid 3637] close(16) = -1 EBADF (Bad file descriptor) [pid 3637] close(17) = -1 EBADF (Bad file descriptor) [pid 3637] close(18) = -1 EBADF (Bad file descriptor) [pid 3637] close(19) = -1 EBADF (Bad file descriptor) [pid 3637] close(20) = -1 EBADF (Bad file descriptor) [pid 3637] close(21) = -1 EBADF (Bad file descriptor) [pid 3637] close(22) = -1 EBADF (Bad file descriptor) [pid 3637] close(23) = -1 EBADF (Bad file descriptor) [pid 3637] close(24) = -1 EBADF (Bad file descriptor) [pid 3637] close(25) = -1 EBADF (Bad file descriptor) [pid 3637] close(26) = -1 EBADF (Bad file descriptor) [pid 3637] close(27) = -1 EBADF (Bad file descriptor) [pid 3637] close(28) = -1 EBADF (Bad file descriptor) [pid 3637] close(29) = -1 EBADF (Bad file descriptor) [pid 3637] exit_group(0) = ? [pid 3637] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./10/binderfs") = 0 [pid 3600] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./10/cgroup") = 0 [pid 3600] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./10/cgroup.net") = 0 [pid 3600] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./10/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./10") = 0 [pid 3600] mkdir("./11", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3639 attached , child_tidptr=0x55555676a5d0) = 24 [pid 3639] chdir("./11") = 0 [pid 3639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3639] setpgid(0, 0) = 0 [pid 3639] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3639] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3639] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3639] write(3, "1000", 4) = 4 [pid 3639] close(3) = 0 [pid 3639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3639] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3639] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3639] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3639] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3639] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3639] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3639] close(3) = 0 [pid 3639] close(4) = 0 [pid 3639] close(5) = -1 EBADF (Bad file descriptor) [pid 3639] close(6) = -1 EBADF (Bad file descriptor) [pid 3639] close(7) = -1 EBADF (Bad file descriptor) [pid 3639] close(8) = -1 EBADF (Bad file descriptor) [pid 3639] close(9) = -1 EBADF (Bad file descriptor) [pid 3639] close(10) = -1 EBADF (Bad file descriptor) [pid 3639] close(11) = -1 EBADF (Bad file descriptor) [pid 3639] close(12) = -1 EBADF (Bad file descriptor) [pid 3639] close(13) = -1 EBADF (Bad file descriptor) [pid 3639] close(14) = -1 EBADF (Bad file descriptor) [pid 3639] close(15) = -1 EBADF (Bad file descriptor) [pid 3639] close(16) = -1 EBADF (Bad file descriptor) [pid 3639] close(17) = -1 EBADF (Bad file descriptor) [pid 3639] close(18) = -1 EBADF (Bad file descriptor) [pid 3639] close(19) = -1 EBADF (Bad file descriptor) [pid 3639] close(20) = -1 EBADF (Bad file descriptor) [pid 3639] close(21) = -1 EBADF (Bad file descriptor) [pid 3639] close(22) = -1 EBADF (Bad file descriptor) [pid 3639] close(23) = -1 EBADF (Bad file descriptor) [pid 3639] close(24) = -1 EBADF (Bad file descriptor) [pid 3639] close(25) = -1 EBADF (Bad file descriptor) [pid 3639] close(26) = -1 EBADF (Bad file descriptor) [pid 3639] close(27) = -1 EBADF (Bad file descriptor) [pid 3639] close(28) = -1 EBADF (Bad file descriptor) [pid 3639] close(29) = -1 EBADF (Bad file descriptor) [pid 3639] exit_group(0) = ? [pid 3639] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./11/binderfs") = 0 [pid 3600] umount2("./11/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./11/cgroup") = 0 [pid 3600] umount2("./11/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./11/cgroup.net") = 0 [pid 3600] umount2("./11/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./11/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./11") = 0 [pid 3600] mkdir("./12", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3641 attached , child_tidptr=0x55555676a5d0) = 26 [pid 3641] chdir("./12") = 0 [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3641] setpgid(0, 0) = 0 [pid 3641] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3641] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3641] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3641] write(3, "1000", 4) = 4 [pid 3641] close(3) = 0 [pid 3641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3641] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3641] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3641] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3641] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3641] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3641] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3641] close(3) = 0 [pid 3641] close(4) = 0 [pid 3641] close(5) = -1 EBADF (Bad file descriptor) [pid 3641] close(6) = -1 EBADF (Bad file descriptor) [pid 3641] close(7) = -1 EBADF (Bad file descriptor) [pid 3641] close(8) = -1 EBADF (Bad file descriptor) [pid 3641] close(9) = -1 EBADF (Bad file descriptor) [pid 3641] close(10) = -1 EBADF (Bad file descriptor) [pid 3641] close(11) = -1 EBADF (Bad file descriptor) [pid 3641] close(12) = -1 EBADF (Bad file descriptor) [pid 3641] close(13) = -1 EBADF (Bad file descriptor) [pid 3641] close(14) = -1 EBADF (Bad file descriptor) [pid 3641] close(15) = -1 EBADF (Bad file descriptor) [pid 3641] close(16) = -1 EBADF (Bad file descriptor) [pid 3641] close(17) = -1 EBADF (Bad file descriptor) [pid 3641] close(18) = -1 EBADF (Bad file descriptor) [pid 3641] close(19) = -1 EBADF (Bad file descriptor) [pid 3641] close(20) = -1 EBADF (Bad file descriptor) [pid 3641] close(21) = -1 EBADF (Bad file descriptor) [pid 3641] close(22) = -1 EBADF (Bad file descriptor) [pid 3641] close(23) = -1 EBADF (Bad file descriptor) [pid 3641] close(24) = -1 EBADF (Bad file descriptor) [pid 3641] close(25) = -1 EBADF (Bad file descriptor) [pid 3641] close(26) = -1 EBADF (Bad file descriptor) [pid 3641] close(27) = -1 EBADF (Bad file descriptor) [pid 3641] close(28) = -1 EBADF (Bad file descriptor) [pid 3641] close(29) = -1 EBADF (Bad file descriptor) [pid 3641] exit_group(0) = ? [pid 3641] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./12/binderfs") = 0 [pid 3600] umount2("./12/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./12/cgroup") = 0 [pid 3600] umount2("./12/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./12/cgroup.net") = 0 [pid 3600] umount2("./12/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./12/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./12") = 0 [pid 3600] mkdir("./13", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3643 attached , child_tidptr=0x55555676a5d0) = 28 [pid 3643] chdir("./13") = 0 [pid 3643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3643] setpgid(0, 0) = 0 [pid 3643] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3643] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3643] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3643] write(3, "1000", 4) = 4 [pid 3643] close(3) = 0 [pid 3643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3643] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3643] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3643] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3643] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3643] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3643] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3643] close(3) = 0 [pid 3643] close(4) = 0 [pid 3643] close(5) = -1 EBADF (Bad file descriptor) [pid 3643] close(6) = -1 EBADF (Bad file descriptor) [pid 3643] close(7) = -1 EBADF (Bad file descriptor) [pid 3643] close(8) = -1 EBADF (Bad file descriptor) [pid 3643] close(9) = -1 EBADF (Bad file descriptor) [pid 3643] close(10) = -1 EBADF (Bad file descriptor) [pid 3643] close(11) = -1 EBADF (Bad file descriptor) [pid 3643] close(12) = -1 EBADF (Bad file descriptor) [pid 3643] close(13) = -1 EBADF (Bad file descriptor) [pid 3643] close(14) = -1 EBADF (Bad file descriptor) [pid 3643] close(15) = -1 EBADF (Bad file descriptor) [pid 3643] close(16) = -1 EBADF (Bad file descriptor) [pid 3643] close(17) = -1 EBADF (Bad file descriptor) [pid 3643] close(18) = -1 EBADF (Bad file descriptor) [pid 3643] close(19) = -1 EBADF (Bad file descriptor) [pid 3643] close(20) = -1 EBADF (Bad file descriptor) [pid 3643] close(21) = -1 EBADF (Bad file descriptor) [pid 3643] close(22) = -1 EBADF (Bad file descriptor) [pid 3643] close(23) = -1 EBADF (Bad file descriptor) [pid 3643] close(24) = -1 EBADF (Bad file descriptor) [pid 3643] close(25) = -1 EBADF (Bad file descriptor) [pid 3643] close(26) = -1 EBADF (Bad file descriptor) [pid 3643] close(27) = -1 EBADF (Bad file descriptor) [pid 3643] close(28) = -1 EBADF (Bad file descriptor) [pid 3643] close(29) = -1 EBADF (Bad file descriptor) [pid 3643] exit_group(0) = ? [pid 3643] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./13/binderfs") = 0 [pid 3600] umount2("./13/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./13/cgroup") = 0 [pid 3600] umount2("./13/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./13/cgroup.net") = 0 [pid 3600] umount2("./13/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./13/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./13") = 0 [pid 3600] mkdir("./14", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3645 attached , child_tidptr=0x55555676a5d0) = 30 [pid 3645] chdir("./14") = 0 [pid 3645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3645] setpgid(0, 0) = 0 [pid 3645] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3645] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3645] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3645] write(3, "1000", 4) = 4 [pid 3645] close(3) = 0 [pid 3645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3645] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3645] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3645] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3645] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3645] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3645] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3645] close(3) = 0 [pid 3645] close(4) = 0 [pid 3645] close(5) = -1 EBADF (Bad file descriptor) [pid 3645] close(6) = -1 EBADF (Bad file descriptor) [pid 3645] close(7) = -1 EBADF (Bad file descriptor) [pid 3645] close(8) = -1 EBADF (Bad file descriptor) [pid 3645] close(9) = -1 EBADF (Bad file descriptor) [pid 3645] close(10) = -1 EBADF (Bad file descriptor) [pid 3645] close(11) = -1 EBADF (Bad file descriptor) [pid 3645] close(12) = -1 EBADF (Bad file descriptor) [pid 3645] close(13) = -1 EBADF (Bad file descriptor) [pid 3645] close(14) = -1 EBADF (Bad file descriptor) [pid 3645] close(15) = -1 EBADF (Bad file descriptor) [pid 3645] close(16) = -1 EBADF (Bad file descriptor) [pid 3645] close(17) = -1 EBADF (Bad file descriptor) [pid 3645] close(18) = -1 EBADF (Bad file descriptor) [pid 3645] close(19) = -1 EBADF (Bad file descriptor) [pid 3645] close(20) = -1 EBADF (Bad file descriptor) [pid 3645] close(21) = -1 EBADF (Bad file descriptor) [pid 3645] close(22) = -1 EBADF (Bad file descriptor) [pid 3645] close(23) = -1 EBADF (Bad file descriptor) [pid 3645] close(24) = -1 EBADF (Bad file descriptor) [pid 3645] close(25) = -1 EBADF (Bad file descriptor) [pid 3645] close(26) = -1 EBADF (Bad file descriptor) [pid 3645] close(27) = -1 EBADF (Bad file descriptor) [pid 3645] close(28) = -1 EBADF (Bad file descriptor) [pid 3645] close(29) = -1 EBADF (Bad file descriptor) [pid 3645] exit_group(0) = ? [pid 3645] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./14/binderfs") = 0 [pid 3600] umount2("./14/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./14/cgroup") = 0 [pid 3600] umount2("./14/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./14/cgroup.net") = 0 [pid 3600] umount2("./14/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./14/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./14") = 0 [pid 3600] mkdir("./15", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3647 attached [pid 3647] chdir("./15") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 32 [pid 3647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3647] setpgid(0, 0) = 0 [pid 3647] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3647] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3647] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3647] write(3, "1000", 4) = 4 [pid 3647] close(3) = 0 [pid 3647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3647] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3647] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3647] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3647] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3647] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3647] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3647] close(3) = 0 [pid 3647] close(4) = 0 [pid 3647] close(5) = -1 EBADF (Bad file descriptor) [pid 3647] close(6) = -1 EBADF (Bad file descriptor) [pid 3647] close(7) = -1 EBADF (Bad file descriptor) [pid 3647] close(8) = -1 EBADF (Bad file descriptor) [pid 3647] close(9) = -1 EBADF (Bad file descriptor) [pid 3647] close(10) = -1 EBADF (Bad file descriptor) [pid 3647] close(11) = -1 EBADF (Bad file descriptor) [pid 3647] close(12) = -1 EBADF (Bad file descriptor) [pid 3647] close(13) = -1 EBADF (Bad file descriptor) [pid 3647] close(14) = -1 EBADF (Bad file descriptor) [pid 3647] close(15) = -1 EBADF (Bad file descriptor) [pid 3647] close(16) = -1 EBADF (Bad file descriptor) [pid 3647] close(17) = -1 EBADF (Bad file descriptor) [pid 3647] close(18) = -1 EBADF (Bad file descriptor) [pid 3647] close(19) = -1 EBADF (Bad file descriptor) [pid 3647] close(20) = -1 EBADF (Bad file descriptor) [pid 3647] close(21) = -1 EBADF (Bad file descriptor) [pid 3647] close(22) = -1 EBADF (Bad file descriptor) [pid 3647] close(23) = -1 EBADF (Bad file descriptor) [pid 3647] close(24) = -1 EBADF (Bad file descriptor) [pid 3647] close(25) = -1 EBADF (Bad file descriptor) [pid 3647] close(26) = -1 EBADF (Bad file descriptor) [pid 3647] close(27) = -1 EBADF (Bad file descriptor) [pid 3647] close(28) = -1 EBADF (Bad file descriptor) [pid 3647] close(29) = -1 EBADF (Bad file descriptor) [pid 3647] exit_group(0) = ? [pid 3647] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./15/binderfs") = 0 [pid 3600] umount2("./15/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./15/cgroup") = 0 [pid 3600] umount2("./15/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./15/cgroup.net") = 0 [pid 3600] umount2("./15/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./15/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./15") = 0 [pid 3600] mkdir("./16", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3649 attached [pid 3649] chdir("./16") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 34 [pid 3649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3649] setpgid(0, 0) = 0 [pid 3649] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3649] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3649] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3649] write(3, "1000", 4) = 4 [pid 3649] close(3) = 0 [pid 3649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3649] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3649] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3649] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3649] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3649] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3649] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3649] close(3) = 0 [pid 3649] close(4) = 0 [pid 3649] close(5) = -1 EBADF (Bad file descriptor) [pid 3649] close(6) = -1 EBADF (Bad file descriptor) [pid 3649] close(7) = -1 EBADF (Bad file descriptor) [pid 3649] close(8) = -1 EBADF (Bad file descriptor) [pid 3649] close(9) = -1 EBADF (Bad file descriptor) [pid 3649] close(10) = -1 EBADF (Bad file descriptor) [pid 3649] close(11) = -1 EBADF (Bad file descriptor) [pid 3649] close(12) = -1 EBADF (Bad file descriptor) [pid 3649] close(13) = -1 EBADF (Bad file descriptor) [pid 3649] close(14) = -1 EBADF (Bad file descriptor) [pid 3649] close(15) = -1 EBADF (Bad file descriptor) [pid 3649] close(16) = -1 EBADF (Bad file descriptor) [pid 3649] close(17) = -1 EBADF (Bad file descriptor) [pid 3649] close(18) = -1 EBADF (Bad file descriptor) [pid 3649] close(19) = -1 EBADF (Bad file descriptor) [pid 3649] close(20) = -1 EBADF (Bad file descriptor) [pid 3649] close(21) = -1 EBADF (Bad file descriptor) [pid 3649] close(22) = -1 EBADF (Bad file descriptor) [pid 3649] close(23) = -1 EBADF (Bad file descriptor) [pid 3649] close(24) = -1 EBADF (Bad file descriptor) [pid 3649] close(25) = -1 EBADF (Bad file descriptor) [pid 3649] close(26) = -1 EBADF (Bad file descriptor) [pid 3649] close(27) = -1 EBADF (Bad file descriptor) [pid 3649] close(28) = -1 EBADF (Bad file descriptor) [pid 3649] close(29) = -1 EBADF (Bad file descriptor) [pid 3649] exit_group(0) = ? [pid 3649] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./16/binderfs") = 0 [pid 3600] umount2("./16/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./16/cgroup") = 0 [pid 3600] umount2("./16/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./16/cgroup.net") = 0 [pid 3600] umount2("./16/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./16/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./16") = 0 [pid 3600] mkdir("./17", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3651 attached [pid 3651] chdir("./17") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 36 [pid 3651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3651] setpgid(0, 0) = 0 [pid 3651] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3651] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3651] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3651] write(3, "1000", 4) = 4 [pid 3651] close(3) = 0 [pid 3651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3651] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3651] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3651] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3651] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3651] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3651] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3651] close(3) = 0 [pid 3651] close(4) = 0 [pid 3651] close(5) = -1 EBADF (Bad file descriptor) [pid 3651] close(6) = -1 EBADF (Bad file descriptor) [pid 3651] close(7) = -1 EBADF (Bad file descriptor) [pid 3651] close(8) = -1 EBADF (Bad file descriptor) [pid 3651] close(9) = -1 EBADF (Bad file descriptor) [pid 3651] close(10) = -1 EBADF (Bad file descriptor) [pid 3651] close(11) = -1 EBADF (Bad file descriptor) [pid 3651] close(12) = -1 EBADF (Bad file descriptor) [pid 3651] close(13) = -1 EBADF (Bad file descriptor) [pid 3651] close(14) = -1 EBADF (Bad file descriptor) [pid 3651] close(15) = -1 EBADF (Bad file descriptor) [pid 3651] close(16) = -1 EBADF (Bad file descriptor) [pid 3651] close(17) = -1 EBADF (Bad file descriptor) [pid 3651] close(18) = -1 EBADF (Bad file descriptor) [pid 3651] close(19) = -1 EBADF (Bad file descriptor) [pid 3651] close(20) = -1 EBADF (Bad file descriptor) [pid 3651] close(21) = -1 EBADF (Bad file descriptor) [pid 3651] close(22) = -1 EBADF (Bad file descriptor) [pid 3651] close(23) = -1 EBADF (Bad file descriptor) [pid 3651] close(24) = -1 EBADF (Bad file descriptor) [pid 3651] close(25) = -1 EBADF (Bad file descriptor) [pid 3651] close(26) = -1 EBADF (Bad file descriptor) [pid 3651] close(27) = -1 EBADF (Bad file descriptor) [pid 3651] close(28) = -1 EBADF (Bad file descriptor) [pid 3651] close(29) = -1 EBADF (Bad file descriptor) [pid 3651] exit_group(0) = ? [pid 3651] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./17/binderfs") = 0 [pid 3600] umount2("./17/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./17/cgroup") = 0 [pid 3600] umount2("./17/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./17/cgroup.net") = 0 [pid 3600] umount2("./17/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./17/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./17") = 0 [pid 3600] mkdir("./18", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3653 attached , child_tidptr=0x55555676a5d0) = 38 [pid 3653] chdir("./18") = 0 [pid 3653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3653] setpgid(0, 0) = 0 [pid 3653] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3653] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3653] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3653] write(3, "1000", 4) = 4 [pid 3653] close(3) = 0 [pid 3653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3653] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3653] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3653] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3653] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3653] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3653] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3653] close(3) = 0 [pid 3653] close(4) = 0 [pid 3653] close(5) = -1 EBADF (Bad file descriptor) [pid 3653] close(6) = -1 EBADF (Bad file descriptor) [pid 3653] close(7) = -1 EBADF (Bad file descriptor) [pid 3653] close(8) = -1 EBADF (Bad file descriptor) [pid 3653] close(9) = -1 EBADF (Bad file descriptor) [pid 3653] close(10) = -1 EBADF (Bad file descriptor) [pid 3653] close(11) = -1 EBADF (Bad file descriptor) [pid 3653] close(12) = -1 EBADF (Bad file descriptor) [pid 3653] close(13) = -1 EBADF (Bad file descriptor) [pid 3653] close(14) = -1 EBADF (Bad file descriptor) [pid 3653] close(15) = -1 EBADF (Bad file descriptor) [pid 3653] close(16) = -1 EBADF (Bad file descriptor) [pid 3653] close(17) = -1 EBADF (Bad file descriptor) [pid 3653] close(18) = -1 EBADF (Bad file descriptor) [pid 3653] close(19) = -1 EBADF (Bad file descriptor) [pid 3653] close(20) = -1 EBADF (Bad file descriptor) [pid 3653] close(21) = -1 EBADF (Bad file descriptor) [pid 3653] close(22) = -1 EBADF (Bad file descriptor) [pid 3653] close(23) = -1 EBADF (Bad file descriptor) [pid 3653] close(24) = -1 EBADF (Bad file descriptor) [pid 3653] close(25) = -1 EBADF (Bad file descriptor) [pid 3653] close(26) = -1 EBADF (Bad file descriptor) [pid 3653] close(27) = -1 EBADF (Bad file descriptor) [pid 3653] close(28) = -1 EBADF (Bad file descriptor) [pid 3653] close(29) = -1 EBADF (Bad file descriptor) [pid 3653] exit_group(0) = ? [pid 3653] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./18/binderfs") = 0 [pid 3600] umount2("./18/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./18/cgroup") = 0 [pid 3600] umount2("./18/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./18/cgroup.net") = 0 [pid 3600] umount2("./18/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./18/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./18") = 0 [pid 3600] mkdir("./19", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3655 attached , child_tidptr=0x55555676a5d0) = 40 [pid 3655] chdir("./19") = 0 [pid 3655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3655] setpgid(0, 0) = 0 [pid 3655] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3655] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3655] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3655] write(3, "1000", 4) = 4 [pid 3655] close(3) = 0 [pid 3655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3655] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3655] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3655] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3655] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3655] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3655] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3655] close(3) = 0 [pid 3655] close(4) = 0 [pid 3655] close(5) = -1 EBADF (Bad file descriptor) [pid 3655] close(6) = -1 EBADF (Bad file descriptor) [pid 3655] close(7) = -1 EBADF (Bad file descriptor) [pid 3655] close(8) = -1 EBADF (Bad file descriptor) [pid 3655] close(9) = -1 EBADF (Bad file descriptor) [pid 3655] close(10) = -1 EBADF (Bad file descriptor) [pid 3655] close(11) = -1 EBADF (Bad file descriptor) [pid 3655] close(12) = -1 EBADF (Bad file descriptor) [pid 3655] close(13) = -1 EBADF (Bad file descriptor) [pid 3655] close(14) = -1 EBADF (Bad file descriptor) [pid 3655] close(15) = -1 EBADF (Bad file descriptor) [pid 3655] close(16) = -1 EBADF (Bad file descriptor) [pid 3655] close(17) = -1 EBADF (Bad file descriptor) [pid 3655] close(18) = -1 EBADF (Bad file descriptor) [pid 3655] close(19) = -1 EBADF (Bad file descriptor) [pid 3655] close(20) = -1 EBADF (Bad file descriptor) [pid 3655] close(21) = -1 EBADF (Bad file descriptor) [pid 3655] close(22) = -1 EBADF (Bad file descriptor) [pid 3655] close(23) = -1 EBADF (Bad file descriptor) [pid 3655] close(24) = -1 EBADF (Bad file descriptor) [pid 3655] close(25) = -1 EBADF (Bad file descriptor) [pid 3655] close(26) = -1 EBADF (Bad file descriptor) [pid 3655] close(27) = -1 EBADF (Bad file descriptor) [pid 3655] close(28) = -1 EBADF (Bad file descriptor) [pid 3655] close(29) = -1 EBADF (Bad file descriptor) [pid 3655] exit_group(0) = ? [pid 3655] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./19/binderfs") = 0 [pid 3600] umount2("./19/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./19/cgroup") = 0 [pid 3600] umount2("./19/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./19/cgroup.net") = 0 [pid 3600] umount2("./19/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./19/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./19") = 0 [pid 3600] mkdir("./20", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3657 attached [pid 3657] chdir("./20" [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 42 [pid 3657] <... chdir resumed>) = 0 [pid 3657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3657] setpgid(0, 0) = 0 [pid 3657] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3657] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3657] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3657] write(3, "1000", 4) = 4 [pid 3657] close(3) = 0 [pid 3657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3657] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3657] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3657] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3657] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3657] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3657] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3657] close(3) = 0 [pid 3657] close(4) = 0 [pid 3657] close(5) = -1 EBADF (Bad file descriptor) [pid 3657] close(6) = -1 EBADF (Bad file descriptor) [pid 3657] close(7) = -1 EBADF (Bad file descriptor) [pid 3657] close(8) = -1 EBADF (Bad file descriptor) [pid 3657] close(9) = -1 EBADF (Bad file descriptor) [pid 3657] close(10) = -1 EBADF (Bad file descriptor) [pid 3657] close(11) = -1 EBADF (Bad file descriptor) [pid 3657] close(12) = -1 EBADF (Bad file descriptor) [pid 3657] close(13) = -1 EBADF (Bad file descriptor) [pid 3657] close(14) = -1 EBADF (Bad file descriptor) [pid 3657] close(15) = -1 EBADF (Bad file descriptor) [pid 3657] close(16) = -1 EBADF (Bad file descriptor) [pid 3657] close(17) = -1 EBADF (Bad file descriptor) [pid 3657] close(18) = -1 EBADF (Bad file descriptor) [pid 3657] close(19) = -1 EBADF (Bad file descriptor) [pid 3657] close(20) = -1 EBADF (Bad file descriptor) [pid 3657] close(21) = -1 EBADF (Bad file descriptor) [pid 3657] close(22) = -1 EBADF (Bad file descriptor) [pid 3657] close(23) = -1 EBADF (Bad file descriptor) [pid 3657] close(24) = -1 EBADF (Bad file descriptor) [pid 3657] close(25) = -1 EBADF (Bad file descriptor) [pid 3657] close(26) = -1 EBADF (Bad file descriptor) [pid 3657] close(27) = -1 EBADF (Bad file descriptor) [pid 3657] close(28) = -1 EBADF (Bad file descriptor) [pid 3657] close(29) = -1 EBADF (Bad file descriptor) [pid 3657] exit_group(0) = ? [pid 3657] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./20/binderfs") = 0 [pid 3600] umount2("./20/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./20/cgroup") = 0 [pid 3600] umount2("./20/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./20/cgroup.net") = 0 [pid 3600] umount2("./20/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./20/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./20") = 0 [pid 3600] mkdir("./21", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3659 attached [pid 3659] chdir("./21") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 44 [pid 3659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3659] setpgid(0, 0) = 0 [pid 3659] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3659] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3659] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3659] write(3, "1000", 4) = 4 [pid 3659] close(3) = 0 [pid 3659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3659] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3659] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3659] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3659] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3659] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3659] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3659] close(3) = 0 [pid 3659] close(4) = 0 [pid 3659] close(5) = -1 EBADF (Bad file descriptor) [pid 3659] close(6) = -1 EBADF (Bad file descriptor) [pid 3659] close(7) = -1 EBADF (Bad file descriptor) [pid 3659] close(8) = -1 EBADF (Bad file descriptor) [pid 3659] close(9) = -1 EBADF (Bad file descriptor) [pid 3659] close(10) = -1 EBADF (Bad file descriptor) [pid 3659] close(11) = -1 EBADF (Bad file descriptor) [pid 3659] close(12) = -1 EBADF (Bad file descriptor) [pid 3659] close(13) = -1 EBADF (Bad file descriptor) [pid 3659] close(14) = -1 EBADF (Bad file descriptor) [pid 3659] close(15) = -1 EBADF (Bad file descriptor) [pid 3659] close(16) = -1 EBADF (Bad file descriptor) [pid 3659] close(17) = -1 EBADF (Bad file descriptor) [pid 3659] close(18) = -1 EBADF (Bad file descriptor) [pid 3659] close(19) = -1 EBADF (Bad file descriptor) [pid 3659] close(20) = -1 EBADF (Bad file descriptor) [pid 3659] close(21) = -1 EBADF (Bad file descriptor) [pid 3659] close(22) = -1 EBADF (Bad file descriptor) [pid 3659] close(23) = -1 EBADF (Bad file descriptor) [pid 3659] close(24) = -1 EBADF (Bad file descriptor) [pid 3659] close(25) = -1 EBADF (Bad file descriptor) [pid 3659] close(26) = -1 EBADF (Bad file descriptor) [pid 3659] close(27) = -1 EBADF (Bad file descriptor) [pid 3659] close(28) = -1 EBADF (Bad file descriptor) [pid 3659] close(29) = -1 EBADF (Bad file descriptor) [pid 3659] exit_group(0) = ? [pid 3659] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./21/binderfs") = 0 [pid 3600] umount2("./21/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./21/cgroup") = 0 [pid 3600] umount2("./21/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./21/cgroup.net") = 0 [pid 3600] umount2("./21/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./21/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./21") = 0 [pid 3600] mkdir("./22", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3661 attached , child_tidptr=0x55555676a5d0) = 46 [pid 3661] chdir("./22") = 0 [pid 3661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3661] setpgid(0, 0) = 0 [pid 3661] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3661] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3661] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3661] write(3, "1000", 4) = 4 [pid 3661] close(3) = 0 [pid 3661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3661] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3661] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3661] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3661] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3661] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3661] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3661] close(3) = 0 [pid 3661] close(4) = 0 [pid 3661] close(5) = -1 EBADF (Bad file descriptor) [pid 3661] close(6) = -1 EBADF (Bad file descriptor) [pid 3661] close(7) = -1 EBADF (Bad file descriptor) [pid 3661] close(8) = -1 EBADF (Bad file descriptor) [pid 3661] close(9) = -1 EBADF (Bad file descriptor) [pid 3661] close(10) = -1 EBADF (Bad file descriptor) [pid 3661] close(11) = -1 EBADF (Bad file descriptor) [pid 3661] close(12) = -1 EBADF (Bad file descriptor) [pid 3661] close(13) = -1 EBADF (Bad file descriptor) [pid 3661] close(14) = -1 EBADF (Bad file descriptor) [pid 3661] close(15) = -1 EBADF (Bad file descriptor) [pid 3661] close(16) = -1 EBADF (Bad file descriptor) [pid 3661] close(17) = -1 EBADF (Bad file descriptor) [pid 3661] close(18) = -1 EBADF (Bad file descriptor) [pid 3661] close(19) = -1 EBADF (Bad file descriptor) [pid 3661] close(20) = -1 EBADF (Bad file descriptor) [pid 3661] close(21) = -1 EBADF (Bad file descriptor) [pid 3661] close(22) = -1 EBADF (Bad file descriptor) [pid 3661] close(23) = -1 EBADF (Bad file descriptor) [pid 3661] close(24) = -1 EBADF (Bad file descriptor) [pid 3661] close(25) = -1 EBADF (Bad file descriptor) [pid 3661] close(26) = -1 EBADF (Bad file descriptor) [pid 3661] close(27) = -1 EBADF (Bad file descriptor) [pid 3661] close(28) = -1 EBADF (Bad file descriptor) [pid 3661] close(29) = -1 EBADF (Bad file descriptor) [pid 3661] exit_group(0) = ? [pid 3661] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=1, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./22/binderfs") = 0 [pid 3600] umount2("./22/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./22/cgroup") = 0 [pid 3600] umount2("./22/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./22/cgroup.net") = 0 [pid 3600] umount2("./22/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./22/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./22") = 0 [pid 3600] mkdir("./23", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3663 attached [pid 3663] chdir("./23") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 48 [pid 3663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3663] setpgid(0, 0) = 0 [pid 3663] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3663] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3663] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3663] write(3, "1000", 4) = 4 [pid 3663] close(3) = 0 [pid 3663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3663] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3663] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3663] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3663] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3663] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3663] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3663] close(3) = 0 [pid 3663] close(4) = 0 [pid 3663] close(5) = -1 EBADF (Bad file descriptor) [pid 3663] close(6) = -1 EBADF (Bad file descriptor) [pid 3663] close(7) = -1 EBADF (Bad file descriptor) [pid 3663] close(8) = -1 EBADF (Bad file descriptor) [pid 3663] close(9) = -1 EBADF (Bad file descriptor) [pid 3663] close(10) = -1 EBADF (Bad file descriptor) [pid 3663] close(11) = -1 EBADF (Bad file descriptor) [pid 3663] close(12) = -1 EBADF (Bad file descriptor) [pid 3663] close(13) = -1 EBADF (Bad file descriptor) [pid 3663] close(14) = -1 EBADF (Bad file descriptor) [pid 3663] close(15) = -1 EBADF (Bad file descriptor) [pid 3663] close(16) = -1 EBADF (Bad file descriptor) [pid 3663] close(17) = -1 EBADF (Bad file descriptor) [pid 3663] close(18) = -1 EBADF (Bad file descriptor) [pid 3663] close(19) = -1 EBADF (Bad file descriptor) [pid 3663] close(20) = -1 EBADF (Bad file descriptor) [pid 3663] close(21) = -1 EBADF (Bad file descriptor) [pid 3663] close(22) = -1 EBADF (Bad file descriptor) [pid 3663] close(23) = -1 EBADF (Bad file descriptor) [pid 3663] close(24) = -1 EBADF (Bad file descriptor) [pid 3663] close(25) = -1 EBADF (Bad file descriptor) [pid 3663] close(26) = -1 EBADF (Bad file descriptor) [pid 3663] close(27) = -1 EBADF (Bad file descriptor) [pid 3663] close(28) = -1 EBADF (Bad file descriptor) [pid 3663] close(29) = -1 EBADF (Bad file descriptor) [pid 3663] exit_group(0) = ? [pid 3663] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./23/binderfs") = 0 [pid 3600] umount2("./23/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./23/cgroup") = 0 [pid 3600] umount2("./23/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./23/cgroup.net") = 0 [pid 3600] umount2("./23/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./23/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./23") = 0 [pid 3600] mkdir("./24", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3665 attached [pid 3665] chdir("./24") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 50 [pid 3665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3665] setpgid(0, 0) = 0 [pid 3665] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3665] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3665] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3665] write(3, "1000", 4) = 4 [pid 3665] close(3) = 0 [pid 3665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3665] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3665] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3665] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3665] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3665] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3665] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3665] close(3) = 0 [pid 3665] close(4) = 0 [pid 3665] close(5) = -1 EBADF (Bad file descriptor) [pid 3665] close(6) = -1 EBADF (Bad file descriptor) [pid 3665] close(7) = -1 EBADF (Bad file descriptor) [pid 3665] close(8) = -1 EBADF (Bad file descriptor) [pid 3665] close(9) = -1 EBADF (Bad file descriptor) [pid 3665] close(10) = -1 EBADF (Bad file descriptor) [pid 3665] close(11) = -1 EBADF (Bad file descriptor) [pid 3665] close(12) = -1 EBADF (Bad file descriptor) [pid 3665] close(13) = -1 EBADF (Bad file descriptor) [pid 3665] close(14) = -1 EBADF (Bad file descriptor) [pid 3665] close(15) = -1 EBADF (Bad file descriptor) [pid 3665] close(16) = -1 EBADF (Bad file descriptor) [pid 3665] close(17) = -1 EBADF (Bad file descriptor) [pid 3665] close(18) = -1 EBADF (Bad file descriptor) [pid 3665] close(19) = -1 EBADF (Bad file descriptor) [pid 3665] close(20) = -1 EBADF (Bad file descriptor) [pid 3665] close(21) = -1 EBADF (Bad file descriptor) [pid 3665] close(22) = -1 EBADF (Bad file descriptor) [pid 3665] close(23) = -1 EBADF (Bad file descriptor) [pid 3665] close(24) = -1 EBADF (Bad file descriptor) [pid 3665] close(25) = -1 EBADF (Bad file descriptor) [pid 3665] close(26) = -1 EBADF (Bad file descriptor) [pid 3665] close(27) = -1 EBADF (Bad file descriptor) [pid 3665] close(28) = -1 EBADF (Bad file descriptor) [pid 3665] close(29) = -1 EBADF (Bad file descriptor) [pid 3665] exit_group(0) = ? [pid 3665] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./24/binderfs") = 0 [pid 3600] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./24/cgroup") = 0 [pid 3600] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./24/cgroup.net") = 0 [pid 3600] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./24/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./24") = 0 [pid 3600] mkdir("./25", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3667 attached [pid 3667] chdir("./25") = 0 [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 52 [pid 3667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3667] setpgid(0, 0) = 0 [pid 3667] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3667] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3667] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3667] write(3, "1000", 4) = 4 [pid 3667] close(3) = 0 [pid 3667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3667] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3667] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3667] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3667] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3667] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3667] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3667] close(3) = 0 [pid 3667] close(4) = 0 [pid 3667] close(5) = -1 EBADF (Bad file descriptor) [pid 3667] close(6) = -1 EBADF (Bad file descriptor) [pid 3667] close(7) = -1 EBADF (Bad file descriptor) [pid 3667] close(8) = -1 EBADF (Bad file descriptor) [pid 3667] close(9) = -1 EBADF (Bad file descriptor) [pid 3667] close(10) = -1 EBADF (Bad file descriptor) [pid 3667] close(11) = -1 EBADF (Bad file descriptor) [pid 3667] close(12) = -1 EBADF (Bad file descriptor) [pid 3667] close(13) = -1 EBADF (Bad file descriptor) [pid 3667] close(14) = -1 EBADF (Bad file descriptor) [pid 3667] close(15) = -1 EBADF (Bad file descriptor) [pid 3667] close(16) = -1 EBADF (Bad file descriptor) [pid 3667] close(17) = -1 EBADF (Bad file descriptor) [pid 3667] close(18) = -1 EBADF (Bad file descriptor) [pid 3667] close(19) = -1 EBADF (Bad file descriptor) [pid 3667] close(20) = -1 EBADF (Bad file descriptor) [pid 3667] close(21) = -1 EBADF (Bad file descriptor) [pid 3667] close(22) = -1 EBADF (Bad file descriptor) [pid 3667] close(23) = -1 EBADF (Bad file descriptor) [pid 3667] close(24) = -1 EBADF (Bad file descriptor) [pid 3667] close(25) = -1 EBADF (Bad file descriptor) [pid 3667] close(26) = -1 EBADF (Bad file descriptor) [pid 3667] close(27) = -1 EBADF (Bad file descriptor) [pid 3667] close(28) = -1 EBADF (Bad file descriptor) [pid 3667] close(29) = -1 EBADF (Bad file descriptor) [pid 3667] exit_group(0) = ? [pid 3667] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3600] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3600] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./25/binderfs") = 0 [pid 3600] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./25/cgroup") = 0 [pid 3600] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./25/cgroup.net") = 0 [pid 3600] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./25/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./25") = 0 [pid 3600] mkdir("./26", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3669 attached [pid 3669] chdir("./26" [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 54 [pid 3669] <... chdir resumed>) = 0 [pid 3669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3669] setpgid(0, 0) = 0 [pid 3669] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3669] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3669] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3669] write(3, "1000", 4) = 4 [pid 3669] close(3) = 0 [pid 3669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3669] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3669] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3669] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3669] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3669] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3669] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3669] close(3) = 0 [pid 3669] close(4) = 0 [pid 3669] close(5) = -1 EBADF (Bad file descriptor) [pid 3669] close(6) = -1 EBADF (Bad file descriptor) [pid 3669] close(7) = -1 EBADF (Bad file descriptor) [pid 3669] close(8) = -1 EBADF (Bad file descriptor) [pid 3669] close(9) = -1 EBADF (Bad file descriptor) [pid 3669] close(10) = -1 EBADF (Bad file descriptor) [pid 3669] close(11) = -1 EBADF (Bad file descriptor) [pid 3669] close(12) = -1 EBADF (Bad file descriptor) [pid 3669] close(13) = -1 EBADF (Bad file descriptor) [pid 3669] close(14) = -1 EBADF (Bad file descriptor) [pid 3669] close(15) = -1 EBADF (Bad file descriptor) [pid 3669] close(16) = -1 EBADF (Bad file descriptor) [pid 3669] close(17) = -1 EBADF (Bad file descriptor) [pid 3669] close(18) = -1 EBADF (Bad file descriptor) [pid 3669] close(19) = -1 EBADF (Bad file descriptor) [pid 3669] close(20) = -1 EBADF (Bad file descriptor) [pid 3669] close(21) = -1 EBADF (Bad file descriptor) [pid 3669] close(22) = -1 EBADF (Bad file descriptor) [pid 3669] close(23) = -1 EBADF (Bad file descriptor) [pid 3669] close(24) = -1 EBADF (Bad file descriptor) [pid 3669] close(25) = -1 EBADF (Bad file descriptor) [pid 3669] close(26) = -1 EBADF (Bad file descriptor) [pid 3669] close(27) = -1 EBADF (Bad file descriptor) [pid 3669] close(28) = -1 EBADF (Bad file descriptor) [pid 3669] close(29) = -1 EBADF (Bad file descriptor) [pid 3669] exit_group(0) = ? [pid 3669] +++ exited with 0 +++ [pid 3600] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3600] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 6 entries */, 32768) = 176 [pid 3600] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3600] unlink("./26/binderfs") = 0 [pid 3600] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 3600] unlink("./26/cgroup") = 0 [pid 3600] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./26/cgroup.net") = 0 [pid 3600] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3600] lstat("./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 3600] unlink("./26/cgroup.cpu") = 0 [pid 3600] getdents64(3, 0x55555676b620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [pid 3600] rmdir("./26") = 0 [pid 3600] mkdir("./27", 0777) = 0 [pid 3600] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3671 attached [pid 3671] chdir("./27" [pid 3600] <... clone resumed>, child_tidptr=0x55555676a5d0) = 56 [pid 3671] <... chdir resumed>) = 0 [pid 3671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3671] setpgid(0, 0) = 0 [pid 3671] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 3671] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 3671] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 3671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3671] write(3, "1000", 4) = 4 [pid 3671] close(3) = 0 [pid 3671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3671] io_uring_setup(15727, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL|IORING_SETUP_SQ_AFF, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3671] mmap(0x20fff000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 3671] mmap(0x2042c000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x2042c000 [pid 3671] io_uring_setup(387, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 4 [pid 3671] mmap(0x20148000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20148000 [pid 3671] mmap(0x20ffd000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffd000 [pid 3671] close(3) = 0 [pid 3671] close(4) = 0 [pid 3671] close(5) = -1 EBADF (Bad file descriptor) [pid 3671] close(6) = -1 EBADF (Bad file descriptor) [pid 3671] close(7) = -1 EBADF (Bad file descriptor) [pid 3671] close(8) = -1 EBADF (Bad file descriptor) [pid 3671] close(9) = -1 EBADF (Bad file descriptor) [pid 3671] close(10) = -1 EBADF (Bad file descriptor) [pid 3671] close(11) = -1 EBADF (Bad file descriptor) [pid 3671] close(12) = -1 EBADF (Bad file descriptor) [pid 3671] close(13) = -1 EBADF (Bad file descriptor) [pid 3671] close(14) = -1 EBADF (Bad file descriptor) [pid 3671] close(15) = -1 EBADF (Bad file descriptor) [pid 3671] close(16) = -1 EBADF (Bad file descriptor) [pid 3671] close(17) = -1 EBADF (Bad file descriptor) [pid 3671] close(18) = -1 EBADF (Bad file descriptor) [pid 3671] close(19) = -1 EBADF (Bad file descriptor) [pid 3671] close(20) = -1 EBADF (Bad file descriptor) [pid 3671] close(21) = -1 EBADF (Bad file descriptor) [pid 3671] close(22) = -1 EBADF (Bad file descriptor) [pid 3671] close(23) = -1 EBADF (Bad file descriptor) [pid 3671] close(24) = -1 EBADF (Bad file descriptor) [pid 3671] close(25) = -1 EBADF (Bad file descriptor) [pid 3671] close(26) = -1 EBADF (Bad file descriptor) [pid 3671] close(27) = -1 EBADF (Bad file descriptor) [pid 3671] close(28) = -1 EBADF (Bad file descriptor) [pid 3671] close(29) = -1 EBADF (Bad file descriptor) [pid 3671] exit_group(0) = ? [pid 3600] kill(-56, SIGKILL) = 0 [pid 3600] kill(56, SIGKILL) = 0 [ 62.382681][ T29] oom_reaper: reaped process 3671 (syz-executor616), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 62.409833][ T3600] syz-executor616 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 62.421080][ T3600] CPU: 1 PID: 3600 Comm: syz-executor616 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 62.431085][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 62.441160][ T3600] Call Trace: [ 62.444449][ T3600] [ 62.447391][ T3600] dump_stack_lvl+0xcd/0x134 [ 62.452029][ T3600] dump_header+0x10b/0x7f9 [ 62.456483][ T3600] oom_kill_process.cold+0x10/0x15 [ 62.461632][ T3600] out_of_memory+0x358/0x14a0 [ 62.466335][ T3600] ? find_held_lock+0x2d/0x110 [ 62.471134][ T3600] ? oom_killer_disable+0x270/0x270 [ 62.476358][ T3600] ? find_held_lock+0x2d/0x110 [ 62.481154][ T3600] mem_cgroup_out_of_memory+0x206/0x270 [ 62.486728][ T3600] ? mem_cgroup_margin+0x130/0x130 [ 62.491860][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 62.496726][ T3600] try_charge_memcg+0xf9c/0x1440 [ 62.501696][ T3600] ? mem_cgroup_handle_over_high+0x510/0x510 [ 62.507679][ T3600] ? obj_cgroup_charge+0x331/0x930 [ 62.512790][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 62.517658][ T3600] ? obj_cgroup_charge+0x4af/0x930 [ 62.522774][ T3600] obj_cgroup_charge+0x358/0x930 [ 62.527728][ T3600] ? __alloc_file+0x21/0x270 [ 62.532321][ T3600] kmem_cache_alloc+0xa5/0x4c0 [ 62.537081][ T3600] ? stack_trace_save+0x8c/0xc0 [ 62.541943][ T3600] __alloc_file+0x21/0x270 [ 62.546366][ T3600] alloc_empty_file+0x6d/0x170 [ 62.551143][ T3600] path_openat+0xe4/0x2930 [ 62.555561][ T3600] ? __lock_acquire+0x163e/0x5660 [ 62.560597][ T3600] ? path_lookupat+0x860/0x860 [ 62.565366][ T3600] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 62.571358][ T3600] do_filp_open+0x1aa/0x400 [ 62.575869][ T3600] ? may_open_dev+0xf0/0xf0 [ 62.580379][ T3600] ? alloc_fd+0x2f0/0x670 [ 62.584716][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 62.589587][ T3600] ? rwlock_bug.part.0+0x90/0x90 [ 62.594638][ T3600] ? _find_next_bit+0x1e3/0x260 [ 62.599509][ T3600] ? _raw_spin_unlock+0x24/0x40 [ 62.604379][ T3600] ? alloc_fd+0x2f0/0x670 [ 62.608727][ T3600] do_sys_openat2+0x16d/0x4c0 [ 62.613416][ T3600] ? build_open_flags+0x6f0/0x6f0 [ 62.618451][ T3600] ? ptrace_notify+0xfa/0x140 [ 62.623134][ T3600] ? lock_downgrade+0x6e0/0x6e0 [ 62.627987][ T3600] __x64_sys_openat+0x13f/0x1f0 [ 62.632847][ T3600] ? __ia32_sys_open+0x1c0/0x1c0 [ 62.637794][ T3600] ? _raw_spin_unlock_irq+0x1f/0x40 [ 62.643000][ T3600] ? lockdep_hardirqs_on+0x79/0x100 [ 62.648382][ T3600] ? _raw_spin_unlock_irq+0x2a/0x40 [ 62.653588][ T3600] ? ptrace_notify+0xfa/0x140 [ 62.658281][ T3600] do_syscall_64+0x35/0xb0 [ 62.662702][ T3600] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 62.668593][ T3600] RIP: 0033:0x7ff32cbe28e8 [ 62.673018][ T3600] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 62.692799][ T3600] RSP: 002b:00007ffcbffc2720 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 62.701221][ T3600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff32cbe28e8 [ 62.709190][ T3600] RDX: 0000000000090800 RSI: 00007ff32cc250fe RDI: 00000000ffffff9c [ 62.717172][ T3600] RBP: 0000000000000038 R08: 0000000000090800 R09: 00007ff32cc250fe [ 62.725140][ T3600] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffcbffc27ac [ 62.733108][ T3600] R13: 00007ffcbffc27c0 R14: 00007ffcbffc2800 R15: 000000000000001b [ 62.741090][ T3600] [ 62.750335][ T3600] memory: usage 307200kB, limit 307200kB, failcnt 6307 [ 62.757218][ T3600] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.766077][ T3600] Memory cgroup stats for /syz0: [ 62.766702][ T3600] anon 20480 [ 62.766702][ T3600] file 53248 [ 62.766702][ T3600] kernel 314499072 [ 62.766702][ T3600] kernel_stack 65536 [ 62.766702][ T3600] pagetables 49152 [ 62.766702][ T3600] percpu 0 [ 62.766702][ T3600] sock 0 [ 62.766702][ T3600] vmalloc 0 [ 62.766702][ T3600] shmem 0 [ 62.766702][ T3600] zswap 0 [ 62.766702][ T3600] zswapped 0 [ 62.766702][ T3600] file_mapped 0 [ 62.766702][ T3600] file_dirty 0 [ 62.766702][ T3600] file_writeback 0 [ 62.766702][ T3600] swapcached 0 [ 62.766702][ T3600] anon_thp 0 [ 62.766702][ T3600] file_thp 0 [ 62.766702][ T3600] shmem_thp 0 [ 62.766702][ T3600] inactive_anon 12288 [ 62.766702][ T3600] active_anon 8192 [ 62.766702][ T3600] inactive_file 24576 [ 62.766702][ T3600] active_file 28672 [ 62.766702][ T3600] unevictable 0 [ 62.766702][ T3600] slab_reclaimable 22816 [ 62.766702][ T3600] slab_unreclaimable 65208 [ 62.766702][ T3600] slab 88024 [ 62.766702][ T3600] workingset_refault_anon 0 [ 62.864993][ T3600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor616,pid=3600,uid=0 [pid 3600] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = ? [ 62.882228][ T3600] Memory cgroup out of memory: Killed process 3600 (syz-executor616) total-vm:17500kB, anon-rss:68kB, file-rss:592kB, shmem-rss:0kB, UID:0 pgtables:36kB oom_score_adj:0 [ 76.239817][ T924] cfg80211: failed to load regulatory.db [ 215.098307][ T28] INFO: task syz-executor616:3671 blocked for more than 143 seconds. [ 215.106582][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 215.134264][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.149165][ T28] task:syz-executor616 state:D stack:27536 pid: 3671 ppid: 3600 flags:0x00104004 [ 215.163840][ T28] Call Trace: [ 215.167151][ T28] [ 215.178391][ T28] __schedule+0xa09/0x4f10 [ 215.182886][ T28] ? io_schedule_timeout+0x140/0x140 [ 215.195770][ T28] schedule+0xd2/0x1f0 [ 215.205372][ T28] schedule_preempt_disabled+0xf/0x20 [ 215.217112][ T28] __mutex_lock+0xa70/0x1350 [ 215.224899][ T28] ? find_held_lock+0x2d/0x110 [ 215.231336][ T28] ? io_uring_del_tctx_node+0x110/0x2b6 [ 215.236932][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 215.242846][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 215.247738][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 215.254837][ T28] io_uring_del_tctx_node+0x110/0x2b6 [ 215.261829][ T28] io_uring_clean_tctx+0xce/0x174 [ 215.266901][ T28] ? io_uring_del_tctx_node+0x2b6/0x2b6 [ 215.274213][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 215.280876][ T28] io_uring_cancel_generic+0x5aa/0x602 [ 215.286388][ T28] ? io_submit_sqes.cold+0x3c0/0x3c0 [ 215.293449][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 215.298580][ T28] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 215.304417][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.311622][ T28] ? __validate_process_creds+0x20c/0x370 [ 215.317389][ T28] do_exit+0x4f9/0x29f0 [ 215.322374][ T28] ? do_group_exit+0x202/0x2f0 [ 215.327167][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 215.333868][ T28] ? mm_update_next_owner+0x7b0/0x7b0 [ 215.339549][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.344782][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.351748][ T28] do_group_exit+0xd2/0x2f0 [ 215.356284][ T28] __x64_sys_exit_group+0x3a/0x50 [ 215.361688][ T28] do_syscall_64+0x35/0xb0 [ 215.366134][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 215.373783][ T28] RIP: 0033:0x7ff32cbe16f9 [ 215.378470][ T28] RSP: 002b:00007ffcbffc2738 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 215.386906][ T28] RAX: ffffffffffffffda RBX: 00007ff32cc563f0 RCX: 00007ff32cbe16f9 [ 215.396639][ T28] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 215.404999][ T28] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000004140 [ 215.414680][ T28] R10: 0000000000008011 R11: 0000000000000246 R12: 00007ff32cc563f0 [ 215.422978][ T28] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 215.432930][ T28] [ 215.436026][ T28] [ 215.436026][ T28] Showing all locks held in the system: [ 215.444707][ T28] 1 lock held by rcu_tasks_kthre/12: [ 215.451690][ T28] #0: ffffffff8bd864f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 215.462501][ T28] 1 lock held by rcu_tasks_trace/13: [ 215.467806][ T28] #0: ffffffff8bd861f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 215.480535][ T28] 1 lock held by khungtaskd/28: [ 215.485409][ T28] #0: ffffffff8bd87040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 215.495701][ T28] 2 locks held by getty/3275: [ 215.501977][ T28] #0: ffff88807f2e8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 215.512033][ T28] #1: ffffc90002d162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 215.523798][ T28] 1 lock held by syz-executor616/3671: [ 215.529527][ T28] #0: ffff88807eb3c0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_uring_del_tctx_node+0x110/0x2b6 [ 215.541704][ T28] 5 locks held by iou-sqp-3671/3672: [ 215.547012][ T28] [ 215.549962][ T28] ============================================= [ 215.549962][ T28] [ 215.560588][ T28] NMI backtrace for cpu 1 [ 215.564933][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 215.574339][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 215.584405][ T28] Call Trace: [ 215.587782][ T28] [ 215.590768][ T28] dump_stack_lvl+0xcd/0x134 [ 215.595391][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 215.600719][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 215.605949][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 215.612055][ T28] watchdog+0xc18/0xf50 [ 215.616247][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 215.622286][ T28] kthread+0x2e9/0x3a0 [ 215.626376][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 215.632037][ T28] ret_from_fork+0x1f/0x30 [ 215.636497][ T28] [ 215.639750][ T28] Sending NMI from CPU 1 to CPUs 0: [ 215.644985][ C0] NMI backtrace for cpu 0 [ 215.644995][ C0] CPU: 0 PID: 3672 Comm: iou-sqp-3671 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 215.645014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 215.645024][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 215.645054][ C0] Code: 02 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 29 b8 87 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 <65> 48 8b 14 25 80 6f 02 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 [ 215.645070][ C0] RSP: 0018:ffffc9000313f650 EFLAGS: 00000246 [ 215.645084][ C0] RAX: 0000000080000000 RBX: ffff88813fffc320 RCX: 0000000000000000 [ 215.645097][ C0] RDX: ffff8880220a8000 RSI: ffffffff81a97d33 RDI: 0000000000000004 [ 215.645108][ C0] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000004 [ 215.645118][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 215.645129][ C0] R13: ffff88813fffa000 R14: ffffc9000313f7e0 R15: dffffc0000000000 [ 215.645141][ C0] FS: 000055555676a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 215.645157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.645169][ C0] CR2: 00007ff32cc59370 CR3: 0000000024fc8000 CR4: 00000000003506f0 [ 215.645181][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.645191][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.645202][ C0] Call Trace: [ 215.645206][ C0] [ 215.645211][ C0] do_try_to_free_pages+0x403/0x16f0 [ 215.645240][ C0] ? shrink_node+0x1db0/0x1db0 [ 215.645267][ C0] try_to_free_mem_cgroup_pages+0x31e/0x920 [ 215.645288][ C0] ? mem_cgroup_shrink_node+0x790/0x790 [ 215.645308][ C0] ? psi_memstall_enter+0x1af/0x280 [ 215.645335][ C0] ? psi_memstall_enter+0x1b4/0x280 [ 215.645357][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 215.645384][ C0] try_charge_memcg+0x500/0x1440 [ 215.645405][ C0] ? mem_cgroup_handle_over_high+0x510/0x510 [ 215.645424][ C0] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 215.645451][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 215.645469][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 215.645491][ C0] __memcg_kmem_charge_page+0x183/0x3d0 [ 215.645511][ C0] __alloc_pages+0x1ef/0x510 [ 215.645534][ C0] ? __alloc_pages_slowpath.constprop.0+0x2140/0x2140 [ 215.645558][ C0] ? io_req_complete_post+0x12a/0x260 [ 215.645591][ C0] alloc_pages+0x1aa/0x310 [ 215.645610][ C0] io_provide_buffers+0x87d/0xff0 [ 215.645638][ C0] ? io_provide_buffers_prep+0x440/0x440 [ 215.645663][ C0] io_issue_sqe+0x15e/0xd20 [ 215.645689][ C0] io_submit_sqes+0x9a6/0x1ec0 [ 215.645721][ C0] ? io_wq_submit_work+0x8f0/0x8f0 [ 215.645749][ C0] ? __set_cpus_allowed_ptr_locked+0x4e0/0x4e0 [ 215.645770][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 215.645789][ C0] ? _raw_spin_unlock+0x24/0x40 [ 215.645816][ C0] io_sq_thread+0x708/0xf60 [ 215.645840][ C0] ? io_sqd_handle_event+0x350/0x350 [ 215.645861][ C0] ? ret_from_fork+0x8/0x30 [ 215.645883][ C0] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 215.645902][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 215.645921][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.645946][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.645971][ C0] ? io_sqd_handle_event+0x350/0x350 [ 215.645993][ C0] ret_from_fork+0x1f/0x30 [ 215.646020][ C0] [ 215.649109][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 215.649121][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 215.649144][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 215.649155][ T28] Call Trace: [ 215.649161][ T28] [ 215.649169][ T28] dump_stack_lvl+0xcd/0x134 [ 215.649204][ T28] panic+0x2d7/0x636 [ 215.649232][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 215.649267][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 215.649293][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 215.649324][ T28] ? watchdog.cold+0x130/0x158 [ 215.649355][ T28] watchdog.cold+0x141/0x158 [ 215.649382][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 215.649413][ T28] kthread+0x2e9/0x3a0 [ 215.649433][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 215.649459][ T28] ret_from_fork+0x1f/0x30 [ 215.649499][ T28] [ 215.652692][ T28] Kernel Offset: disabled [ 216.062293][ T28] Rebooting in 86400 seconds..