ci2-android-5-15/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-15/syz-executor1974125186

<...>

syzkaller
syzkaller login: [    7.973226][  T111] udevd (111) used greatest stack depth: 22888 bytes left
[   11.118596][   T30] kauditd_printk_skb: 48 callbacks suppressed
[   11.118609][   T30] audit: type=1400 audit(1793481001.650:59): avc:  denied  { transition } for  pid=221 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   11.126073][   T30] audit: type=1400 audit(1793481001.650:60): avc:  denied  { noatsecure } for  pid=221 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   11.130856][   T30] audit: type=1400 audit(1793481001.650:61): avc:  denied  { write } for  pid=221 comm="sh" path="pipe:[14324]" dev="pipefs" ino=14324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   11.136117][   T30] audit: type=1400 audit(1793481001.650:62): avc:  denied  { rlimitinh } for  pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   11.141002][   T30] audit: type=1400 audit(1793481001.650:63): avc:  denied  { siginh } for  pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
execve("ci2-android-5-15/syz-executor1974125186", ["ci2-android-5-15/syz-executor1974125186"], 0x7ffd875a1cc0 /* 10 vars */) = 0
brk(NULL)                               = 0x55558f4f3000
brk(0x55558f4f3d40)                     = 0x55558f4f3d40
arch_prctl(ARCH_SET_FS, 0x55558f4f33c0) = 0
set_tid_address(0x55558f4f3690)         = 303
set_robust_list(0x55558f4f36a0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-15/syz-executor1974125186", 4096) = 45
getrandom("\xe0\xc8\x59\xdd\x88\xc9\x4f\x26", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558f4f3d40
brk(0x55558f514d40)                     = 0x55558f514d40
brk(0x55558f515000)                     = 0x55558f515000
mprotect(0x7f8b71a3c000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 304
ci2-android-5-15/strace-static-x86_64: Process 304 attached
[pid   304] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   304] <... set_robust_list resumed>) = 0
[pid   303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   304] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   304] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 305 attached
[pid   305] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] getrandom("\x6d\xe0\x04\xf4\x9e\x28\xbb\xb5", 8, GRND_NONBLOCK) = 8
[pid   305] mkdir("./syzkaller.JLf2Fg", 0700 <unfinished ...>
[pid   304] getrandom( <unfinished ...>
[pid   303] <... clone resumed>, child_tidptr=0x55558f4f3690) = 305
[pid   304] <... getrandom resumed>"\x25\xe6\x7a\x3c\xfc\x3e\xbe\xfa", 8, GRND_NONBLOCK) = 8
[pid   303] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   304] getrandom( <unfinished ...>
[pid   303] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   305] <... mkdir resumed>)        = 0
[pid   305] chmod("./syzkaller.JLf2Fg", 0777) = 0
[pid   305] chdir("./syzkaller.JLf2Fg") = 0
[pid   305] unshare(CLONE_NEWPID <unfinished ...>
[pid   304] <... getrandom resumed>"\x34\xbb\x97\xe3\xbc\x8e\x70\xe2", 8, GRND_NONBLOCK) = 8
[pid   304] mkdir("./syzkaller.KSapEs", 0700 <unfinished ...>
[pid   303] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   305] <... unshare resumed>)      = 0
[pid   305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 306
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 306 attached
[pid   303] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   306] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   306] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   306] <... prctl resumed>)        = 0
[pid   306] getppid()                   = 0
[pid   306] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid   306] unshare(CLONE_NEWNS)        = 0
[pid   306] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] unshare(CLONE_NEWIPC)       = -1 EINVAL (Invalid argument)
[pid   306] unshare(CLONE_NEWCGROUP)    = 0
[pid   306] unshare(CLONE_NEWUTS)       = 0
[pid   306] unshare(CLONE_SYSVSEM)      = 0
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] getpid()                    = 1
[pid   306] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   306] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   306] unshare(CLONE_NEWNET <unfinished ...>
[pid   304] <... mkdir resumed>)        = 0
[pid   303] <... clone resumed>, child_tidptr=0x55558f4f3690) = 307
[pid   304] chmod("./syzkaller.KSapEs", 0777 <unfinished ...>
[pid   303] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   304] <... chmod resumed>)        = 0
[pid   303] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   304] chdir("./syzkaller.KSapEs" <unfinished ...>
[pid   303] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   304] <... chdir resumed>)        = 0
[pid   303] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   304] unshare(CLONE_NEWPID)       = 0
[pid   304] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   303] <... clone resumed>, child_tidptr=0x55558f4f3690) = 308
ci2-android-5-15/strace-static-x86_64: Process 308 attached
[pid   304] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   303] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   303] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   303] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   304] <... clone resumed>, child_tidptr=0x55558f4f3690) = 309
[pid   308] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   303] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   304] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   304] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   308] <... set_robust_list resumed>) = 0
ci2-android-5-15/strace-static-x86_64: Process 307 attached
[pid   307] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   303] <... clone resumed>, child_tidptr=0x55558f4f3690) = 310
[pid   307] getrandom("\x4d\x8f\xab\x3b\xe8\x26\x39\x31", 8, GRND_NONBLOCK) = 8
[pid   307] mkdir("./syzkaller.7NsZ9r", 0700 <unfinished ...>
[pid   303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 309 attached
[pid   308] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   307] <... mkdir resumed>)        = 0
[pid   308] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] chmod("./syzkaller.7NsZ9r", 0777) = 0
[pid   307] chdir("./syzkaller.7NsZ9r") = 0
[pid   307] unshare(CLONE_NEWPID)       = 0
[pid   308] getrandom( <unfinished ...>
[pid   309] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   308] <... getrandom resumed>"\x57\x22\x11\x8a\xc5\xfb\xc2\x1d", 8, GRND_NONBLOCK) = 8
[pid   309] <... set_robust_list resumed>) = 0
[pid   308] mkdir("./syzkaller.l8vQCQ", 0700 <unfinished ...>
[pid   307] <... clone resumed>, child_tidptr=0x55558f4f3690) = 311
[pid   307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   308] <... mkdir resumed>)        = 0
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   308] chmod("./syzkaller.l8vQCQ", 0777 <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   308] <... chmod resumed>)        = 0
[pid   309] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   308] chdir("./syzkaller.l8vQCQ") = 0
[pid   309] <... prctl resumed>)        = 0
[pid   308] unshare(CLONE_NEWPID <unfinished ...>
[pid   309] getppid( <unfinished ...>
[pid   308] <... unshare resumed>)      = 0
[pid   309] <... getppid resumed>)      = 0
ci2-android-5-15/strace-static-x86_64: Process 310 attached
[pid   310] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   310] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   308] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} <unfinished ...>
[pid   310] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   310] getrandom( <unfinished ...>
[pid   308] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   309] <... prlimit64 resumed>, NULL) = 0
[pid   310] <... getrandom resumed>"\x29\xf9\x9a\xe4\xc5\x93\x2d\x8f", 8, GRND_NONBLOCK) = 8
[pid   310] mkdir("./syzkaller.LG7b8z", 0700 <unfinished ...>
[pid   308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid   308] <... clone resumed>, child_tidptr=0x55558f4f3690) = 312
[pid   310] <... mkdir resumed>)        = 0
[pid   310] chmod("./syzkaller.LG7b8z", 0777) = 0
[pid   310] chdir("./syzkaller.LG7b8z") = 0
[pid   310] unshare(CLONE_NEWPID)       = 0
[pid   310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   308] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} <unfinished ...>
[pid   308] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 312 attached
[pid   309] <... prlimit64 resumed>, NULL) = 0
[pid   309] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid   312] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   310] <... clone resumed>, child_tidptr=0x55558f4f3690) = 313
[pid   310] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} <unfinished ...>
[pid   312] <... set_robust_list resumed>) = 0
[pid   310] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... prlimit64 resumed>, NULL) = 0
[pid   309] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-15/strace-static-x86_64: Process 313 attached
ci2-android-5-15/strace-static-x86_64: Process 311 attached
 <unfinished ...>
[pid   309] <... prlimit64 resumed>, NULL) = 0
[pid   306] <... unshare resumed>)      = 0
[pid   311] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   311] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] unshare(CLONE_NEWNS <unfinished ...>
[pid   311] <... prctl resumed>)        = 0
[pid   311] getppid()                   = 0
[pid   311] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid   311] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid   311] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid   311] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid   311] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid   311] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid   311] unshare(CLONE_NEWNS <unfinished ...>
[pid   309] <... unshare resumed>)      = 0
[pid   311] <... unshare resumed>)      = 0
[pid   311] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid   311] unshare(CLONE_NEWIPC)       = -1 EINVAL (Invalid argument)
[pid   311] unshare(CLONE_NEWCGROUP)    = 0
[pid   311] unshare(CLONE_NEWUTS)       = 0
[pid   311] unshare(CLONE_SYSVSEM)      = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   309] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] <... mount resumed>)        = 0
[pid   311] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   311] getpid()                    = 1
[pid   311] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   311] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   311] unshare(CLONE_NEWNET <unfinished ...>
[pid   309] unshare(CLONE_NEWIPC)       = -1 EINVAL (Invalid argument)
[pid   312] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   309] unshare(CLONE_NEWCGROUP <unfinished ...>
[pid   312] <... prctl resumed>)        = 0
[pid   309] <... unshare resumed>)      = 0
[pid   306] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] unshare(CLONE_NEWUTS <unfinished ...>
[pid   312] getppid( <unfinished ...>
[pid   313] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   309] <... unshare resumed>)      = 0
[pid   306] <... openat resumed>)       = 3
[pid   306] write(3, "0 65535", 7 <unfinished ...>
[pid   309] unshare(CLONE_SYSVSEM <unfinished ...>
[pid   306] <... write resumed>)        = 7
[pid   306] close(3 <unfinished ...>
[pid   309] <... unshare resumed>)      = 0
[pid   306] <... close resumed>)        = 0
[pid   306] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] <... openat resumed>)       = 3
[pid   306] write(3, "100000", 6)       = 6
[pid   306] close(3)                    = 0
[pid   306] mkdir("./syz-tmp", 0777 <unfinished ...>
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   313] <... set_robust_list resumed>) = 0
[pid   312] <... getppid resumed>)      = 0
[pid   311] <... unshare resumed>)      = 0
[pid   309] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mount("", "./syz-tmp", "tmpfs", 0, NULL <unfinished ...>
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   312] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} <unfinished ...>
[   19.819919][   T30] audit: type=1400 audit(1793481010.350:64): avc:  denied  { execmem } for  pid=303 comm="syz-executor197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   19.831673][   T30] audit: type=1400 audit(1793481010.360:65): avc:  denied  { mounton } for  pid=306 comm="syz-executor197" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[pid   309] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   312] <... prlimit64 resumed>, NULL) = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] <... mount resumed>)        = 0
[pid   313] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   312] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} <unfinished ...>
[pid   313] <... prctl resumed>)        = 0
[pid   312] <... prlimit64 resumed>, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot", 0777 <unfinished ...>
[pid   313] getppid( <unfinished ...>
[pid   312] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   313] <... getppid resumed>)      = 0
[pid   312] <... prlimit64 resumed>, NULL) = 0
[pid   313] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} <unfinished ...>
[pid   312] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} <unfinished ...>
[pid   313] <... prlimit64 resumed>, NULL) = 0
[pid   312] <... prlimit64 resumed>, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot/dev", 0700 <unfinished ...>
[pid   313] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} <unfinished ...>
[pid   312] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   313] <... prlimit64 resumed>, NULL) = 0
[pid   312] <... prlimit64 resumed>, NULL) = 0
[pid   306] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} <unfinished ...>
[pid   312] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} <unfinished ...>
[pid   306] <... mount resumed>)        = 0
[pid   313] <... prlimit64 resumed>, NULL) = 0
[pid   312] <... prlimit64 resumed>, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot/proc", 0700 <unfinished ...>
[pid   313] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} <unfinished ...>
[pid   312] unshare(CLONE_NEWNS <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   313] <... prlimit64 resumed>, NULL) = 0
[pid   312] <... unshare resumed>)      = 0
[pid   306] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL <unfinished ...>
[pid   313] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} <unfinished ...>
[pid   312] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   306] <... mount resumed>)        = 0
[pid   313] <... prlimit64 resumed>, NULL) = 0
[pid   312] <... mount resumed>)        = 0
[pid   306] mkdir("./syz-tmp/newroot/selinux", 0700 <unfinished ...>
[pid   313] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} <unfinished ...>
[pid   312] unshare(CLONE_NEWIPC <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   313] <... prlimit64 resumed>, NULL) = 0
[pid   312] <... unshare resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] unshare(CLONE_NEWNS <unfinished ...>
[pid   312] unshare(CLONE_NEWCGROUP <unfinished ...>
[pid   313] <... unshare resumed>)      = 0
[pid   312] <... unshare resumed>)      = 0
[pid   313] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   312] unshare(CLONE_NEWUTS <unfinished ...>
[pid   313] <... mount resumed>)        = 0
[pid   312] <... unshare resumed>)      = 0
[pid   306] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] unshare(CLONE_NEWIPC <unfinished ...>
[pid   312] unshare(CLONE_SYSVSEM <unfinished ...>
[pid   306] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   313] <... unshare resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... unshare resumed>)      = 0
[pid   306] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] unshare(CLONE_NEWCGROUP <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mount resumed>)        = 0
[pid   313] <... unshare resumed>)      = 0
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mkdir("./syz-tmp/newroot/sys", 0700 <unfinished ...>
[pid   313] unshare(CLONE_NEWUTS <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   313] <... unshare resumed>)      = 0
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] unshare(CLONE_SYSVSEM <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mount resumed>)        = 0
[pid   313] <... unshare resumed>)      = 0
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mount resumed>)        = 0
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] <... mount resumed>)        = 0
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] getpid( <unfinished ...>
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   306] mkdir("./syz-tmp/newroot/syz-inputs", 0700 <unfinished ...>
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] getpid( <unfinished ...>
[pid   309] <... getpid resumed>)       = 1
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... getpid resumed>)       = 1
[pid   306] <... mkdir resumed>)        = 0
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} <unfinished ...>
[pid   309] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} <unfinished ...>
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... capget resumed>, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   306] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   313] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0} <unfinished ...>
[pid   309] <... capget resumed>, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   313] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   312] <... capset resumed>)       = 0
[pid   306] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   313] getpid( <unfinished ...>
[pid   312] unshare(CLONE_NEWNET <unfinished ...>
[pid   309] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0} <unfinished ...>
[pid   313] <... getpid resumed>)       = 1
[pid   306] mkdir("./syz-tmp/pivot", 0777 <unfinished ...>
[pid   313] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} <unfinished ...>
[pid   309] <... capset resumed>)       = 0
[pid   313] <... capget resumed>, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   306] <... mkdir resumed>)        = 0
[pid   313] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0} <unfinished ...>
[pid   309] unshare(CLONE_NEWNET <unfinished ...>
[pid   313] <... capset resumed>)       = 0
[pid   306] pivot_root("./syz-tmp", "./syz-tmp/pivot" <unfinished ...>
[pid   313] unshare(CLONE_NEWNET <unfinished ...>
[pid   306] <... pivot_root resumed>)   = 0
[pid   306] chdir("/")                  = 0
[pid   306] umount2("./pivot", MNT_DETACH <unfinished ...>
[pid   311] <... openat resumed>)       = 3
[pid   311] write(3, "0 65535", 7)      = 7
[pid   311] close(3)                    = 0
[   19.879693][   T30] audit: type=1400 audit(1793481010.410:66): avc:  denied  { mounton } for  pid=306 comm="syz-executor197" path="/root/syzkaller.JLf2Fg/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   19.904419][   T30] audit: type=1400 audit(1793481010.410:67): avc:  denied  { mount } for  pid=306 comm="syz-executor197" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[pid   311] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   306] <... umount2 resumed>)      = 0
[pid   306] chroot("./newroot")         = 0
[pid   306] chdir("/")                  = 0
[pid   306] mkdir("/dev/gadgetfs", 0777) = 0
[pid   306] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL <unfinished ...>
[pid   311] write(3, "100000", 6)       = 6
[pid   311] close(3)                    = 0
[pid   311] mkdir("./syz-tmp", 0777)    = 0
[pid   311] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid   311] mkdir("./syz-tmp/newroot", 0777) = 0
[pid   311] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid   311] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   311] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid   311] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid   311] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid   311] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   311] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   311] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid   311] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   311] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   311] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   311] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   311] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid   311] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   311] mkdir("./syz-tmp/pivot", 0777) = 0
[pid   311] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid   311] chdir("/")                  = 0
[pid   311] umount2("./pivot", MNT_DETACH) = 0
[pid   311] chroot("./newroot")         = 0
[pid   311] chdir("/")                  = 0
[pid   311] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists)
[pid   311] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device)
[pid   311] mkdir("/dev/binderfs", 0777) = 0
[pid   311] mount("binder", "/dev/binderfs", "binder", 0, "stats=global") = 0
[pid   311] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   311] mkdir("./0", 0777)          = 0
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3
[pid   311] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   311] close(3)                    = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 2
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] <... unshare resumed>)      = 0
[pid   312] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid   312] write(3, "0 65535", 7)      = 7
[pid   312] close(3)                    = 0
[pid   312] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   312] write(3, "100000", 6)       = 6
[pid   312] close(3)                    = 0
[   19.905866][  T306] request_module fs-gadgetfs succeeded, but still no fs?
[   19.926883][   T30] audit: type=1400 audit(1793481010.410:68): avc:  denied  { mounton } for  pid=306 comm="syz-executor197" path="/root/syzkaller.JLf2Fg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[pid   312] mkdir("./syz-tmp", 0777)    = 0
[pid   312] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid   312] mkdir("./syz-tmp/newroot", 0777) = 0
[pid   312] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid   312] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid   312] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid   312] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid   312] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   312] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid   312] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   312] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid   309] <... unshare resumed>)      = 0
[pid   312] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   312] mkdir("./syz-tmp/pivot", 0777) = 0
[pid   312] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid   309] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid   312] chdir("/")                  = 0
[pid   312] umount2("./pivot", MNT_DETACH) = 0
ci2-android-5-15/strace-static-x86_64: Process 314 attached
[pid   314] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   309] write(3, "0 65535", 7)      = 7
[pid   309] close(3)                    = 0
[pid   309] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   312] chroot("./newroot")         = 0
[pid   312] chdir("/")                  = 0
[pid   309] write(3, "100000", 6)       = 6
[pid   312] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists)
[pid   309] close(3)                    = 0
[pid   312] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL <unfinished ...>
[pid   309] mkdir("./syz-tmp", 0777 <unfinished ...>
[pid   312] <... mount resumed>)        = -1 ENODEV (No such device)
[pid   309] <... mkdir resumed>)        = 0
[pid   312] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists)
[pid   312] mount("binder", "/dev/binderfs", "binder", 0, "stats=global") = 0
[pid   309] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid   309] mkdir("./syz-tmp/newroot", 0777) = 0
[pid   309] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid   309] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   309] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid   309] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid   309] mkdir("./syz-tmp/newroot/selinux", 0700 <unfinished ...>
[pid   312] mkdir("./0", 0777 <unfinished ...>
[pid   309] <... mkdir resumed>)        = 0
[pid   312] <... mkdir resumed>)        = 0
executing program
[pid   309] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3
[pid   309] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] <... mount resumed>)        = 0
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   312] close(3)                    = 0
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   309] mkdir("./syz-tmp/newroot/sys", 0700 <unfinished ...>
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] <... mkdir resumed>)        = 0
[pid   309] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   309] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   309] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   309] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 2
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   309] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid   309] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   309] mkdir("./syz-tmp/pivot", 0777) = 0
[pid   309] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid   309] chdir("/")                  = 0
[pid   309] umount2("./pivot", MNT_DETACH <unfinished ...>
[pid   313] <... unshare resumed>)      = 0
ci2-android-5-15/strace-static-x86_64: Process 315 attached
[pid   315] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   315] chdir("./0")                = 0
[pid   315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   315] setpgid(0, 0)               = 0
[pid   315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   315] write(3, "1000", 4)         = 4
[pid   315] close(3)                    = 0
[pid   313] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid   315] symlink("/dev/binderfs", "./binderfs") = 0
[pid   313] write(3, "0 65535", 7)      = 7
[pid   313] close(3)                    = 0
[pid   313] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   315] write(1, "executing program\n", 18) = 18
[pid   315] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] write(3, "100000", 6)       = 6
[pid   315] <... futex resumed>)        = 0
[pid   313] close(3 <unfinished ...>
[pid   315] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   313] <... close resumed>)        = 0
[pid   315] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   313] mkdir("./syz-tmp", 0777 <unfinished ...>
[pid   315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   313] <... mkdir resumed>)        = 0
[pid   315] <... mmap resumed>)         = 0x7f8b7194f000
[pid   315] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[3]}, 88) = 3
[pid   315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   315] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   315] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   313] mount("", "./syz-tmp", "tmpfs", 0, NULL <unfinished ...>
[pid   315] <... mprotect resumed>)     = 0
[pid   313] <... mount resumed>)        = 0
[pid   315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   313] mkdir("./syz-tmp/newroot", 0777) = 0
[pid   315] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4
[pid   315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   315] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   313] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid   313] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   313] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid   313] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid   313] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid   313] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   313] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   313] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid   313] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   313] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   313] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   313] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   313] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid   313] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   313] mkdir("./syz-tmp/pivot", 0777) = 0
[   19.959400][   T30] audit: type=1400 audit(1793481010.410:69): avc:  denied  { mount } for  pid=306 comm="syz-executor197" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   19.982019][   T30] audit: type=1400 audit(1793481010.420:70): avc:  denied  { mounton } for  pid=306 comm="syz-executor197" path="/root/syzkaller.JLf2Fg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[pid   313] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid   313] chdir("/")                  = 0
[pid   313] umount2("./pivot", MNT_DETACHci2-android-5-15/strace-static-x86_64: Process 317 attached
 <unfinished ...>
[pid   314] <... set_robust_list resumed>) = 0
[pid   309] <... umount2 resumed>)      = 0
[pid   309] chroot("./newroot")         = 0
[pid   309] chdir("/")                  = 0
[pid   309] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists)
[pid   309] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device)
[pid   309] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists)
[pid   309] mount("binder", "/dev/binderfs", "binder", 0, "stats=global"ci2-android-5-15/strace-static-x86_64: Process 316 attached
 <unfinished ...>
[pid   314] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... mount resumed>)        = 0
[pid   306] <... mount resumed>)        = -1 ENODEV (No such device)
[pid   309] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   309] mkdir("./0", 0777)          = 0
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
[pid   309] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   309] close(3)                    = 0
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 2
[pid   309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   317] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   317] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   317] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   317] <... futex resumed>)        = 1
[pid   317] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   316] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   316] memfd_create("syzkaller", 0) = 3
[pid   316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   316] munmap(0x7f8b6952e000, 138412032ci2-android-5-15/strace-static-x86_64: Process 318 attached
) = 0
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   313] <... umount2 resumed>)      = 0
[pid   306] mkdir("/dev/binderfs", 0777 <unfinished ...>
[pid   314] chdir("./0" <unfinished ...>
[pid   306] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid   314] <... chdir resumed>)        = 0
[pid   306] mount("binder", "/dev/binderfs", "binder", 0, "stats=global" <unfinished ...>
[pid   314] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   306] <... mount resumed>)        = 0
[pid   314] <... prctl resumed>)        = 0
[pid   306] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL <unfinished ...>
[pid   314] setpgid(0, 0 <unfinished ...>
[pid   306] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   314] <... setpgid resumed>)      = 0
[pid   306] mkdir("./0", 0777 <unfinished ...>
[pid   314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   314] <... openat resumed>)       = 3
[pid   306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY <unfinished ...>
[pid   314] write(3, "1000", 4 <unfinished ...>
[pid   306] <... openat resumed>)       = 3
[pid   314] <... write resumed>)        = 4
[pid   306] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   314] close(3 <unfinished ...>
[pid   306] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   314] <... close resumed>)        = 0
[pid   306] close(3 <unfinished ...>
[pid   314] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   314] <... symlink resumed>)      = 0
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   314] write(1, "executing program\n", 18 <unfinished ...>
[pid   306] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   314] <... write resumed>)        = 18
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   314] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   306] <... clone resumed>, child_tidptr=0x55558f4f3690) = 2
[pid   314] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] <... rt_sigaction resumed>, NULL, 8) = 0
executing program
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   314] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[3]}, 88) = 3
[pid   314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   314] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   314] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   314] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[4]}, 88) = 4
[pid   314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   314] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   314] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 321 attached
 <unfinished ...>
[pid   321] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   321] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   321] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] <... futex resumed>)        = 0
[pid   321] <... futex resumed>)        = 1
[pid   321] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-15/strace-static-x86_64: Process 320 attached
 <unfinished ...>
[pid   320] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   320] memfd_create("syzkaller", 0) = 3
[pid   320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
ci2-android-5-15/strace-static-x86_64: Process 319 attached
[pid   319] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] chdir("./0")                = 0
[pid   319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   319] setpgid(0, 0)               = 0
[pid   319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   319] write(3, "1000", 4 <unfinished ...>
[pid   320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   319] <... write resumed>)        = 4
[pid   319] close(3)                    = 0
[pid   319] symlink("/dev/binderfs", "./binderfs") = 0
[pid   319] write(1, "executing program\n", 18) = 18
executing program
[pid   319] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   319] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[3]}, 88) = 3
[pid   319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   319] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   319] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   318] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   316] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   313] chroot("./newroot" <unfinished ...>
[pid   319] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   320] <... write resumed>)        = 262144
[pid   320] munmap(0x7f8b6952e000, 138412032) = 0
[pid   319] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4
[pid   319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[   20.010196][   T30] audit: type=1400 audit(1793481010.420:71): avc:  denied  { mounton } for  pid=306 comm="syz-executor197" path="/root/syzkaller.JLf2Fg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   20.038078][   T30] audit: type=1400 audit(1793481010.430:72): avc:  denied  { unmount } for  pid=306 comm="syz-executor197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   20.057909][   T30] audit: type=1400 audit(1793481010.440:73): avc:  denied  { mounton } for  pid=306 comm="syz-executor197" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[pid   320] ioctl(4, LOOP_SET_FD, 3ci2-android-5-15/strace-static-x86_64: Process 323 attached
ci2-android-5-15/strace-static-x86_64: Process 322 attached
 <unfinished ...>
[pid   318] <... set_robust_list resumed>) = 0
[pid   316] <... openat resumed>)       = 4
[pid   313] <... chroot resumed>)       = 0
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   316] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   313] chdir("/" <unfinished ...>
[pid   323] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   322] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   320] <... ioctl resumed>)        = 0
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   316] <... ioctl resumed>)        = 0
[pid   313] <... chdir resumed>)        = 0
[pid   318] chdir("./0" <unfinished ...>
[pid   313] mkdir("/dev/gadgetfs", 0777 <unfinished ...>
[pid   318] <... chdir resumed>)        = 0
[pid   313] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid   318] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   313] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL <unfinished ...>
[pid   318] <... prctl resumed>)        = 0
[pid   313] <... mount resumed>)        = -1 ENODEV (No such device)
[pid   318] setpgid(0, 0 <unfinished ...>
[pid   313] mkdir("/dev/binderfs", 0777 <unfinished ...>
[pid   318] <... setpgid resumed>)      = 0
[pid   313] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid   318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   313] mount("binder", "/dev/binderfs", "binder", 0, "stats=global" <unfinished ...>
[pid   318] <... openat resumed>)       = 3
[pid   313] <... mount resumed>)        = 0
[pid   318] write(3, "1000", 4 <unfinished ...>
[pid   313] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL <unfinished ...>
[pid   318] <... write resumed>)        = 4
[pid   313] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   318] close(3 <unfinished ...>
[pid   313] mkdir("./0", 0777 <unfinished ...>
[pid   318] <... close resumed>)        = 0
[pid   320] close(3 <unfinished ...>
[pid   313] <... mkdir resumed>)        = 0
[pid   318] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   313] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   318] <... symlink resumed>)      = 0
[pid   313] <... openat resumed>)       = 3
[pid   318] write(1, "executing program\n", 18 <unfinished ...>
[pid   313] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   318] <... write resumed>)        = 18
[pid   313] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
executing program
[pid   320] <... close resumed>)        = 0
[pid   318] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] close(3 <unfinished ...>
[pid   320] close(4 <unfinished ...>
[pid   318] <... futex resumed>)        = 0
[pid   313] <... close resumed>)        = 0
[pid   318] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   318] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   320] <... close resumed>)        = 0
[pid   318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   320] mkdir("./bus", 0777 <unfinished ...>
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x55558f4f3690) = 2
[pid   318] <... mmap resumed>)         = 0x7f8b7194f000
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   318] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   318] <... mprotect resumed>)     = 0
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   320] <... mkdir resumed>)        = 0
[pid   318] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[3]}, 88) = 3
[pid   323] <... set_robust_list resumed>) = 0
[pid   322] <... set_robust_list resumed>) = 0
[pid   320] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   318] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   318] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   316] close(3 <unfinished ...>
[pid   318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   316] <... close resumed>)        = 0
[pid   318] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   316] close(4 <unfinished ...>
[pid   318] <... mprotect resumed>)     = 0
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[4]}, 88) = 4
[pid   318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   318] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   318] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 326 attached
 <unfinished ...>
[pid   326] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   326] chdir("./0")                = 0
[pid   326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   326] setpgid(0, 0)               = 0
[pid   326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   326] write(3, "1000", 4)         = 4
[pid   326] close(3)                    = 0
[pid   326] symlink("/dev/binderfs", "./binderfs") = 0
[pid   326] write(1, "executing program\n", 18) = 18
executing program
[pid   326] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   326] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   326] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   326] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   323] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   322] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   326] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   323] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   322] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   326] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3
[pid   326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   326] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
ci2-android-5-15/strace-static-x86_64: Process 328 attached
[pid   326] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   328] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   326] <... futex resumed>)        = 0
[pid   326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   328] <... set_robust_list resumed>) = 0
[pid   328] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   326] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   328] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   326] <... mprotect resumed>)     = 0
[pid   328] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   323] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   322] memfd_create("syzkaller", 0 <unfinished ...>
[pid   323] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   322] <... memfd_create resumed>) = 3
[pid   326] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4
[pid   326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   323] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   326] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   326] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   323] <... futex resumed>)        = 1
[pid   319] <... futex resumed>)        = 0
[pid   328] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] <... futex resumed>)        = 0
[pid   328] <... futex resumed>)        = 1
[pid   328] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   323] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   322] <... mmap resumed>)         = 0x7f8b6952e000
ci2-android-5-15/strace-static-x86_64: Process 331 attached
[pid   331] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   331] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   331] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   326] <... futex resumed>)        = 0
[pid   331] <... futex resumed>)        = 1
[pid   331] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-15/strace-static-x86_64: Process 327 attached
 <unfinished ...>
[pid   327] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   327] memfd_create("syzkaller", 0) = 3
[pid   327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   327] <... write resumed>)        = 262144
[pid   327] munmap(0x7f8b6952e000, 138412032) = 0
[pid   327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   327] ioctl(4, LOOP_SET_FD, 3ci2-android-5-15/strace-static-x86_64: Process 329 attached
 <unfinished ...>
[pid   322] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   327] <... ioctl resumed>)        = 0
[pid   327] close(3)                    = 0
[pid   327] close(4 <unfinished ...>
[pid   329] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   329] memfd_create("syzkaller", 0) = 3
[pid   329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   329] munmap(0x7f8b6952e000, 138412032) = 0
[pid   329] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[   20.060123][  T320] loop2: detected capacity change from 0 to 512
[   20.082025][  T316] loop3: detected capacity change from 0 to 512
[   20.111005][  T327] loop0: detected capacity change from 0 to 512
[   20.117373][  T320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   329] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   322] <... munmap resumed>)       = 0
[pid   322] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   316] <... close resumed>)        = 0
[pid   322] <... openat resumed>)       = 4
[pid   320] <... mount resumed>)        = 0
[pid   322] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   320] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   316] mkdir("./bus", 0777)        = 0
[pid   316] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   320] <... openat resumed>)       = 3
[pid   320] chdir("./bus" <unfinished ...>
[pid   322] <... ioctl resumed>)        = 0
[pid   320] <... chdir resumed>)        = 0
[pid   329] <... ioctl resumed>)        = 0
[pid   322] close(3 <unfinished ...>
[pid   320] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4
[pid   320] ioctl(4, LOOP_CLR_FD)       = 0
[pid   320] close(4)                    = 0
[pid   320] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   320] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   322] <... close resumed>)        = 0
[pid   322] close(4 <unfinished ...>
[pid   329] close(3)                    = 0
[pid   329] close(4 <unfinished ...>
[pid   314] close(3)                    = 0
[pid   327] <... close resumed>)        = 0
[pid   314] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   327] mkdir("./bus", 0777 <unfinished ...>
[pid   314] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   327] <... mkdir resumed>)        = 0
[pid   314] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   314] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   314] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   314] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   314] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   327] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   314] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   314] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   314] exit_group(0 <unfinished ...>
[pid   321] <... futex resumed>)        = ?
[pid   320] <... futex resumed>)        = ?
[pid   314] <... exit_group resumed>)   = ?
[pid   321] +++ exited with 0 +++
[pid   320] +++ exited with 0 +++
[pid   314] +++ exited with 0 +++
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
[pid   311] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   311] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   311] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   311] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   311] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[   20.123047][  T329] loop4: detected capacity change from 0 to 512
[   20.129199][  T320] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.145564][  T322] loop1: detected capacity change from 0 to 512
[   20.165070][  T327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   311] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   327] <... mount resumed>)        = 0
[pid   329] <... close resumed>)        = 0
[pid   322] <... close resumed>)        = 0
[pid   329] mkdir("./bus", 0777 <unfinished ...>
[pid   322] mkdir("./bus", 0777)        = 0
[pid   329] <... mkdir resumed>)        = 0
[pid   322] mount("/dev/loop1", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   329] mount("/dev/loop4", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   327] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   327] chdir("./bus")              = 0
[pid   327] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid   327] ioctl(4, LOOP_CLR_FD)       = 0
[pid   327] close(4)                    = 0
[pid   327] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   318] close(3)                    = 0
[pid   318] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   318] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   318] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   318] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   318] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   318] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   318] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   318] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   318] exit_group(0 <unfinished ...>
[pid   328] <... futex resumed>)        = ?
[pid   318] <... exit_group resumed>)   = ?
[pid   328] +++ exited with 0 +++
[pid   327] <... futex resumed>)        = ?
[pid   327] +++ exited with 0 +++
[pid   318] +++ exited with 0 +++
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   309] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   309] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   309] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   309] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] <... umount2 resumed>)      = 0
[pid   311] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   311] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   311] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   311] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   311] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   311] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   311] close(4)                    = 0
[pid   311] rmdir("./0/bus")            = 0
[pid   311] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   311] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   316] <... mount resumed>)        = 0
[pid   311] unlink("./0/binderfs" <unfinished ...>
[pid   316] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   311] <... unlink resumed>)       = 0
[pid   316] <... openat resumed>)       = 3
[pid   311] getdents64(3 <unfinished ...>
[pid   316] chdir("./bus" <unfinished ...>
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   316] <... chdir resumed>)        = 0
[pid   311] close(3 <unfinished ...>
[pid   316] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   311] <... close resumed>)        = 0
[pid   316] <... openat resumed>)       = 4
[   20.176893][  T327] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.204225][  T316] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.215653][  T316] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   311] rmdir("./0" <unfinished ...>
[pid   316] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   311] <... rmdir resumed>)        = 0
[pid   316] <... ioctl resumed>)        = 0
[pid   311] mkdir("./1", 0777 <unfinished ...>
[pid   316] close(4 <unfinished ...>
[pid   311] <... mkdir resumed>)        = 0
[pid   316] <... close resumed>)        = 0
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   316] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] <... openat resumed>)       = 3
[pid   316] <... futex resumed>)        = 0
[pid   311] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   316] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   311] close(3)                    = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 5
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   315] close(3 <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   315] <... close resumed>)        = 0
[pid   315] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   315] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   315] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   315] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   315] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   315] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   315] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   315] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   315] exit_group(0 <unfinished ...>
[pid   317] <... futex resumed>)        = ?
[pid   316] <... futex resumed>)        = ?
[pid   315] <... exit_group resumed>)   = ?
[pid   317] +++ exited with 0 +++
[pid   316] +++ exited with 0 +++
[pid   315] +++ exited with 0 +++
[pid   312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
[pid   312] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   312] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   312] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   312] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   312] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   312] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-15/strace-static-x86_64: Process 342 attached
 <unfinished ...>
[pid   342] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   322] <... mount resumed>)        = 0
[pid   322] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   322] chdir("./bus")              = 0
[pid   322] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4
[pid   322] ioctl(4, LOOP_CLR_FD)       = 0
[pid   322] close(4)                    = 0
[pid   322] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] close(3 <unfinished ...>
[pid   322] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] <... close resumed>)        = 0
[pid   342] chdir("./1")                = 0
[pid   342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   342] setpgid(0, 0)               = 0
[pid   342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   342] write(3, "1000", 4)         = 4
[pid   342] close(3)                    = 0
[pid   342] symlink("/dev/binderfs", "./binderfs") = 0
[pid   342] write(1, "executing program\n", 18) = 18
[pid   342] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   342] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   342] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[6]}, 88) = 6
[pid   342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   342] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   342] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   342] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[7]}, 88) = 7
[pid   342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   342] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   342] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 346 attached
 <unfinished ...>
[pid   346] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   346] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   346] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   342] <... futex resumed>)        = 0
[pid   346] <... futex resumed>)        = 1
[pid   346] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-15/strace-static-x86_64: Process 345 attached
 <unfinished ...>
[pid   345] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   345] memfd_create("syzkaller", 0) = 3
[pid   345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   345] munmap(0x7f8b6952e000, 138412032) = 0
[pid   345] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
executing program
[pid   345] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   319] close(4 <unfinished ...>
[pid   345] <... ioctl resumed>)        = 0
[pid   345] close(3)                    = 0
[pid   345] close(4 <unfinished ...>
[pid   319] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   319] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   319] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   319] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   319] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   319] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   319] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(23)                   = -1 EBADF (Bad file descriptor)
[   20.234019][  T322] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.250446][  T322] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.263359][  T329] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.269606][  T345] loop2: detected capacity change from 0 to 512
[pid   319] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   319] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   319] exit_group(0 <unfinished ...>
[pid   323] <... futex resumed>)        = ?
[pid   322] <... futex resumed>)        = ?
[pid   319] <... exit_group resumed>)   = ?
[pid   323] +++ exited with 0 +++
[pid   322] +++ exited with 0 +++
[pid   319] +++ exited with 0 +++
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   329] <... mount resumed>)        = 0
[pid   306] <... restart_syscall resumed>) = 0
[pid   306] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   306] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   309] <... umount2 resumed>)      = 0
[pid   306] getdents64(3 <unfinished ...>
[pid   312] <... umount2 resumed>)      = 0
[pid   309] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   306] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   312] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   306] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] newfstatat(AT_FDCWD, "./0/bus" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./0/bus" <unfinished ...>
[pid   345] <... close resumed>)        = 0
[pid   345] mkdir("./bus", 0777)        = 0
[pid   329] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   329] chdir("./bus")              = 0
[pid   345] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   312] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   329] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   312] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   309] <... openat resumed>)       = 4
[pid   312] <... openat resumed>)       = 4
[pid   309] fstat(4 <unfinished ...>
[pid   329] <... openat resumed>)       = 4
[pid   312] fstat(4 <unfinished ...>
[pid   329] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   329] <... ioctl resumed>)        = 0
[pid   309] getdents64(4 <unfinished ...>
[pid   329] close(4 <unfinished ...>
[pid   312] getdents64(4 <unfinished ...>
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   329] <... close resumed>)        = 0
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   329] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   312] close(4 <unfinished ...>
[pid   309] close(4 <unfinished ...>
[pid   329] <... futex resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   309] <... close resumed>)        = 0
[pid   312] rmdir("./0/bus" <unfinished ...>
[pid   309] rmdir("./0/bus" <unfinished ...>
[pid   329] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   312] <... rmdir resumed>)        = 0
[pid   312] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] <... rmdir resumed>)        = 0
[pid   326] close(3 <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   326] <... close resumed>)        = 0
[pid   309] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./0/binderfs" <unfinished ...>
[pid   326] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   326] close(5 <unfinished ...>
[pid   312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] newfstatat(AT_FDCWD, "./0/binderfs" <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] unlink("./0/binderfs" <unfinished ...>
[pid   326] close(6 <unfinished ...>
[pid   309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... unlink resumed>)       = 0
[pid   309] unlink("./0/binderfs" <unfinished ...>
[pid   326] close(7 <unfinished ...>
[pid   312] getdents64(3 <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   309] <... unlink resumed>)       = 0
[pid   326] close(8 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   309] getdents64(3 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   326] close(9 <unfinished ...>
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   326] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   312] <... close resumed>)        = 0
[pid   326] close(11 <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] rmdir("./0" <unfinished ...>
[pid   326] close(12 <unfinished ...>
[pid   309] <... close resumed>)        = 0
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... rmdir resumed>)        = 0
[pid   326] close(13 <unfinished ...>
[pid   309] rmdir("./0" <unfinished ...>
[pid   312] mkdir("./1", 0777 <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   326] close(14 <unfinished ...>
[pid   309] <... rmdir resumed>)        = 0
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... mkdir resumed>)        = 0
[pid   326] close(15 <unfinished ...>
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   309] mkdir("./1", 0777 <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   326] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(17 <unfinished ...>
[pid   312] <... openat resumed>)       = 3
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   326] close(18 <unfinished ...>
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] <... mkdir resumed>)        = 0
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   326] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(20 <unfinished ...>
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] close(3 <unfinished ...>
[pid   326] close(21 <unfinished ...>
[pid   309] <... openat resumed>)       = 3
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... close resumed>)        = 0
[pid   309] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   326] close(22 <unfinished ...>
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   309] close(3 <unfinished ...>
[pid   326] close(23 <unfinished ...>
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   326] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   309] <... close resumed>)        = 0
[pid   326] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   326] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   326] exit_group(0 <unfinished ...>
[pid   331] <... futex resumed>)        = ?
[pid   329] <... futex resumed>)        = ?
[pid   326] <... exit_group resumed>)   = ?
[pid   331] +++ exited with 0 +++
[pid   329] +++ exited with 0 +++
[pid   326] +++ exited with 0 +++
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 5
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 347 attached
[pid   347] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   347] chdir("./1")                = 0
[pid   347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   347] setpgid(0, 0)               = 0
[pid   347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   347] write(3, "1000", 4)         = 4
[pid   347] close(3)                    = 0
[pid   309] <... clone resumed>, child_tidptr=0x55558f4f3690) = 5
[pid   347] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   347] <... symlink resumed>)      = 0
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   347] write(1, "executing program\n", 18) = 18
[pid   347] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   347] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
executing program
[pid   347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   347] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
ci2-android-5-15/strace-static-x86_64: Process 348 attached
[pid   348] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   347] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   348] chdir("./1")                = 0
[pid   347] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   348] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   348] <... prctl resumed>)        = 0
[pid   347] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6
[pid   348] setpgid(0, 0 <unfinished ...>
[pid   347] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-15/strace-static-x86_64: Process 349 attached
 <unfinished ...>
[pid   349] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   349] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   348] <... setpgid resumed>)      = 0
[pid   347] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   347] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   348] <... openat resumed>)       = 3
[pid   347] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   349] <... futex resumed>)        = 0
[pid   347] <... futex resumed>)        = 0
[pid   348] write(3, "1000", 4 <unfinished ...>
[pid   349] memfd_create("syzkaller", 0) = 3
[pid   349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6954f000
[pid   347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   348] <... write resumed>)        = 4
[pid   348] close(3 <unfinished ...>
[pid   347] <... mmap resumed>)         = 0x7f8b6952e000
[pid   347] mprotect(0x7f8b6952f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   348] <... close resumed>)        = 0
[pid   348] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   347] <... mprotect resumed>)     = 0
[pid   347] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   348] <... symlink resumed>)      = 0
[pid   347] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   348] write(1, "executing program\n", 18) = 18
executing program
[pid   348] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   348] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   348] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b6954e990, parent_tid=0x7f8b6954e990, exit_signal=0, stack=0x7f8b6952e000, stack_size=0x20300, tls=0x7f8b6954e6c0} <unfinished ...>
[pid   348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[6]}, 88) = 6
[pid   347] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7
[pid   348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   348] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   348] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   348] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   347] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   348] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7
[pid   347] <... futex resumed>)        = 0
[pid   348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   348] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   348] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   313] <... restart_syscall resumed>) = 0
[pid   347] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   313] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   313] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   313] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   313] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   306] <... umount2 resumed>)      = 0
[pid   306] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   306] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYci2-android-5-15/strace-static-x86_64: Process 351 attached
ci2-android-5-15/strace-static-x86_64: Process 350 attached
) = 4
[pid   306] fstat(4 <unfinished ...>
[pid   351] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   350] set_robust_list(0x7f8b6954e9a0, 24 <unfinished ...>
[pid   306] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   351] <... set_robust_list resumed>) = 0
[pid   350] <... set_robust_list resumed>) = 0
[   20.274803][  T329] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   306] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   306] getdents64(4 <unfinished ...>
[pid   351] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   350] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-15/strace-static-x86_64: Process 352 attached
 <unfinished ...>
[pid   351] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   349] <... write resumed>)        = 262144
[pid   306] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   349] munmap(0x7f8b6954f000, 138412032) = 0
[pid   349] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   349] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   352] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   351] memfd_create("syzkaller", 0 <unfinished ...>
[pid   350] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   345] <... mount resumed>)        = 0
[pid   306] close(4 <unfinished ...>
[pid   351] <... memfd_create resumed>) = 3
[pid   350] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   350] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   306] rmdir("./0/bus" <unfinished ...>
[pid   351] <... mmap resumed>)         = 0x7f8b6952e000
[pid   350] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   306] <... rmdir resumed>)        = 0
[pid   352] <... set_robust_list resumed>) = 0
[pid   351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   349] <... ioctl resumed>)        = 0
[pid   345] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   350] <... futex resumed>)        = 1
[pid   347] <... futex resumed>)        = 0
[pid   306] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   345] <... openat resumed>)       = 3
[pid   349] close(3 <unfinished ...>
[pid   345] chdir("./bus")              = 0
[pid   352] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   349] <... close resumed>)        = 0
[pid   350] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   306] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   349] close(4 <unfinished ...>
[pid   352] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   352] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   349] <... close resumed>)        = 0
[pid   352] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   345] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   349] mkdir("./bus", 0777 <unfinished ...>
[pid   345] <... openat resumed>)       = 4
[pid   349] <... mkdir resumed>)        = 0
[pid   352] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   348] <... futex resumed>)        = 0
[pid   351] <... write resumed>)        = 262144
[pid   345] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   306] newfstatat(AT_FDCWD, "./0/binderfs" <unfinished ...>
[pid   352] <... futex resumed>)        = 1
[pid   345] <... ioctl resumed>)        = 0
[pid   352] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   351] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   306] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   349] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   345] close(4 <unfinished ...>
[pid   351] <... munmap resumed>)       = 0
[pid   345] <... close resumed>)        = 0
[pid   306] unlink("./0/binderfs" <unfinished ...>
[pid   351] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   306] <... unlink resumed>)       = 0
[pid   351] <... openat resumed>)       = 4
[pid   306] getdents64(3 <unfinished ...>
[pid   351] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   306] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   345] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   345] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   306] close(3)                    = 0
[pid   306] rmdir("./0")                = 0
[pid   306] mkdir("./1", 0777)          = 0
[pid   306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3
[pid   306] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   306] close(3)                    = 0
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 5
[pid   306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 355 attached
[pid   355] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   355] chdir("./1")                = 0
[pid   355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   355] setpgid(0, 0 <unfinished ...>
[pid   342] close(3 <unfinished ...>
[pid   355] <... setpgid resumed>)      = 0
[pid   351] <... ioctl resumed>)        = 0
[pid   342] <... close resumed>)        = 0
[pid   313] <... umount2 resumed>)      = 0
[pid   342] close(4 <unfinished ...>
[pid   313] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   342] close(5 <unfinished ...>
[pid   313] newfstatat(AT_FDCWD, "./0/bus" <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   342] close(6 <unfinished ...>
[pid   313] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   342] close(7 <unfinished ...>
[pid   313] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... openat resumed>)       = 4
[pid   342] close(8 <unfinished ...>
[pid   313] fstat(4 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   342] close(9 <unfinished ...>
[pid   313] getdents64(4 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   342] close(10 <unfinished ...>
[pid   313] getdents64(4 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   342] close(11 <unfinished ...>
[pid   313] close(4 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... close resumed>)        = 0
[pid   342] close(12 <unfinished ...>
[pid   313] rmdir("./0/bus" <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... rmdir resumed>)        = 0
[pid   342] close(13 <unfinished ...>
[pid   313] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   342] close(14 <unfinished ...>
[pid   313] newfstatat(AT_FDCWD, "./0/binderfs" <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   342] close(15 <unfinished ...>
[pid   313] unlink("./0/binderfs" <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... unlink resumed>)       = 0
[pid   342] close(16 <unfinished ...>
[pid   313] getdents64(3 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   342] close(17 <unfinished ...>
[pid   313] close(3 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... close resumed>)        = 0
[pid   342] close(18 <unfinished ...>
[pid   313] rmdir("./0" <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... rmdir resumed>)        = 0
[pid   342] close(19 <unfinished ...>
[pid   313] mkdir("./1", 0777 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... mkdir resumed>)        = 0
[pid   342] close(20 <unfinished ...>
[pid   313] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... openat resumed>)       = 3
[pid   342] close(21 <unfinished ...>
[pid   313] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   342] close(22 <unfinished ...>
[pid   313] close(3 <unfinished ...>
[pid   355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   351] close(3 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... close resumed>)        = 0
[pid   355] <... openat resumed>)       = 3
[pid   351] <... close resumed>)        = 0
[pid   342] close(23 <unfinished ...>
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   355] write(3, "1000", 4 <unfinished ...>
[pid   351] close(4 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   355] <... write resumed>)        = 4
[pid   351] <... close resumed>)        = 0
[pid   342] close(24 <unfinished ...>
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   355] close(3 <unfinished ...>
[pid   351] mkdir("./bus", 0777 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   355] <... close resumed>)        = 0
[pid   351] <... mkdir resumed>)        = 0
[pid   342] close(25 <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x55558f4f3690) = 5
[pid   355] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   351] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   355] <... symlink resumed>)      = 0
[pid   342] close(26 <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   355] write(1, "executing program\n", 18 <unfinished ...>
executing program
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   355] <... write resumed>)        = 18
[pid   342] close(27 <unfinished ...>
[pid   355] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   355] <... futex resumed>)        = 0
[pid   342] close(28 <unfinished ...>
[pid   355] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   355] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   342] close(29 <unfinished ...>
[pid   355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   342] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   355] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   342] exit_group(0 <unfinished ...>
[pid   355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   346] <... futex resumed>)        = ?
[pid   345] <... futex resumed>)        = ?
[pid   342] <... exit_group resumed>)   = ?
[pid   355] <... mmap resumed>)         = 0x7f8b7194f000
[pid   346] +++ exited with 0 +++
[pid   345] +++ exited with 0 +++
[pid   342] +++ exited with 0 +++
[pid   355] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   355] <... mprotect resumed>)     = 0
[pid   311] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[6]}, 88) = 6
[pid   355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   355] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   355] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   355] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   355] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] <... restart_syscall resumed>) = 0
[pid   355] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   311] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   355] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   355] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   355] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] <... openat resumed>)       = 3
[pid   355] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] fstat(3 <unfinished ...>
[pid   355] <... futex resumed>)        = 0
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   355] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   311] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   311] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-15/strace-static-x86_64: Process 356 attached
 <unfinished ...>
[pid   356] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   356] chdir("./1")                = 0
[pid   356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   356] setpgid(0, 0)               = 0
[pid   356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   356] write(3, "1000", 4)         = 4
[pid   356] close(3)                    = 0
[pid   356] symlink("/dev/binderfs", "./binderfs") = 0
[pid   356] write(1, "executing program\n", 18) = 18
[pid   356] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   356] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
executing program
[pid   356] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITEci2-android-5-15/strace-static-x86_64: Process 359 attached
ci2-android-5-15/strace-static-x86_64: Process 358 attached
) = 0
[   20.326457][  T345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.338399][  T345] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.349188][  T349] loop3: detected capacity change from 0 to 512
[   20.362373][  T351] loop0: detected capacity change from 0 to 512
[pid   359] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   358] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   359] <... set_robust_list resumed>) = 0
[pid   358] <... set_robust_list resumed>) = 0
[pid   359] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   358] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   359] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   359] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   358] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   359] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   358] memfd_create("syzkaller", 0 <unfinished ...>
[pid   359] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   358] <... memfd_create resumed>) = 3
[pid   359] <... futex resumed>)        = 1
[pid   358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   359] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   358] <... mmap resumed>)         = 0x7f8b6952e000
[pid   358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   358] munmap(0x7f8b6952e000, 138412032) = 0
[pid   358] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   358] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   356] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   355] <... futex resumed>)        = 0
[pid   358] <... ioctl resumed>)        = 0
[pid   356] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   349] <... mount resumed>)        = 0
[pid   356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   349] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   356] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6
[pid   349] chdir("./bus" <unfinished ...>
[pid   356] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   349] <... chdir resumed>)        = 0
[pid   356] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   349] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   356] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   349] <... openat resumed>)       = 4
[pid   356] <... futex resumed>)        = 0
[pid   349] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   356] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   349] <... ioctl resumed>)        = 0
[pid   356] <... futex resumed>)        = 0
[pid   349] close(4 <unfinished ...>
[pid   356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   349] <... close resumed>)        = 0
[pid   356] <... mmap resumed>)         = 0x7f8b7192e000
[pid   349] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   356] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   349] <... futex resumed>)        = 0
[pid   356] <... mprotect resumed>)     = 0
[pid   349] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   356] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   347] close(3 <unfinished ...>
[pid   356] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   347] <... close resumed>)        = 0
[pid   356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   347] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   356] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7
[pid   347] close(5 <unfinished ...>
[pid   356] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   347] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   347] close(6 <unfinished ...>
[pid   356] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   347] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... futex resumed>)        = 0
[pid   347] close(7 <unfinished ...>
[pid   356] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   347] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   347] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   347] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   347] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   347] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   347] exit_group(0 <unfinished ...>
[pid   350] <... futex resumed>)        = ?
[pid   349] <... futex resumed>)        = ?
[pid   347] <... exit_group resumed>)   = ?
[pid   350] +++ exited with 0 +++
[pid   349] +++ exited with 0 +++
[pid   347] +++ exited with 0 +++
[pid   312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
[pid   312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   358] close(3)                    = 0
[pid   358] close(4ci2-android-5-15/strace-static-x86_64: Process 363 attached
 <unfinished ...>
[pid   363] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   363] memfd_create("syzkaller", 0) = 3
[pid   363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   312] <... restart_syscall resumed>) = 0
[pid   312] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-15/strace-static-x86_64: Process 364 attached
) = -1 EINVAL (Invalid argument)
[pid   312] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   312] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   312] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   312] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   363] <... write resumed>)        = 262144
[pid   363] munmap(0x7f8b6952e000, 138412032) = 0
[pid   363] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[   20.388534][  T349] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.395019][  T358] loop1: detected capacity change from 0 to 512
[   20.400684][  T349] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.407489][  T351] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.427947][  T351] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   363] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   364] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   351] <... mount resumed>)        = 0
[pid   364] <... set_robust_list resumed>) = 0
[pid   364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   364] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   364] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   356] <... futex resumed>)        = 0
[pid   364] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   351] chdir("./bus")              = 0
[pid   351] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid   351] ioctl(4, LOOP_CLR_FD)       = 0
[pid   351] close(4)                    = 0
[pid   351] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   348] close(3)                    = 0
[pid   348] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   348] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   348] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   348] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   348] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   348] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   348] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   348] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   348] exit_group(0 <unfinished ...>
[pid   352] <... futex resumed>)        = ?
[pid   348] <... exit_group resumed>)   = ?
[pid   352] +++ exited with 0 +++
[pid   351] <... futex resumed>)        = ?
[pid   351] +++ exited with 0 +++
[pid   348] +++ exited with 0 +++
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   363] <... ioctl resumed>)        = 0
[pid   358] <... close resumed>)        = 0
[pid   311] <... umount2 resumed>)      = 0
[pid   363] close(3 <unfinished ...>
[pid   358] mkdir("./bus", 0777 <unfinished ...>
[pid   311] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   358] <... mkdir resumed>)        = 0
[pid   358] mount("/dev/loop1", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   311] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   311] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   311] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   363] <... close resumed>)        = 0
[pid   311] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   311] close(4)                    = 0
[pid   311] rmdir("./1/bus")            = 0
[pid   311] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   363] close(4 <unfinished ...>
[pid   311] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] unlink("./1/binderfs")      = 0
[pid   311] getdents64(3, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   311] close(3)                    = 0
[pid   311] rmdir("./1")                = 0
[pid   311] mkdir("./2", 0777 <unfinished ...>
[pid   309] <... restart_syscall resumed>) = 0
[pid   311] <... mkdir resumed>)        = 0
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   309] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] <... openat resumed>)       = 3
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   311] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   309] <... openat resumed>)       = 3
[pid   311] close(3 <unfinished ...>
[pid   309] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   311] <... close resumed>)        = 0
[pid   309] getdents64(3 <unfinished ...>
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   309] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 8
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 365 attached
[pid   365] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   365] chdir("./2")                = 0
[pid   365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   365] setpgid(0, 0)               = 0
[pid   365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   365] write(3, "1000", 4)         = 4
[pid   365] close(3)                    = 0
[pid   365] symlink("/dev/binderfs", "./binderfs") = 0
[pid   365] write(1, "executing program\n", 18) = 18
executing program
[pid   365] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   365] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   365] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0}ci2-android-5-15/strace-static-x86_64: Process 366 attached
 => {parent_tid=[9]}, 88) = 9
[pid   366] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   366] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   365] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   366] <... futex resumed>)        = 0
[pid   365] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   366] memfd_create("syzkaller", 0 <unfinished ...>
[pid   365] <... futex resumed>)        = 0
[pid   366] <... memfd_create resumed>) = 3
[pid   365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6954f000
[pid   365] <... mmap resumed>)         = 0x7f8b6952e000
[pid   365] mprotect(0x7f8b6952f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b6954e990, parent_tid=0x7f8b6954e990, exit_signal=0, stack=0x7f8b6952e000, stack_size=0x20300, tls=0x7f8b6954e6c0} => {parent_tid=[10]}, 88) = 10
[pid   365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   365] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   365] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 367 attached
 <unfinished ...>
[pid   367] set_robust_list(0x7f8b6954e9a0, 24) = 0
[pid   367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   367] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   367] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   365] <... futex resumed>)        = 0
[pid   367] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   366] <... write resumed>)        = 262144
[pid   366] munmap(0x7f8b6954f000, 138412032) = 0
[pid   366] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   366] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   366] close(3)                    = 0
[pid   366] close(4)                    = 0
[pid   363] <... close resumed>)        = 0
[pid   312] <... umount2 resumed>)      = 0
[pid   366] mkdir("./bus", 0777 <unfinished ...>
[pid   363] mkdir("./bus", 0777 <unfinished ...>
[pid   312] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   363] <... mkdir resumed>)        = 0
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   366] <... mkdir resumed>)        = 0
[pid   309] <... umount2 resumed>)      = 0
[pid   366] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   363] mount("/dev/loop4", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./1/bus" <unfinished ...>
[pid   309] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./1/bus" <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   309] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... openat resumed>)       = 4
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] fstat(4 <unfinished ...>
[pid   309] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   309] <... openat resumed>)       = 4
[pid   312] getdents64(4 <unfinished ...>
[pid   309] fstat(4 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   312] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   312] close(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   312] <... close resumed>)        = 0
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   312] rmdir("./1/bus" <unfinished ...>
[pid   309] close(4 <unfinished ...>
[pid   312] <... rmdir resumed>)        = 0
[pid   309] <... close resumed>)        = 0
[pid   312] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] rmdir("./1/bus" <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... rmdir resumed>)        = 0
[pid   312] newfstatat(AT_FDCWD, "./1/binderfs" <unfinished ...>
[pid   309] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] unlink("./1/binderfs" <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./1/binderfs" <unfinished ...>
[pid   312] <... unlink resumed>)       = 0
[pid   309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] getdents64(3 <unfinished ...>
[pid   309] unlink("./1/binderfs" <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   312] close(3 <unfinished ...>
[pid   309] <... unlink resumed>)       = 0
[pid   312] <... close resumed>)        = 0
[pid   309] getdents64(3 <unfinished ...>
[pid   312] rmdir("./1" <unfinished ...>
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   309] close(3 <unfinished ...>
[pid   312] mkdir("./2", 0777 <unfinished ...>
[pid   309] <... close resumed>)        = 0
[pid   312] <... mkdir resumed>)        = 0
[pid   309] rmdir("./1" <unfinished ...>
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   309] <... rmdir resumed>)        = 0
[pid   312] <... openat resumed>)       = 3
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] mkdir("./2", 0777 <unfinished ...>
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   312] close(3 <unfinished ...>
[pid   309] <... mkdir resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   309] <... openat resumed>)       = 3
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 8
[pid   309] close(3 <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... close resumed>)        = 0
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-15/strace-static-x86_64: Process 369 attached
 <unfinished ...>
[pid   369] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   309] <... clone resumed>, child_tidptr=0x55558f4f3690) = 8
[pid   309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 370 attached
[   20.431010][  T363] loop4: detected capacity change from 0 to 512
[pid   370] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   369] chdir("./2" <unfinished ...>
[pid   370] <... set_robust_list resumed>) = 0
[pid   370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   370] chdir("./2")                = 0
[pid   370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   370] setpgid(0, 0)               = 0
[pid   370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   370] write(3, "1000", 4)         = 4
[pid   370] close(3)                    = 0
[pid   370] symlink("/dev/binderfs", "./binderfs") = 0
[pid   370] write(1, "executing program\n", 18) = 18
executing program
[pid   370] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   370] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   370] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[9]}, 88) = 9
[pid   370] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   369] <... chdir resumed>)        = 0
[pid   370] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   370] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   369] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   370] <... futex resumed>)        = 0
[pid   369] <... prctl resumed>)        = 0
[pid   370] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   369] setpgid(0, 0 <unfinished ...>
[pid   370] <... futex resumed>)        = 0
[pid   369] <... setpgid resumed>)      = 0
[pid   370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   370] <... mmap resumed>)         = 0x7f8b7192e000
[pid   369] <... openat resumed>)       = 3
[pid   370] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   369] write(3, "1000", 4 <unfinished ...>
[pid   370] <... mprotect resumed>)     = 0
[pid   369] <... write resumed>)        = 4
[pid   370] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   369] close(3 <unfinished ...>
[pid   370] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   369] <... close resumed>)        = 0
[pid   370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   369] symlink("/dev/binderfs", "./binderfs") = 0
[pid   370] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10
executing program
[pid   369] write(1, "executing program\n", 18 <unfinished ...>
[pid   370] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   369] <... write resumed>)        = 18
[pid   370] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   369] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   370] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   369] <... futex resumed>)        = 0
[pid   370] <... futex resumed>)        = 0
[pid   369] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   370] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   369] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   369] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[9]}, 88) = 9
[pid   369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   369] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   369] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   369] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[10]}, 88) = 10
ci2-android-5-15/strace-static-x86_64: Process 376 attached
ci2-android-5-15/strace-static-x86_64: Process 374 attached
ci2-android-5-15/strace-static-x86_64: Process 373 attached
[pid   369] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   358] <... mount resumed>)        = 0
[pid   376] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   374] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   373] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   369] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   358] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   376] <... set_robust_list resumed>) = 0
[pid   374] <... set_robust_list resumed>) = 0
[pid   373] <... set_robust_list resumed>) = 0
[pid   369] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   358] <... openat resumed>)       = 3
[pid   376] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   374] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   373] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   369] <... futex resumed>)        = 0
[pid   376] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   374] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   373] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   369] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   358] chdir("./bus" <unfinished ...>
[pid   376] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   374] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   373] memfd_create("syzkaller", 0 <unfinished ...>
[pid   376] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   374] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   373] <... memfd_create resumed>) = 3
[pid   358] <... chdir resumed>)        = 0
[pid   376] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   374] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   358] openat(AT_FDCWD, "/dev/loop1", O_RDONLY <unfinished ...>
[pid   376] <... futex resumed>)        = 1
[pid   374] <... futex resumed>)        = 1
[pid   373] <... mmap resumed>)         = 0x7f8b6952e000
[pid   370] <... futex resumed>)        = 0
[pid   369] <... futex resumed>)        = 0
[pid   358] <... openat resumed>)       = 4
[pid   376] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   374] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   358] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   373] <... write resumed>)        = 262144
[pid   358] <... ioctl resumed>)        = 0
[pid   373] munmap(0x7f8b6952e000, 138412032) = 0
[pid   358] close(4 <unfinished ...>
[pid   373] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   358] <... close resumed>)        = 0
[pid   373] <... openat resumed>)       = 4
[pid   358] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   373] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   358] <... futex resumed>)        = 0
[pid   373] <... ioctl resumed>)        = 0
[pid   358] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   355] close(3 <unfinished ...>
[pid   373] close(3 <unfinished ...>
[pid   355] <... close resumed>)        = 0
[pid   373] <... close resumed>)        = 0
[pid   355] close(4 <unfinished ...>
[pid   373] close(4 <unfinished ...>
[pid   355] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   373] <... close resumed>)        = 0
[pid   355] close(5 <unfinished ...>
[pid   373] mkdir("./bus", 0777)        = 0
[pid   355] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   373] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   355] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   355] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   355] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   355] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   355] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(11)                   = -1 EBADF (Bad file descriptor)
ci2-android-5-15/strace-static-x86_64: Process 375 attached
[pid   355] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(20 <unfinished ...>
[pid   375] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   355] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   355] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   355] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   355] exit_group(0)               = ?
[pid   359] <... futex resumed>)        = ?
[pid   358] <... futex resumed>)        = ?
[pid   359] +++ exited with 0 +++
[pid   375] <... set_robust_list resumed>) = 0
[pid   358] +++ exited with 0 +++
[pid   375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   375] memfd_create("syzkaller", 0 <unfinished ...>
[pid   355] +++ exited with 0 +++
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   375] <... memfd_create resumed>) = 3
[pid   375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   306] <... restart_syscall resumed>) = 0
[pid   306] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   306] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[   20.492469][  T358] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.504361][  T358] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   306] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   306] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   375] munmap(0x7f8b6952e000, 138412032) = 0
[pid   375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   375] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   375] close(3)                    = 0
[pid   375] close(4)                    = 0
[pid   375] mkdir("./bus", 0777)        = 0
[   20.555130][  T366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.568478][  T363] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.591600][  T373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   375] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   373] <... mount resumed>)        = 0
[pid   366] <... mount resumed>)        = 0
[pid   363] <... mount resumed>)        = 0
[pid   373] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   366] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   373] <... openat resumed>)       = 3
[pid   363] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   373] chdir("./bus" <unfinished ...>
[pid   366] <... openat resumed>)       = 3
[pid   363] <... openat resumed>)       = 3
[pid   306] <... umount2 resumed>)      = 0
[pid   373] <... chdir resumed>)        = 0
[pid   363] chdir("./bus" <unfinished ...>
[pid   306] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   373] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   363] <... chdir resumed>)        = 0
[pid   306] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   373] <... openat resumed>)       = 4
[pid   363] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   306] newfstatat(AT_FDCWD, "./1/bus" <unfinished ...>
[pid   373] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   363] <... openat resumed>)       = 4
[pid   306] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   373] <... ioctl resumed>)        = 0
[pid   363] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   306] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   373] close(4 <unfinished ...>
[pid   363] <... ioctl resumed>)        = 0
[pid   306] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   373] <... close resumed>)        = 0
[pid   363] close(4 <unfinished ...>
[pid   306] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   373] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   363] <... close resumed>)        = 0
[pid   306] <... openat resumed>)       = 4
[pid   373] <... futex resumed>)        = 0
[pid   363] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   306] fstat(4 <unfinished ...>
[pid   373] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   363] <... futex resumed>)        = 0
[pid   306] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   363] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   306] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   306] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   306] close(4)                    = 0
[pid   306] rmdir("./1/bus")            = 0
[pid   306] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   306] unlink("./1/binderfs")      = 0
[pid   370] close(3 <unfinished ...>
[pid   356] close(3 <unfinished ...>
[pid   370] <... close resumed>)        = 0
[pid   356] <... close resumed>)        = 0
[pid   306] getdents64(3 <unfinished ...>
[pid   370] close(4 <unfinished ...>
[pid   356] close(4 <unfinished ...>
[pid   306] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] close(3 <unfinished ...>
[pid   370] close(5 <unfinished ...>
[pid   356] close(5 <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] rmdir("./1" <unfinished ...>
[pid   370] close(6 <unfinished ...>
[pid   356] close(6 <unfinished ...>
[pid   306] <... rmdir resumed>)        = 0
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] mkdir("./2", 0777 <unfinished ...>
[pid   370] close(7 <unfinished ...>
[pid   356] close(7 <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY <unfinished ...>
[pid   370] close(8 <unfinished ...>
[pid   356] close(8 <unfinished ...>
[pid   306] <... openat resumed>)       = 3
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   370] close(9 <unfinished ...>
[pid   356] close(9 <unfinished ...>
[pid   306] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] close(3 <unfinished ...>
[pid   370] close(10 <unfinished ...>
[pid   356] close(10 <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   370] close(11 <unfinished ...>
[pid   356] close(11 <unfinished ...>
[pid   306] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   370] close(12 <unfinished ...>
[pid   356] close(12 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   366] chdir("./bus" <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... clone resumed>, child_tidptr=0x55558f4f3690) = 8
[pid   370] close(13 <unfinished ...>
[pid   366] <... chdir resumed>)        = 0
[pid   356] close(13 <unfinished ...>
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   366] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   370] close(14 <unfinished ...>
[pid   366] <... openat resumed>)       = 4
[pid   356] close(14 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   366] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(15 <unfinished ...>
[pid   366] <... ioctl resumed>)        = 0
[pid   356] close(15 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   366] close(4 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(16 <unfinished ...>
[pid   366] <... close resumed>)        = 0
[pid   356] close(16 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   366] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(17 <unfinished ...>
[pid   366] <... futex resumed>)        = 0
[pid   356] close(17 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   366] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   365] close(3 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(18 <unfinished ...>
[pid   365] <... close resumed>)        = 0
[pid   356] close(18 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(4 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(19 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(19 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(5 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(20 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(20 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(6 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(21 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(21 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(7 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(22 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(22 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(8 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(23 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(23 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(9 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(24 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(24 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(10 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(25 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(25 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(11 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(26 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(26 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(12 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(27 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(27 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(13 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(28 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(28 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(14 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] close(29 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] close(29 <unfinished ...>
[pid   370] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   365] close(15 <unfinished ...>
[pid   356] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   370] exit_group(0 <unfinished ...>
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   356] exit_group(0 <unfinished ...>
[pid   373] <... futex resumed>)        = ?
[pid   370] <... exit_group resumed>)   = ?
[pid   365] close(16 <unfinished ...>
[pid   363] <... futex resumed>)        = ?
[pid   356] <... exit_group resumed>)   = ?
[pid   373] +++ exited with 0 +++
[pid   365] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   363] +++ exited with 0 +++
[pid   365] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   365] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   365] exit_group(0 <unfinished ...>
[pid   367] <... futex resumed>)        = ?
[pid   366] <... futex resumed>)        = ?
[pid   365] <... exit_group resumed>)   = ?
[pid   367] +++ exited with 0 +++
[pid   366] +++ exited with 0 +++
[pid   365] +++ exited with 0 +++
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   311] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-android-5-15/strace-static-x86_64: Process 385 attached
 <unfinished ...>
[pid   385] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   385] chdir("./2")                = 0
[pid   385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   385] setpgid(0, 0)               = 0
[pid   385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   385] write(3, "1000", 4)         = 4
[pid   385] close(3)                    = 0
[pid   385] symlink("/dev/binderfs", "./binderfs") = 0
[pid   385] write(1, "executing program\n", 18) = 18
[pid   385] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   385] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   385] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   364] <... futex resumed>)        = ? ERESTARTSYS (To be restarted if SA_RESTART is set)
[pid   374] <... futex resumed>)        = ?
[pid   385] <... mprotect resumed>)     = 0
[pid   385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   364] +++ exited with 0 +++
[pid   356] +++ exited with 0 +++
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
[pid   313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   385] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9
[pid   385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   385] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   385] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   374] +++ exited with 0 +++
[pid   370] +++ exited with 0 +++
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   385] <... futex resumed>)        = 0
[pid   385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   385] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
executing program
[pid   385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[10]}, 88) = 10
[pid   385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 387 attached
[pid   385] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   385] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 386 attached
 <unfinished ...>
[pid   386] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   386] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   387] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   386] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   386] memfd_create("syzkaller", 0 <unfinished ...>
[pid   387] <... set_robust_list resumed>) = 0
[pid   387] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   386] <... memfd_create resumed>) = 3
[   20.592009][  T363] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.602854][  T373] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.614012][  T366] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.640171][  T375] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   387] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   386] <... mmap resumed>)         = 0x7f8b6952e000
[pid   386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   313] <... restart_syscall resumed>) = 0
[pid   311] <... restart_syscall resumed>) = 0
[pid   309] <... restart_syscall resumed>) = 0
[pid   313] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   311] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   309] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   313] <... openat resumed>)       = 3
[pid   311] <... openat resumed>)       = 3
[pid   309] <... openat resumed>)       = 3
[pid   313] fstat(3 <unfinished ...>
[pid   311] fstat(3 <unfinished ...>
[pid   309] fstat(3 <unfinished ...>
[pid   313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   313] getdents64(3 <unfinished ...>
[pid   311] getdents64(3 <unfinished ...>
[pid   309] getdents64(3 <unfinished ...>
[pid   313] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   313] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   386] <... write resumed>)        = 262144
[pid   386] munmap(0x7f8b6952e000, 138412032) = 0
[pid   386] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   386] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   386] close(3)                    = 0
[pid   386] close(4 <unfinished ...>
[pid   387] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   387] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   385] <... futex resumed>)        = 0
[pid   387] <... futex resumed>)        = 1
[pid   387] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   375] <... mount resumed>)        = 0
[pid   375] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   375] chdir("./bus")              = 0
[pid   375] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4
[pid   375] ioctl(4, LOOP_CLR_FD)       = 0
[pid   375] close(4)                    = 0
[pid   375] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   369] close(3 <unfinished ...>
[pid   375] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   369] <... close resumed>)        = 0
[pid   369] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   369] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   369] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   369] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   369] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   369] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   369] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   369] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   369] exit_group(0 <unfinished ...>
[pid   376] <... futex resumed>)        = ?
[pid   369] <... exit_group resumed>)   = ?
[pid   376] +++ exited with 0 +++
[pid   375] <... futex resumed>)        = ?
[pid   375] +++ exited with 0 +++
[pid   369] +++ exited with 0 +++
[pid   312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   386] <... close resumed>)        = 0
[pid   386] mkdir("./bus", 0777)        = 0
[pid   386] mount("/dev/loop1", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   312] <... restart_syscall resumed>) = 0
[pid   312] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   312] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   312] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   312] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   312] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid   311] <... umount2 resumed>)      = 0
[pid   309] <... umount2 resumed>)      = 0
[pid   313] <... umount2 resumed>)      = 0
[pid   311] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] newfstatat(AT_FDCWD, "./2/bus" <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./2/bus" <unfinished ...>
[pid   313] newfstatat(AT_FDCWD, "./1/bus" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./2/bus" <unfinished ...>
[pid   311] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] <... openat resumed>)       = 4
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   313] fstat(4 <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   312] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   311] <... openat resumed>)       = 4
[pid   313] getdents64(4 <unfinished ...>
[pid   309] <... openat resumed>)       = 4
[pid   312] <... openat resumed>)       = 4
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   312] fstat(4 <unfinished ...>
[pid   311] fstat(4 <unfinished ...>
[pid   309] fstat(4 <unfinished ...>
[pid   313] getdents64(4 <unfinished ...>
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   312] getdents64(4 <unfinished ...>
[pid   311] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   313] close(4 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   313] <... close resumed>)        = 0
[pid   312] getdents64(4 <unfinished ...>
[pid   311] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   313] rmdir("./1/bus" <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   313] <... rmdir resumed>)        = 0
[pid   309] close(4 <unfinished ...>
[pid   313] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] close(4 <unfinished ...>
[pid   311] close(4 <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... close resumed>)        = 0
[pid   313] newfstatat(AT_FDCWD, "./1/binderfs" <unfinished ...>
[pid   312] <... close resumed>)        = 0
[pid   311] <... close resumed>)        = 0
[pid   309] rmdir("./2/bus" <unfinished ...>
[pid   313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] rmdir("./2/bus" <unfinished ...>
[pid   311] rmdir("./2/bus" <unfinished ...>
[pid   313] unlink("./1/binderfs" <unfinished ...>
[pid   309] <... rmdir resumed>)        = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   311] <... rmdir resumed>)        = 0
[pid   309] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... unlink resumed>)       = 0
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] getdents64(3 <unfinished ...>
[pid   312] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./2/binderfs" <unfinished ...>
[pid   313] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] close(3 <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./2/binderfs" <unfinished ...>
[pid   311] newfstatat(AT_FDCWD, "./2/binderfs" <unfinished ...>
[pid   309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] <... close resumed>)        = 0
[pid   312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] unlink("./2/binderfs" <unfinished ...>
[pid   313] rmdir("./1" <unfinished ...>
[pid   312] unlink("./2/binderfs" <unfinished ...>
[pid   311] unlink("./2/binderfs" <unfinished ...>
[pid   313] <... rmdir resumed>)        = 0
[pid   309] <... unlink resumed>)       = 0
[pid   313] mkdir("./2", 0777 <unfinished ...>
[pid   312] <... unlink resumed>)       = 0
[pid   311] <... unlink resumed>)       = 0
[pid   309] getdents64(3 <unfinished ...>
[pid   313] <... mkdir resumed>)        = 0
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   313] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   312] getdents64(3 <unfinished ...>
[pid   311] getdents64(3 <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   313] <... openat resumed>)       = 3
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   309] <... close resumed>)        = 0
[pid   313] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   311] close(3 <unfinished ...>
[pid   309] rmdir("./2" <unfinished ...>
[pid   313] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   312] <... close resumed>)        = 0
[pid   311] <... close resumed>)        = 0
[pid   313] close(3 <unfinished ...>
[pid   312] rmdir("./2" <unfinished ...>
[pid   311] rmdir("./2" <unfinished ...>
[pid   309] <... rmdir resumed>)        = 0
[pid   313] <... close resumed>)        = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] <... rmdir resumed>)        = 0
[pid   312] mkdir("./3", 0777 <unfinished ...>
[pid   309] mkdir("./3", 0777 <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] mkdir("./3", 0777 <unfinished ...>
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   312] <... mkdir resumed>)        = 0
[pid   309] <... mkdir resumed>)        = 0
[pid   311] <... mkdir resumed>)        = 0
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x55558f4f3690) = 8
[pid   311] <... openat resumed>)       = 3
[pid   309] <... openat resumed>)       = 3
ci2-android-5-15/strace-static-x86_64: Process 388 attached
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   312] <... openat resumed>)       = 3
[pid   311] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   309] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   311] close(3 <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   311] <... close resumed>)        = 0
[pid   312] close(3 <unfinished ...>
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   312] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   388] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   388] <... set_robust_list resumed>) = 0
[pid   388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   388] chdir("./2")                = 0
[pid   388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   388] setpgid(0, 0)               = 0
[pid   388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   311] <... clone resumed>, child_tidptr=0x55558f4f3690) = 11
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 11
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... clone resumed>, child_tidptr=0x55558f4f3690) = 11
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[   20.654021][  T375] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
ci2-android-5-15/strace-static-x86_64: Process 391 attached
ci2-android-5-15/strace-static-x86_64: Process 390 attached
[pid   388] <... openat resumed>)       = 3
[pid   388] write(3, "1000", 4)         = 4
[pid   388] close(3)                    = 0
[pid   388] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid   388] write(1, "executing program\n", 18) = 18
[pid   388] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   391] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   390] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   388] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   388] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   391] <... set_robust_list resumed>) = 0
[pid   390] <... set_robust_list resumed>) = 0
[pid   388] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   391] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   390] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   388] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   391] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   388] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9
[pid   391] chdir("./3" <unfinished ...>
[pid   390] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   388] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   388] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   388] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   388] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   391] <... chdir resumed>)        = 0
[pid   390] chdir("./3" <unfinished ...>
[pid   388] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   391] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   390] <... chdir resumed>)        = 0
[pid   388] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10
[pid   391] <... prctl resumed>)        = 0
[pid   390] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   391] setpgid(0, 0 <unfinished ...>
[pid   390] <... prctl resumed>)        = 0
[pid   388] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   391] <... setpgid resumed>)      = 0
[pid   390] setpgid(0, 0 <unfinished ...>
[pid   388] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   388] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   388] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 389 attached
 <unfinished ...>
[pid   391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   390] <... setpgid resumed>)      = 0
[pid   389] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   391] <... openat resumed>)       = 3
[pid   390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   389] <... set_robust_list resumed>) = 0
[pid   389] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   391] write(3, "1000", 4 <unfinished ...>
[pid   390] <... openat resumed>)       = 3
[pid   391] <... write resumed>)        = 4
[pid   390] write(3, "1000", 4 <unfinished ...>
[pid   389] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   391] close(3 <unfinished ...>
[pid   390] <... write resumed>)        = 4
[pid   389] chdir("./3" <unfinished ...>
[pid   391] <... close resumed>)        = 0
[pid   390] close(3 <unfinished ...>
[pid   389] <... chdir resumed>)        = 0
[pid   389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   391] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   390] <... close resumed>)        = 0
[pid   389] setpgid(0, 0 <unfinished ...>
[pid   391] <... symlink resumed>)      = 0
[pid   390] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   389] <... setpgid resumed>)      = 0
[pid   389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
executing program
[pid   391] write(1, "executing program\n", 18) = 18
[pid   390] <... symlink resumed>)      = 0
[pid   389] <... openat resumed>)       = 3
[pid   389] write(3, "1000", 4)         = 4
[pid   389] close(3 <unfinished ...>
[pid   391] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   390] write(1, "executing program\n", 18 <unfinished ...>
[pid   389] <... close resumed>)        = 0
[pid   391] <... futex resumed>)        = 0
[pid   390] <... write resumed>)        = 18
[pid   389] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
executing program
[pid   391] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   390] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   390] <... futex resumed>)        = 0
[pid   389] <... symlink resumed>)      = 0
[pid   391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   389] write(1, "executing program\n", 18 <unfinished ...>
[pid   390] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   391] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   389] <... write resumed>)        = 18
[pid   391] <... mprotect resumed>)     = 0
executing program
[pid   390] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   391] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   389] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   391] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   390] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   389] <... futex resumed>)        = 0
[pid   389] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   391] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12
[pid   391] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   389] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   391] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   391] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   389] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   391] <... futex resumed>)        = 0
[pid   390] <... mmap resumed>)         = 0x7f8b7194f000
[pid   391] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   389] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   389] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   391] <... futex resumed>)        = 0
[pid   390] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   390] <... mprotect resumed>)     = 0
[pid   391] <... mmap resumed>)         = 0x7f8b7192e000
ci2-android-5-15/strace-static-x86_64: Process 394 attached
[pid   391] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   390] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   389] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   391] <... mprotect resumed>)     = 0
[pid   390] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   394] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   391] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   389] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   394] <... set_robust_list resumed>) = 0
[pid   391] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   394] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   394] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   389] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12
[pid   394] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   390] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12
[pid   389] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   394] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   391] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13
[pid   390] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   389] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   394] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   391] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   389] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   394] <... futex resumed>)        = 1
[pid   391] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   390] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   389] <... futex resumed>)        = 0
[pid   388] <... futex resumed>)        = 0
[pid   394] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   391] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   390] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   389] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   391] <... futex resumed>)        = 0
[pid   390] <... futex resumed>)        = 0
[pid   389] <... futex resumed>)        = 0
[pid   391] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   390] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   390] <... futex resumed>)        = 0
[pid   389] <... mmap resumed>)         = 0x7f8b7192e000
[pid   390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   389] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   390] <... mmap resumed>)         = 0x7f8b7192e000
[pid   389] <... mprotect resumed>)     = 0
[pid   390] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   389] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   390] <... mprotect resumed>)     = 0
[pid   389] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   390] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   390] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   389] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13
[pid   389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   389] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   390] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13
[pid   389] <... futex resumed>)        = 0
[pid   390] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   389] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   390] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 398 attached
[pid   390] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   398] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   390] <... futex resumed>)        = 0
[pid   398] <... set_robust_list resumed>) = 0
[pid   390] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   398] memfd_create("syzkaller", 0) = 3
[pid   398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
ci2-android-5-15/strace-static-x86_64: Process 400 attached
[pid   400] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   400] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   400] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   389] <... futex resumed>)        = 0
[pid   400] <... futex resumed>)        = 1
[pid   400] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   398] munmap(0x7f8b6952e000, 138412032) = 0
[pid   398] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   398] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   398] close(3)                    = 0
[pid   398] close(4ci2-android-5-15/strace-static-x86_64: Process 397 attached
ci2-android-5-15/strace-static-x86_64: Process 401 attached
ci2-android-5-15/strace-static-x86_64: Process 399 attached
ci2-android-5-15/strace-static-x86_64: Process 396 attached
 <unfinished ...>
[pid   399] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   397] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   396] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   401] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   399] <... set_robust_list resumed>) = 0
[pid   399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   399] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   399] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   399] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-15/strace-static-x86_64: Process 393 attached
 <unfinished ...>
[pid   393] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   393] memfd_create("syzkaller", 0) = 3
[pid   393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   391] <... futex resumed>)        = 0
[pid   393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   397] <... set_robust_list resumed>) = 0
[pid   401] <... set_robust_list resumed>) = 0
[pid   396] <... set_robust_list resumed>) = 0
[pid   397] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   401] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   396] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   401] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   397] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   396] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   401] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   397] memfd_create("syzkaller", 0 <unfinished ...>
[pid   396] memfd_create("syzkaller", 0 <unfinished ...>
[pid   401] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   401] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   397] <... memfd_create resumed>) = 3
[pid   396] <... memfd_create resumed>) = 3
[pid   397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   401] <... futex resumed>)        = 1
[pid   390] <... futex resumed>)        = 0
[pid   396] <... mmap resumed>)         = 0x7f8b6952e000
[pid   401] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   397] <... mmap resumed>)         = 0x7f8b6952e000
[pid   393] <... write resumed>)        = 262144
[pid   393] munmap(0x7f8b6952e000, 138412032) = 0
[pid   393] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   393] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   393] <... ioctl resumed>)        = 0
[pid   393] close(3)                    = 0
[pid   393] close(4 <unfinished ...>
[pid   396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   397] <... write resumed>)        = 262144
[pid   396] <... write resumed>)        = 262144
[pid   397] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   396] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   398] <... close resumed>)        = 0
[pid   398] mkdir("./bus", 0777)        = 0
[pid   398] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   397] <... munmap resumed>)       = 0
[pid   397] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   397] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   397] close(3)                    = 0
[pid   397] close(4 <unfinished ...>
[pid   396] <... munmap resumed>)       = 0
[pid   396] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   396] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   396] close(3)                    = 0
[pid   396] close(4 <unfinished ...>
[pid   397] <... close resumed>)        = 0
[pid   396] <... close resumed>)        = 0
[pid   386] <... mount resumed>)        = 0
[pid   397] mkdir("./bus", 0777 <unfinished ...>
[pid   396] mkdir("./bus", 0777 <unfinished ...>
[pid   397] <... mkdir resumed>)        = 0
[pid   396] <... mkdir resumed>)        = 0
[pid   397] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   396] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   393] <... close resumed>)        = 0
[pid   393] mkdir("./bus", 0777)        = 0
[pid   393] mount("/dev/loop4", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   386] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   386] chdir("./bus")              = 0
[pid   386] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4
[pid   386] ioctl(4, LOOP_CLR_FD)       = 0
[pid   386] close(4)                    = 0
[pid   386] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   386] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   385] close(3)                    = 0
[pid   385] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   385] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   385] close(6)                    = -1 EBADF (Bad file descriptor)
[   20.736084][  T386] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.752823][  T386] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.769309][  T398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   385] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   385] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   385] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   385] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   385] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   385] exit_group(0 <unfinished ...>
[pid   387] <... futex resumed>)        = ?
[pid   386] <... futex resumed>)        = ?
[pid   385] <... exit_group resumed>)   = ?
[pid   387] +++ exited with 0 +++
[pid   386] +++ exited with 0 +++
[pid   385] +++ exited with 0 +++
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[pid   398] <... mount resumed>)        = 0
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   306] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   398] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   306] <... openat resumed>)       = 3
[pid   306] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   306] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   306] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   398] <... openat resumed>)       = 3
[pid   398] chdir("./bus")              = 0
[   20.783579][  T398] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.807481][  T397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.808138][  T396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   398] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4
[pid   398] ioctl(4, LOOP_CLR_FD)       = 0
[pid   398] close(4)                    = 0
[pid   396] <... mount resumed>)        = 0
[pid   398] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   396] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   398] <... futex resumed>)        = 0
[pid   396] <... openat resumed>)       = 3
[pid   389] close(3 <unfinished ...>
[pid   306] <... umount2 resumed>)      = 0
[pid   398] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   389] <... close resumed>)        = 0
[pid   389] close(4 <unfinished ...>
[pid   396] chdir("./bus" <unfinished ...>
[pid   306] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] close(5 <unfinished ...>
[pid   306] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] newfstatat(AT_FDCWD, "./2/bus" <unfinished ...>
[pid   396] <... chdir resumed>)        = 0
[pid   389] close(6 <unfinished ...>
[pid   306] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   389] close(7 <unfinished ...>
[pid   306] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   396] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   389] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   396] <... openat resumed>)       = 4
[pid   306] <... openat resumed>)       = 4
[pid   389] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   306] fstat(4 <unfinished ...>
[pid   396] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   389] close(10 <unfinished ...>
[pid   306] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   396] <... ioctl resumed>)        = 0
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   396] close(4 <unfinished ...>
[pid   306] getdents64(4 <unfinished ...>
[pid   389] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   396] <... close resumed>)        = 0
[pid   306] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   396] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   389] close(12 <unfinished ...>
[pid   306] getdents64(4 <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] close(13 <unfinished ...>
[pid   306] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] close(14 <unfinished ...>
[pid   306] close(4 <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] close(15 <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] close(16 <unfinished ...>
[pid   306] rmdir("./2/bus" <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] close(17 <unfinished ...>
[pid   306] <... rmdir resumed>)        = 0
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   396] <... futex resumed>)        = 0
[pid   389] close(18 <unfinished ...>
[pid   306] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   396] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   391] close(3 <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   391] <... close resumed>)        = 0
[pid   389] close(19 <unfinished ...>
[pid   306] newfstatat(AT_FDCWD, "./2/binderfs" <unfinished ...>
[pid   391] close(4 <unfinished ...>
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   391] close(5 <unfinished ...>
[pid   389] close(20 <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] close(6 <unfinished ...>
[pid   389] close(21 <unfinished ...>
[pid   306] unlink("./2/binderfs" <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... unlink resumed>)       = 0
[pid   391] close(7 <unfinished ...>
[pid   389] close(22 <unfinished ...>
[pid   306] getdents64(3 <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   391] close(8 <unfinished ...>
[pid   389] close(23 <unfinished ...>
[pid   306] close(3 <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] close(9 <unfinished ...>
[pid   389] close(24 <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] rmdir("./2" <unfinished ...>
[pid   391] close(10 <unfinished ...>
[pid   389] close(25 <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... rmdir resumed>)        = 0
[pid   391] close(11 <unfinished ...>
[pid   389] close(26 <unfinished ...>
[pid   306] mkdir("./3", 0777 <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] close(12 <unfinished ...>
[pid   389] close(27 <unfinished ...>
[pid   306] <... mkdir resumed>)        = 0
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] close(13 <unfinished ...>
[pid   389] close(28 <unfinished ...>
[pid   306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... openat resumed>)       = 3
[pid   391] close(14 <unfinished ...>
[pid   389] close(29 <unfinished ...>
[pid   306] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   389] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   306] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   391] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   389] exit_group(0 <unfinished ...>
[pid   306] close(3 <unfinished ...>
[pid   400] <... futex resumed>)        = ?
[pid   398] <... futex resumed>)        = ?
[pid   391] close(16 <unfinished ...>
[pid   389] <... exit_group resumed>)   = ?
[pid   400] +++ exited with 0 +++
[pid   398] +++ exited with 0 +++
[pid   306] <... close resumed>)        = 0
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] close(17 <unfinished ...>
[pid   389] +++ exited with 0 +++
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   397] <... mount resumed>)        = 0
[pid   397] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   397] chdir("./bus")              = 0
[pid   397] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4
[pid   397] ioctl(4, LOOP_CLR_FD)       = 0
[pid   397] close(4)                    = 0
[pid   397] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   397] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   391] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   391] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   391] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   391] exit_group(0 <unfinished ...>
[pid   399] <... futex resumed>)        = ?
[pid   396] <... futex resumed>)        = ?
[pid   391] <... exit_group resumed>)   = ?
[pid   399] +++ exited with 0 +++
[pid   396] +++ exited with 0 +++
[pid   391] +++ exited with 0 +++
[pid   390] close(3)                    = 0
[pid   390] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   390] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   390] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   390] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   390] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   390] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   390] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(26)                   = -1 EBADF (Bad file descriptor)
[   20.821561][  T393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.829662][  T396] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.867461][  T397] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   390] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   390] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   390] exit_group(0 <unfinished ...>
[pid   401] <... futex resumed>)        = ?
[pid   390] <... exit_group resumed>)   = ?
[pid   401] +++ exited with 0 +++
[pid   397] <... futex resumed>)        = ?
[pid   393] <... mount resumed>)        = 0
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   306] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   393] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   309] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   306] <... clone resumed>, child_tidptr=0x55558f4f3690) = 11
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   309] <... openat resumed>)       = 3
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   393] <... openat resumed>)       = 3
[pid   311] <... openat resumed>)       = 3
[pid   309] fstat(3 <unfinished ...>
[pid   393] chdir("./bus" <unfinished ...>
[pid   311] fstat(3 <unfinished ...>
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   393] <... chdir resumed>)        = 0
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   393] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   309] getdents64(3 <unfinished ...>
[pid   311] getdents64(3 <unfinished ...>
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   393] <... openat resumed>)       = 4
[pid   309] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-15/strace-static-x86_64: Process 411 attached
 <unfinished ...>
[pid   397] +++ exited with 0 +++
[pid   390] +++ exited with 0 +++
[pid   393] ioctl(4, LOOP_CLR_FD)       = 0
[pid   312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   393] close(4 <unfinished ...>
[pid   312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   393] <... close resumed>)        = 0
[pid   411] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   411] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   393] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   411] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   411] chdir("./3" <unfinished ...>
[pid   393] <... futex resumed>)        = 0
[pid   393] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   388] close(3)                    = 0
[pid   388] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   388] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   388] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   388] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   388] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   388] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   388] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   388] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   388] exit_group(0 <unfinished ...>
[pid   393] <... futex resumed>)        = ?
[pid   388] <... exit_group resumed>)   = ?
[pid   394] <... futex resumed>)        = ?
[pid   393] +++ exited with 0 +++
[pid   411] <... chdir resumed>)        = 0
[pid   411] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   394] +++ exited with 0 +++
[pid   388] +++ exited with 0 +++
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
[pid   313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   411] <... prctl resumed>)        = 0
[pid   411] setpgid(0, 0)               = 0
[pid   411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   411] write(3, "1000", 4)         = 4
[pid   411] close(3)                    = 0
[pid   411] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid   411] write(1, "executing program\n", 18) = 18
[pid   411] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   411] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   312] <... restart_syscall resumed>) = 0
[pid   313] <... restart_syscall resumed>) = 0
[pid   313] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   411] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   312] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   313] <... openat resumed>)       = 3
[pid   312] <... openat resumed>)       = 3
[pid   313] fstat(3 <unfinished ...>
[pid   312] fstat(3 <unfinished ...>
[pid   313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   313] getdents64(3 <unfinished ...>
[pid   312] getdents64(3 <unfinished ...>
[pid   313] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   313] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   411] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   411] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0}ci2-android-5-15/strace-static-x86_64: Process 412 attached
 => {parent_tid=[12]}, 88) = 12
[pid   412] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   411] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   411] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   411] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   411] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   412] <... set_robust_list resumed>) = 0
[pid   412] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   411] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   412] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0}ci2-android-5-15/strace-static-x86_64: Process 413 attached
 <unfinished ...>
[pid   412] memfd_create("syzkaller", 0 <unfinished ...>
[pid   411] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13
[pid   413] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   413] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   412] <... memfd_create resumed>) = 3
[pid   411] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   411] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   412] <... mmap resumed>)         = 0x7f8b6952e000
[pid   411] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   413] <... futex resumed>)        = 0
[pid   413] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   411] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   413] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   413] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   411] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   412] munmap(0x7f8b6952e000, 138412032) = 0
[pid   412] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   412] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   412] close(3)                    = 0
[pid   412] close(4)                    = 0
[pid   313] <... umount2 resumed>)      = 0
[pid   312] <... umount2 resumed>)      = 0
[pid   311] <... umount2 resumed>)      = 0
[pid   309] <... umount2 resumed>)      = 0
[pid   313] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] newfstatat(AT_FDCWD, "./2/bus" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./3/bus" <unfinished ...>
[pid   311] newfstatat(AT_FDCWD, "./3/bus" <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./3/bus" <unfinished ...>
[pid   313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   311] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[   20.872769][  T393] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   309] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   313] <... openat resumed>)       = 4
[pid   312] <... openat resumed>)       = 4
[pid   311] <... openat resumed>)       = 4
[pid   309] <... openat resumed>)       = 4
[pid   313] fstat(4 <unfinished ...>
[pid   312] fstat(4 <unfinished ...>
[pid   311] fstat(4 <unfinished ...>
[pid   309] fstat(4 <unfinished ...>
[pid   313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   313] getdents64(4 <unfinished ...>
[pid   312] getdents64(4 <unfinished ...>
[pid   311] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   313] getdents64(4 <unfinished ...>
[pid   312] getdents64(4 <unfinished ...>
[pid   311] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   313] close(4 <unfinished ...>
[pid   312] close(4 <unfinished ...>
[pid   311] close(4 <unfinished ...>
[pid   309] close(4 <unfinished ...>
[pid   313] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] <... close resumed>)        = 0
[pid   309] <... close resumed>)        = 0
[pid   313] rmdir("./2/bus" <unfinished ...>
[pid   312] rmdir("./3/bus" <unfinished ...>
[pid   311] rmdir("./3/bus" <unfinished ...>
[pid   309] rmdir("./3/bus" <unfinished ...>
[pid   313] <... rmdir resumed>)        = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   311] <... rmdir resumed>)        = 0
[pid   309] <... rmdir resumed>)        = 0
[pid   313] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] newfstatat(AT_FDCWD, "./2/binderfs" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./3/binderfs" <unfinished ...>
[pid   311] newfstatat(AT_FDCWD, "./3/binderfs" <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./3/binderfs" <unfinished ...>
[pid   412] mkdir("./bus", 0777 <unfinished ...>
[pid   313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   412] <... mkdir resumed>)        = 0
[pid   313] unlink("./2/binderfs" <unfinished ...>
[pid   312] unlink("./3/binderfs" <unfinished ...>
[pid   311] unlink("./3/binderfs" <unfinished ...>
[pid   309] unlink("./3/binderfs" <unfinished ...>
[pid   412] mount("/dev/loop1", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   313] <... unlink resumed>)       = 0
[pid   312] <... unlink resumed>)       = 0
[pid   311] <... unlink resumed>)       = 0
[pid   309] <... unlink resumed>)       = 0
[pid   313] getdents64(3 <unfinished ...>
[pid   312] getdents64(3 <unfinished ...>
[pid   311] getdents64(3 <unfinished ...>
[pid   309] getdents64(3 <unfinished ...>
[pid   313] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   313] close(3 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   311] close(3 <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   313] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] <... close resumed>)        = 0
[pid   309] <... close resumed>)        = 0
[pid   313] rmdir("./2" <unfinished ...>
[pid   312] rmdir("./3" <unfinished ...>
[pid   311] rmdir("./3" <unfinished ...>
[pid   309] rmdir("./3" <unfinished ...>
[pid   313] <... rmdir resumed>)        = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   311] <... rmdir resumed>)        = 0
[pid   309] <... rmdir resumed>)        = 0
[pid   313] mkdir("./3", 0777 <unfinished ...>
[pid   312] mkdir("./4", 0777 <unfinished ...>
[pid   311] mkdir("./4", 0777 <unfinished ...>
[pid   309] mkdir("./4", 0777 <unfinished ...>
[pid   313] <... mkdir resumed>)        = 0
[pid   312] <... mkdir resumed>)        = 0
[pid   311] <... mkdir resumed>)        = 0
[pid   309] <... mkdir resumed>)        = 0
[pid   313] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   313] <... openat resumed>)       = 3
[pid   312] <... openat resumed>)       = 3
[pid   311] <... openat resumed>)       = 3
[pid   309] <... openat resumed>)       = 3
[pid   313] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   311] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   313] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   311] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   309] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   313] close(3 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   311] close(3 <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   313] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] <... close resumed>)        = 0
[pid   309] <... close resumed>)        = 0
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   312] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-15/strace-static-x86_64: Process 416 attached
ci2-android-5-15/strace-static-x86_64: Process 415 attached
ci2-android-5-15/strace-static-x86_64: Process 414 attached
 <unfinished ...>
[pid   415] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   414] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x55558f4f3690) = 11
[pid   416] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 14
[pid   311] <... clone resumed>, child_tidptr=0x55558f4f3690) = 14
[pid   309] <... clone resumed>, child_tidptr=0x55558f4f3690) = 14
ci2-android-5-15/strace-static-x86_64: Process 417 attached
[pid   416] <... set_robust_list resumed>) = 0
[pid   415] <... set_robust_list resumed>) = 0
[pid   414] <... set_robust_list resumed>) = 0
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   415] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   414] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   416] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   417] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   416] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   415] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   414] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   415] chdir("./4" <unfinished ...>
[pid   414] chdir("./3" <unfinished ...>
[pid   416] chdir("./4" <unfinished ...>
[pid   417] <... set_robust_list resumed>) = 0
[pid   415] <... chdir resumed>)        = 0
[pid   414] <... chdir resumed>)        = 0
[pid   417] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   416] <... chdir resumed>)        = 0
[pid   415] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   414] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   417] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   416] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   415] <... prctl resumed>)        = 0
[pid   414] <... prctl resumed>)        = 0
[pid   417] chdir("./4" <unfinished ...>
[pid   416] <... prctl resumed>)        = 0
[pid   415] setpgid(0, 0 <unfinished ...>
[pid   414] setpgid(0, 0 <unfinished ...>
[pid   417] <... chdir resumed>)        = 0
[pid   416] setpgid(0, 0 <unfinished ...>
[pid   415] <... setpgid resumed>)      = 0
[pid   414] <... setpgid resumed>)      = 0
[pid   417] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   416] <... setpgid resumed>)      = 0
[pid   415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   415] <... openat resumed>)       = 3
[pid   416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   415] write(3, "1000", 4 <unfinished ...>
[pid   414] write(3, "1000", 4 <unfinished ...>
[pid   415] <... write resumed>)        = 4
[pid   414] <... write resumed>)        = 4
[pid   416] <... openat resumed>)       = 3
[pid   415] close(3 <unfinished ...>
[pid   414] close(3 <unfinished ...>
[pid   415] <... close resumed>)        = 0
[pid   416] write(3, "1000", 4 <unfinished ...>
[pid   414] <... close resumed>)        = 0
[pid   415] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   414] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   416] <... write resumed>)        = 4
[pid   415] <... symlink resumed>)      = 0
executing program
[pid   415] write(1, "executing program\n", 18 <unfinished ...>
[pid   414] <... symlink resumed>)      = 0
[pid   416] close(3 <unfinished ...>
[pid   415] <... write resumed>)        = 18
[pid   414] write(1, "executing program\n", 18 <unfinished ...>
[pid   415] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   414] <... write resumed>)        = 18
[pid   416] <... close resumed>)        = 0
executing program
[pid   415] <... futex resumed>)        = 0
[pid   416] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   414] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   415] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   414] <... futex resumed>)        = 0
[pid   416] <... symlink resumed>)      = 0
[pid   414] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   415] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   416] write(1, "executing program\n", 18 <unfinished ...>
[pid   414] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   416] <... write resumed>)        = 18
[pid   414] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   415] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   414] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   416] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   415] <... mmap resumed>)         = 0x7f8b7194f000
executing program
[pid   414] <... mmap resumed>)         = 0x7f8b7194f000
[pid   416] <... futex resumed>)        = 0
[pid   415] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   414] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   417] <... prctl resumed>)        = 0
[pid   416] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   414] <... mprotect resumed>)     = 0
[pid   417] setpgid(0, 0)               = 0
[pid   416] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   415] <... mprotect resumed>)     = 0
[pid   414] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   415] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   414] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   417] <... openat resumed>)       = 3
[pid   416] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   415] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   417] write(3, "1000", 4)         = 4
[pid   417] close(3)                    = 0
[pid   414] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12
[pid   416] <... mmap resumed>)         = 0x7f8b7194f000
[pid   415] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15
[pid   414] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   416] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   415] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   416] <... mprotect resumed>)     = 0
[pid   414] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   415] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   414] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   416] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   415] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   414] <... futex resumed>)        = 0
ci2-android-5-15/strace-static-x86_64: Process 420 attached
ci2-android-5-15/strace-static-x86_64: Process 419 attached
[pid   417] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   416] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   415] <... futex resumed>)        = 0
[pid   414] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   417] <... symlink resumed>)      = 0
[pid   417] write(1, "executing program\n", 18) = 18
[pid   417] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   417] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
executing program
[pid   417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   417] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   415] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   415] <... futex resumed>)        = 0
[pid   414] <... futex resumed>)        = 0
[pid   420] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   417] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   419] set_robust_list(0x7f8b7196f9a0, 24ci2-android-5-15/strace-static-x86_64: Process 422 attached
 <unfinished ...>
[pid   417] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   422] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   420] <... set_robust_list resumed>) = 0
[pid   419] <... set_robust_list resumed>) = 0
[pid   417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   416] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15
[pid   415] <... mmap resumed>)         = 0x7f8b7192e000
[pid   414] <... mmap resumed>)         = 0x7f8b7192e000
ci2-android-5-15/strace-static-x86_64: Process 423 attached
[pid   422] <... set_robust_list resumed>) = 0
[pid   420] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   419] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   416] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   415] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   414] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   417] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15
[pid   416] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   423] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   422] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   420] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   419] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   417] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   416] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   415] <... mprotect resumed>)     = 0
[pid   414] <... mprotect resumed>)     = 0
[pid   417] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   417] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   416] <... futex resumed>)        = 0
[pid   415] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   414] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   420] memfd_create("syzkaller", 0 <unfinished ...>
[pid   417] <... futex resumed>)        = 0
[pid   417] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   417] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   417] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   420] <... memfd_create resumed>) = 3
[pid   419] memfd_create("syzkaller", 0 <unfinished ...>
[pid   417] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   416] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   415] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   414] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   423] <... set_robust_list resumed>) = 0
[pid   422] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   419] <... memfd_create resumed>) = 3
[pid   416] <... futex resumed>)        = 0
[pid   415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   417] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16
[pid   417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   417] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   417] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   416] <... mmap resumed>)         = 0x7f8b7192e000
[pid   414] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13
[pid   420] <... mmap resumed>)         = 0x7f8b6952e000
[pid   419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   416] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   415] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16
[pid   414] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   416] <... mprotect resumed>)     = 0
[pid   415] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-15/strace-static-x86_64: Process 425 attached
 <unfinished ...>
[pid   416] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   415] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   414] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 426 attached
[pid   419] <... mmap resumed>)         = 0x7f8b6952e000
[pid   416] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   415] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   414] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   423] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   422] memfd_create("syzkaller", 0 <unfinished ...>
[pid   420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   423] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   422] <... memfd_create resumed>) = 3
[pid   420] <... write resumed>)        = 262144
[pid   419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   415] <... futex resumed>)        = 0
[pid   414] <... futex resumed>)        = 0
[pid   423] memfd_create("syzkaller", 0 <unfinished ...>
[pid   422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   420] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   419] <... write resumed>)        = 262144
[pid   415] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   414] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   423] <... memfd_create resumed>) = 3
[pid   422] <... mmap resumed>)         = 0x7f8b6952e000
[pid   420] <... munmap resumed>)       = 0
[pid   419] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   416] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16
[pid   426] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   425] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   420] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   419] <... munmap resumed>)       = 0
[pid   416] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   426] <... set_robust_list resumed>) = 0
[pid   425] <... set_robust_list resumed>) = 0
[pid   423] <... mmap resumed>)         = 0x7f8b6952e000
[pid   422] <... write resumed>)        = 262144
[pid   420] <... openat resumed>)       = 4
[pid   419] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid   416] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 427 attached
[pid   426] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   425] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   422] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   420] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   419] <... openat resumed>)       = 4
[pid   416] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-15/strace-static-x86_64: Process 424 attached
 <unfinished ...>
[pid   426] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   425] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   423] <... write resumed>)        = 262144
[pid   422] <... munmap resumed>)       = 0
[pid   420] <... ioctl resumed>)        = 0
[pid   419] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   416] <... futex resumed>)        = 0
[pid   427] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   426] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   425] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   424] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   423] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   422] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid   420] close(3 <unfinished ...>
[pid   419] <... ioctl resumed>)        = 0
[pid   416] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   412] <... mount resumed>)        = 0
[pid   427] <... set_robust_list resumed>) = 0
[pid   426] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   425] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   424] <... set_robust_list resumed>) = 0
[pid   423] <... munmap resumed>)       = 0
[pid   422] <... openat resumed>)       = 4
[pid   420] <... close resumed>)        = 0
[pid   419] close(3 <unfinished ...>
[pid   427] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   426] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   425] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   424] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   423] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   422] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   420] close(4 <unfinished ...>
[pid   419] <... close resumed>)        = 0
[pid   412] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   427] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   426] <... futex resumed>)        = 1
[pid   425] <... futex resumed>)        = 1
[pid   424] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   423] <... openat resumed>)       = 4
[pid   422] <... ioctl resumed>)        = 0
[pid   419] close(4 <unfinished ...>
[pid   415] <... futex resumed>)        = 0
[pid   414] <... futex resumed>)        = 0
[pid   427] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   426] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   425] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   424] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   423] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   422] close(3 <unfinished ...>
[pid   427] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   424] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   423] <... ioctl resumed>)        = 0
[pid   422] <... close resumed>)        = 0
[pid   412] <... openat resumed>)       = 3
[pid   427] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   424] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   423] close(3 <unfinished ...>
[pid   422] close(4 <unfinished ...>
[pid   427] <... futex resumed>)        = 1
[pid   424] <... futex resumed>)        = 1
[pid   423] <... close resumed>)        = 0
[pid   417] <... futex resumed>)        = 0
[pid   416] <... futex resumed>)        = 0
[pid   427] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   424] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   423] close(4 <unfinished ...>
[pid   412] chdir("./bus")              = 0
[pid   412] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4
[pid   412] ioctl(4, LOOP_CLR_FD)       = 0
[pid   412] close(4)                    = 0
[pid   412] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   412] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   411] close(3)                    = 0
[pid   411] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   411] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   411] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   411] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   411] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   411] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   411] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   411] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   411] exit_group(0 <unfinished ...>
[pid   413] <... futex resumed>)        = ?
[pid   412] <... futex resumed>)        = ?
[pid   411] <... exit_group resumed>)   = ?
[pid   413] +++ exited with 0 +++
[pid   412] +++ exited with 0 +++
[pid   411] +++ exited with 0 +++
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   423] <... close resumed>)        = 0
[pid   422] <... close resumed>)        = 0
[pid   420] <... close resumed>)        = 0
[pid   419] <... close resumed>)        = 0
[pid   423] mkdir("./bus", 0777 <unfinished ...>
[pid   422] mkdir("./bus", 0777 <unfinished ...>
[pid   420] mkdir("./bus", 0777 <unfinished ...>
[pid   419] mkdir("./bus", 0777 <unfinished ...>
[pid   423] <... mkdir resumed>)        = 0
[pid   422] <... mkdir resumed>)        = 0
[pid   420] <... mkdir resumed>)        = 0
[pid   419] <... mkdir resumed>)        = 0
[pid   306] <... restart_syscall resumed>) = 0
[pid   423] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   422] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   420] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   419] mount("/dev/loop4", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   306] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   306] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   306] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[   20.952724][  T412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   20.965148][  T412] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   306] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid   306] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   306] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   306] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   306] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   306] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   306] close(4)                    = 0
[pid   306] rmdir("./3/bus")            = 0
[pid   306] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   306] unlink("./3/binderfs")      = 0
[pid   306] getdents64(3, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   306] close(3)                    = 0
[pid   306] rmdir("./3")                = 0
[pid   306] mkdir("./4", 0777)          = 0
[pid   306] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3
[pid   306] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   306] close(3)                    = 0
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 14
[pid   306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 434 attached
[pid   434] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   434] chdir("./4")                = 0
[pid   434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   434] setpgid(0, 0)               = 0
[pid   434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   434] write(3, "1000", 4)         = 4
[pid   434] close(3)                    = 0
[pid   434] symlink("/dev/binderfs", "./binderfs") = 0
[pid   434] write(1, "executing program\n", 18) = 18
[pid   434] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   434] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   434] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[15]}, 88) = 15
[pid   434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   434] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   434] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   434] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[16]}, 88) = 16
[pid   434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   434] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
executing program
[   21.005555][  T419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.011282][  T423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.016925][  T419] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.028194][  T423] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   434] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 438 attached
ci2-android-5-15/strace-static-x86_64: Process 437 attached
 <unfinished ...>
[pid   423] <... mount resumed>)        = 0
[pid   419] <... mount resumed>)        = 0
[pid   419] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   419] chdir("./bus")              = 0
[pid   419] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4
[pid   419] ioctl(4, LOOP_CLR_FD)       = 0
[pid   419] close(4)                    = 0
[pid   419] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   419] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   423] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   414] close(3)                    = 0
[pid   414] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   414] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   414] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   414] close(7 <unfinished ...>
[pid   423] chdir("./bus" <unfinished ...>
[pid   414] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   423] <... chdir resumed>)        = 0
[pid   414] close(8 <unfinished ...>
[pid   423] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   414] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   423] <... openat resumed>)       = 4
[pid   414] close(9 <unfinished ...>
[pid   423] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   414] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   423] <... ioctl resumed>)        = 0
[pid   414] close(10 <unfinished ...>
[pid   423] close(4 <unfinished ...>
[pid   414] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   423] <... close resumed>)        = 0
[pid   414] close(11 <unfinished ...>
[pid   423] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   414] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   423] <... futex resumed>)        = 0
[pid   414] close(12 <unfinished ...>
[pid   423] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   414] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   414] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   420] <... mount resumed>)        = 0
[pid   417] close(3 <unfinished ...>
[pid   414] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   414] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   414] exit_group(0 <unfinished ...>
[pid   419] <... futex resumed>)        = ?
[pid   414] <... exit_group resumed>)   = ?
[pid   419] +++ exited with 0 +++
[pid   420] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   420] chdir("./bus")              = 0
[pid   420] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4
[pid   420] ioctl(4, LOOP_CLR_FD)       = 0
[pid   420] close(4)                    = 0
[pid   420] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   420] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   437] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   437] memfd_create("syzkaller", 0) = 3
[pid   437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   438] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   425] <... futex resumed>)        = ?
[pid   417] <... close resumed>)        = 0
[pid   437] <... write resumed>)        = 262144
[pid   437] munmap(0x7f8b6952e000, 138412032) = 0
[pid   437] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   437] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   437] close(3)                    = 0
[pid   437] close(4)                    = 0
[pid   437] mkdir("./bus", 0777)        = 0
[pid   437] mount("/dev/loop1", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   438] <... set_robust_list resumed>) = 0
[pid   425] +++ exited with 0 +++
[pid   417] close(4 <unfinished ...>
[pid   414] +++ exited with 0 +++
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   313] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   313] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   313] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   313] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   438] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   434] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(3 <unfinished ...>
[pid   438] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   422] <... mount resumed>)        = 0
[pid   415] <... close resumed>)        = 0
[pid   438] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   417] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   422] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   438] <... mount resumed>)        = 0
[pid   417] close(6 <unfinished ...>
[pid   415] close(4 <unfinished ...>
[pid   438] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   438] <... futex resumed>)        = 0
[pid   417] close(7 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(5 <unfinished ...>
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] close(8 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   438] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   415] close(6 <unfinished ...>
[pid   417] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   415] close(7 <unfinished ...>
[pid   417] close(11 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(8 <unfinished ...>
[pid   417] close(12 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(9 <unfinished ...>
[pid   417] close(13 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(10 <unfinished ...>
[pid   417] close(14 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(11 <unfinished ...>
[pid   417] close(15 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(12 <unfinished ...>
[pid   417] close(16 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(13 <unfinished ...>
[pid   417] close(17 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(14 <unfinished ...>
[pid   417] close(18 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(15 <unfinished ...>
[pid   417] close(19 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(16 <unfinished ...>
[pid   417] close(20 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(17 <unfinished ...>
[pid   417] close(21 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(18 <unfinished ...>
[pid   417] close(22 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(19 <unfinished ...>
[pid   417] close(23 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(20 <unfinished ...>
[pid   417] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] close(25 <unfinished ...>
[pid   415] close(21 <unfinished ...>
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   422] <... openat resumed>)       = 3
[pid   417] close(26 <unfinished ...>
[pid   415] close(22 <unfinished ...>
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   422] chdir("./bus" <unfinished ...>
[pid   417] close(27 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(23 <unfinished ...>
[pid   417] close(28 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(24 <unfinished ...>
[pid   422] <... chdir resumed>)        = 0
[pid   417] close(29 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   417] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(25 <unfinished ...>
[pid   422] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   417] exit_group(0 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   424] <... futex resumed>)        = ?
[pid   423] <... futex resumed>)        = ?
[pid   417] <... exit_group resumed>)   = ?
[pid   415] close(26 <unfinished ...>
[pid   424] +++ exited with 0 +++
[pid   423] +++ exited with 0 +++
[pid   422] <... openat resumed>)       = 4
[pid   422] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   422] <... ioctl resumed>)        = 0
[pid   422] close(4)                    = 0
[pid   422] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   422] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   417] +++ exited with 0 +++
[pid   415] close(27 <unfinished ...>
[pid   416] close(3 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   416] <... close resumed>)        = 0
[pid   415] close(28 <unfinished ...>
[pid   309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   416] close(4 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] close(29 <unfinished ...>
[pid   416] close(5 <unfinished ...>
[pid   415] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   415] exit_group(0 <unfinished ...>
[pid   426] <... futex resumed>)        = ?
[pid   420] <... futex resumed>)        = ?
[pid   416] close(6 <unfinished ...>
[pid   415] <... exit_group resumed>)   = ?
[pid   426] +++ exited with 0 +++
[pid   420] +++ exited with 0 +++
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   416] close(7 <unfinished ...>
[pid   415] +++ exited with 0 +++
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   416] close(8 <unfinished ...>
[pid   312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   416] close(9 <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   416] close(10 <unfinished ...>
[pid   312] <... openat resumed>)       = 3
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] fstat(3 <unfinished ...>
[pid   416] close(11 <unfinished ...>
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] getdents64(3 <unfinished ...>
[pid   309] <... restart_syscall resumed>) = 0
[pid   416] close(12 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   416] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(14 <unfinished ...>
[pid   309] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   416] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   416] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   416] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   309] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   416] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   309] <... openat resumed>)       = 3
[pid   416] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   309] fstat(3 <unfinished ...>
[pid   416] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   416] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   309] getdents64(3 <unfinished ...>
[pid   416] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   416] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   309] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   416] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   416] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   416] exit_group(0 <unfinished ...>
[pid   427] <... futex resumed>)        = ?
[pid   422] <... futex resumed>)        = ?
[pid   416] <... exit_group resumed>)   = ?
[pid   427] +++ exited with 0 +++
[pid   422] +++ exited with 0 +++
[pid   416] +++ exited with 0 +++
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[   21.061369][  T420] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.072631][  T420] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.073784][  T422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.094168][  T422] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   311] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   311] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   311] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   311] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   311] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   311] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] <... umount2 resumed>)      = 0
[pid   313] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   313] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   313] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   313] close(4)                    = 0
[pid   313] rmdir("./3/bus")            = 0
[pid   313] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] unlink("./3/binderfs")      = 0
[pid   313] getdents64(3, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   313] close(3)                    = 0
[pid   313] rmdir("./3")                = 0
[pid   313] mkdir("./4", 0777)          = 0
[pid   313] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3
[pid   313] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   313] close(3)                    = 0
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   312] <... umount2 resumed>)      = 0
[pid   309] <... umount2 resumed>)      = 0
[pid   313] <... clone resumed>, child_tidptr=0x55558f4f3690) = 14
[pid   312] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   312] newfstatat(AT_FDCWD, "./4/bus" <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./4/bus" <unfinished ...>
[pid   312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   309] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] <... openat resumed>)       = 4
[pid   309] <... openat resumed>)       = 4
[pid   312] fstat(4 <unfinished ...>
[pid   309] fstat(4 <unfinished ...>
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   309] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   312] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   312] getdents64(4 <unfinished ...>
[pid   309] getdents64(4 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   309] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   312] close(4 <unfinished ...>
[pid   309] close(4 <unfinished ...>
[pid   312] <... close resumed>)        = 0
[pid   309] <... close resumed>)        = 0
[pid   312] rmdir("./4/bus" <unfinished ...>
[pid   309] rmdir("./4/bus" <unfinished ...>
[pid   312] <... rmdir resumed>)        = 0
[pid   309] <... rmdir resumed>)        = 0
ci2-android-5-15/strace-static-x86_64: Process 441 attached
[pid   437] <... mount resumed>)        = 0
[pid   312] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   441] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   437] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   309] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   441] <... set_robust_list resumed>) = 0
[pid   437] <... openat resumed>)       = 3
[pid   312] newfstatat(AT_FDCWD, "./4/binderfs" <unfinished ...>
[pid   309] newfstatat(AT_FDCWD, "./4/binderfs" <unfinished ...>
[pid   441] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   437] chdir("./bus" <unfinished ...>
[pid   312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   441] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   437] <... chdir resumed>)        = 0
[pid   312] unlink("./4/binderfs" <unfinished ...>
[pid   309] unlink("./4/binderfs" <unfinished ...>
[pid   441] chdir("./4" <unfinished ...>
[pid   437] openat(AT_FDCWD, "/dev/loop1", O_RDONLY <unfinished ...>
[pid   312] <... unlink resumed>)       = 0
[pid   309] <... unlink resumed>)       = 0
[pid   441] <... chdir resumed>)        = 0
[pid   437] <... openat resumed>)       = 4
[pid   309] getdents64(3 <unfinished ...>
[pid   441] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   437] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   312] getdents64(3 <unfinished ...>
[pid   309] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   441] <... prctl resumed>)        = 0
[pid   437] <... ioctl resumed>)        = 0
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   309] close(3 <unfinished ...>
[pid   441] setpgid(0, 0 <unfinished ...>
[pid   437] close(4 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   309] <... close resumed>)        = 0
[pid   441] <... setpgid resumed>)      = 0
[pid   437] <... close resumed>)        = 0
[pid   309] rmdir("./4" <unfinished ...>
[pid   441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   437] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... close resumed>)        = 0
[pid   441] <... openat resumed>)       = 3
[pid   437] <... futex resumed>)        = 0
[pid   309] <... rmdir resumed>)        = 0
[pid   441] write(3, "1000", 4 <unfinished ...>
[pid   437] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   441] <... write resumed>)        = 4
[pid   312] rmdir("./4" <unfinished ...>
[pid   309] mkdir("./5", 0777 <unfinished ...>
[pid   441] close(3 <unfinished ...>
[pid   312] <... rmdir resumed>)        = 0
[pid   441] <... close resumed>)        = 0
[pid   309] <... mkdir resumed>)        = 0
[pid   441] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   312] mkdir("./5", 0777 <unfinished ...>
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   441] <... symlink resumed>)      = 0
[pid   434] close(3 <unfinished ...>
[pid   441] write(1, "executing program\n", 18 <unfinished ...>
[pid   434] <... close resumed>)        = 0
[pid   312] <... mkdir resumed>)        = 0
[pid   309] <... openat resumed>)       = 3
[pid   441] <... write resumed>)        = 18
[pid   434] close(4 <unfinished ...>
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   309] ioctl(3, LOOP_CLR_FD <unfinished ...>
executing program
[pid   441] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] <... futex resumed>)        = 0
[pid   434] close(5 <unfinished ...>
[pid   312] <... openat resumed>)       = 3
[pid   309] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   441] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   441] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   434] close(6 <unfinished ...>
[pid   441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   309] <... close resumed>)        = 0
[pid   441] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   434] close(7 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... close resumed>)        = 0
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   441] <... mmap resumed>)         = 0x7f8b7194f000
[pid   434] close(8 <unfinished ...>
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   441] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   441] <... mprotect resumed>)     = 0
[pid   434] close(9 <unfinished ...>
[pid   441] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   434] close(10 <unfinished ...>
[pid   441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   434] close(11 <unfinished ...>
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   441] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   434] close(12 <unfinished ...>
[pid   441] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   434] close(13 <unfinished ...>
[pid   441] <... futex resumed>)        = 0
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   434] close(14 <unfinished ...>
[pid   441] <... futex resumed>)        = 0
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   309] <... clone resumed>, child_tidptr=0x55558f4f3690) = 17
[pid   441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   434] close(15 <unfinished ...>
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 17
[pid   441] <... mmap resumed>)         = 0x7f8b7192e000
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   441] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   434] close(16 <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   441] <... mprotect resumed>)     = 0
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   441] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   434] close(17 <unfinished ...>
[pid   441] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   434] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   441] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16
[pid   434] close(19ci2-android-5-15/strace-static-x86_64: Process 444 attached
 <unfinished ...>
[pid   441] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   434] close(20 <unfinished ...>
[pid   441] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   441] <... futex resumed>)        = 0
[pid   434] close(21 <unfinished ...>
[pid   441] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   434] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   434] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   434] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   434] exit_group(0ci2-android-5-15/strace-static-x86_64: Process 443 attached
 <unfinished ...>
[pid   444] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   438] <... futex resumed>)        = ?
[pid   437] <... futex resumed>)        = ?
[pid   434] <... exit_group resumed>)   = ?
ci2-android-5-15/strace-static-x86_64: Process 445 attached
[pid   444] <... set_robust_list resumed>) = 0
[pid   443] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   438] +++ exited with 0 +++
[pid   437] +++ exited with 0 +++
[pid   434] +++ exited with 0 +++
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   445] set_robust_list(0x7f8b7194e9a0, 24ci2-android-5-15/strace-static-x86_64: Process 442 attached
 <unfinished ...>
[pid   442] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   442] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   444] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   442] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   442] chdir("./5" <unfinished ...>
[pid   445] <... set_robust_list resumed>) = 0
[pid   444] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   443] <... set_robust_list resumed>) = 0
[pid   442] <... chdir resumed>)        = 0
[pid   442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   442] setpgid(0, 0)               = 0
[pid   442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   444] chdir("./5" <unfinished ...>
[pid   443] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   445] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   442] <... openat resumed>)       = 3
[pid   442] write(3, "1000", 4 <unfinished ...>
[pid   444] <... chdir resumed>)        = 0
[pid   442] <... write resumed>)        = 4
[pid   442] close(3)                    = 0
[pid   442] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   445] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   444] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   443] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   442] <... symlink resumed>)      = 0
executing program
[pid   442] write(1, "executing program\n", 18) = 18
[pid   442] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   442] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300} <unfinished ...>
[pid   444] <... prctl resumed>)        = 0
[pid   442] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   443] memfd_create("syzkaller", 0 <unfinished ...>
[pid   444] setpgid(0, 0 <unfinished ...>
[pid   442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   442] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[18]}, 88) = 18
[pid   444] <... setpgid resumed>)      = 0
[pid   443] <... memfd_create resumed>) = 3
[pid   442] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   442] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   445] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   442] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   442] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   442] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[19]}, 88) = 19
[pid   442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   444] <... openat resumed>)       = 3
[pid   443] <... mmap resumed>)         = 0x7f8b6952e000
[pid   442] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   442] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   445] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   444] write(3, "1000", 4ci2-android-5-15/strace-static-x86_64: Process 446 attached
 <unfinished ...>
[pid   446] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   446] memfd_create("syzkaller", 0 <unfinished ...>
[pid   306] <... restart_syscall resumed>) = 0
[pid   306] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   306] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0
[pid   306] getdents64(3, 0x55558f4f4750 /* 6 entries */, 32768) = 168
[pid   306] umount2("./4/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   444] <... write resumed>)        = 4
[pid   445] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   306] newfstatat(AT_FDCWD, "./4/.incomplete", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   306] umount2("./4/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./4/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   306] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   306] getdents64(4 <unfinished ...>
[pid   444] close(3 <unfinished ...>
[pid   445] <... futex resumed>)        = 1
[pid   441] <... futex resumed>)        = 0
[pid   444] <... close resumed>)        = 0
[pid   444] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   445] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   306] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   306] getdents64(4 <unfinished ...>
[pid   444] <... symlink resumed>)      = 0
[pid   306] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   306] close(4)                    = 0
[pid   306] rmdir("./4/.incomplete")    = 0
[pid   306] umount2("./4/.index", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] newfstatat(AT_FDCWD, "./4/.index", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   306] umount2("./4/.index", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   306] openat(AT_FDCWD, "./4/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   306] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   306] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   443] <... write resumed>)        = 262144
[pid   444] write(1, "executing program\n", 18 <unfinished ...>
[pid   306] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   306] close(4)                    = 0
[pid   444] <... write resumed>)        = 18
[pid   443] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   306] rmdir("./4/.index" <unfinished ...>
[pid   444] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   306] <... rmdir resumed>)        = 0
executing program
[pid   306] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-15/strace-static-x86_64: Process 447 attached
 <unfinished ...>
[pid   444] <... futex resumed>)        = 0
[pid   443] <... munmap resumed>)       = 0
[pid   446] <... memfd_create resumed>) = 3
[pid   446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   444] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   443] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid   444] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   444] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   443] <... openat resumed>)       = 4
[pid   446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   444] <... mprotect resumed>)     = 0
[pid   443] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[   21.127317][  T437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.138572][  T437] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   447] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   443] <... ioctl resumed>)        = 0
[pid   311] <... umount2 resumed>)      = 0
[pid   444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} <unfinished ...>
[pid   311] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   443] close(3 <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   444] <... clone3 resumed> => {parent_tid=[18]}, 88) = 18
[pid   443] <... close resumed>)        = 0
[pid   311] newfstatat(AT_FDCWD, "./4/bus" <unfinished ...>
[pid   447] <... set_robust_list resumed>) = 0
[pid   444] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   446] <... write resumed>)        = 262144
[pid   446] munmap(0x7f8b6952e000, 138412032) = 0
[pid   446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   446] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   311] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   444] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   444] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   443] close(4 <unfinished ...>
[pid   311] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   444] <... futex resumed>)        = 0
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   447] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   444] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   306] <... umount2 resumed>)      = 0
[pid   444] <... futex resumed>)        = 0
[pid   311] <... openat resumed>)       = 4
[pid   306] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   311] fstat(4 <unfinished ...>
[pid   444] <... mmap resumed>)         = 0x7f8b7192e000
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
ci2-android-5-15/strace-static-x86_64: Process 448 attached
[pid   447] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   446] <... ioctl resumed>)        = 0
[pid   444] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   311] getdents64(4 <unfinished ...>
[pid   444] <... mprotect resumed>)     = 0
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   444] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] getdents64(4 <unfinished ...>
[pid   444] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} <unfinished ...>
[pid   311] close(4)                    = 0
[pid   444] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19
[pid   311] rmdir("./4/bus" <unfinished ...>
[pid   444] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] <... rmdir resumed>)        = 0
[pid   444] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   444] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   444] <... futex resumed>)        = 0
[pid   311] newfstatat(AT_FDCWD, "./4/binderfs" <unfinished ...>
[pid   444] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   311] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   447] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   311] unlink("./4/binderfs" <unfinished ...>
[pid   447] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   311] <... unlink resumed>)       = 0
[pid   447] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] getdents64(3 <unfinished ...>
[pid   447] <... futex resumed>)        = 1
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   447] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] close(3)                    = 0
[pid   311] rmdir("./4")                = 0
[pid   311] mkdir("./5", 0777)          = 0
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3
[pid   311] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   311] close(3 <unfinished ...>
[pid   442] <... futex resumed>)        = 0
[pid   311] <... close resumed>)        = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-15/strace-static-x86_64: Process 449 attached
, child_tidptr=0x55558f4f3690) = 17
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   448] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   448] memfd_create("syzkaller", 0) = 3
[pid   446] close(3)                    = 0
[pid   448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   446] close(4 <unfinished ...>
[pid   448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
ci2-android-5-15/strace-static-x86_64: Process 450 attached
[pid   449] set_robust_list(0x7f8b7194e9a0, 24 <unfinished ...>
[pid   448] munmap(0x7f8b6952e000, 138412032) = 0
[pid   448] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   448] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   448] close(3)                    = 0
[pid   448] close(4 <unfinished ...>
[pid   450] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   450] chdir("./5")                = 0
[pid   450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   450] setpgid(0, 0)               = 0
[pid   450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   450] write(3, "1000", 4)         = 4
[pid   450] close(3)                    = 0
[pid   450] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid   450] write(1, "executing program\n", 18) = 18
[pid   450] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   450] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   450] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[18]}, 88) = 18
[pid   450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   450] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   450] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   450] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[19]}, 88) = 19
[pid   450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   450] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
ci2-android-5-15/strace-static-x86_64: Process 451 attached
ci2-android-5-15/strace-static-x86_64: Process 452 attached
[pid   450] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   449] <... set_robust_list resumed>) = 0
[pid   449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   449] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   449] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   446] <... close resumed>)        = 0
[pid   444] <... futex resumed>)        = 0
[pid   443] <... close resumed>)        = 0
[pid   449] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   446] mkdir("./bus", 0777 <unfinished ...>
[pid   443] mkdir("./bus", 0777 <unfinished ...>
[pid   446] <... mkdir resumed>)        = 0
[pid   443] <... mkdir resumed>)        = 0
[pid   446] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   443] mount("/dev/loop4", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   451] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   451] memfd_create("syzkaller", 0) = 3
[pid   451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   451] munmap(0x7f8b6952e000, 138412032) = 0
[pid   451] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   451] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   451] close(3)                    = 0
[pid   451] close(4 <unfinished ...>
[pid   452] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   452] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   452] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   450] <... futex resumed>)        = 0
[   21.196201][  T306] ------------[ cut here ]------------
[   21.201706][  T306] WARNING: CPU: 1 PID: 306 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   21.210360][  T306] Modules linked in:
[   21.214687][  T306] CPU: 1 PID: 306 Comm: syz-executor197 Not tainted syzkaller #0
[   21.222734][  T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   21.232969][  T306] RIP: 0010:drop_nlink+0xc5/0x110
[pid   452] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   448] <... close resumed>)        = 0
[pid   448] mkdir("./bus", 0777)        = 0
[pid   448] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   446] <... mount resumed>)        = 0
[pid   446] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   446] chdir("./bus")              = 0
[pid   446] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid   446] ioctl(4, LOOP_CLR_FD)       = 0
[pid   446] close(4 <unfinished ...>
[pid   451] <... close resumed>)        = 0
[pid   451] mkdir("./bus", 0777)        = 0
[pid   451] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   446] <... close resumed>)        = 0
[pid   446] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   446] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   442] close(3)                    = 0
[pid   442] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   442] close(5)                    = -1 EBADF (Bad file descriptor)
[   21.235418][  T446] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.238170][  T306] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 33 05 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 68 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   21.249777][  T446] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.268924][  T306] RSP: 0018:ffffc90000987bd0 EFLAGS: 00010293
[   21.268945][  T306] RAX: ffffffff81b76e65 RBX: ffff88810fc39b50 RCX: ffff888104bb9400
[pid   442] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   442] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   442] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   442] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   442] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   442] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   442] exit_group(0 <unfinished ...>
[pid   447] <... futex resumed>)        = ?
[pid   442] <... exit_group resumed>)   = ?
[pid   447] +++ exited with 0 +++
[pid   446] <... futex resumed>)        = ?
[pid   446] +++ exited with 0 +++
[pid   442] +++ exited with 0 +++
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[pid   309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   309] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   309] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   309] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   309] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid   309] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   309] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   309] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[   21.293247][  T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   21.301369][  T306] RBP: ffffc90000987bf8 R08: 0000000000000003 R09: 0000000000000004
[   21.309389][  T306] R10: dffffc0000000000 R11: fffff52000130f68 R12: dffffc0000000000
[   21.317657][  T306] R13: 1ffff11021f87373 R14: ffff88810fc39b98 R15: 0000000000000000
[   21.325815][  T306] FS:  000055558f4f33c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   21.338751][  T306] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   21.341322][  T448] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.345717][  T306] CR2: 000055558f4f3690 CR3: 000000011f8f5000 CR4: 00000000003506a0
[   21.357052][  T443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.364616][  T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   21.375916][  T451] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   309] getdents64(4, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   309] getdents64(4, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   309] close(4)                    = 0
[pid   309] rmdir("./5/bus")            = 0
[pid   309] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   309] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   309] unlink("./5/binderfs")      = 0
[pid   309] getdents64(3, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   309] close(3)                    = 0
[pid   309] rmdir("./5")                = 0
[pid   309] mkdir("./6", 0777)          = 0
[pid   309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY <unfinished ...>
[pid   443] <... mount resumed>)        = 0
[pid   443] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   443] chdir("./bus")              = 0
[pid   443] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4
[pid   443] ioctl(4, LOOP_CLR_FD)       = 0
[pid   443] close(4)                    = 0
[pid   443] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   443] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   451] <... mount resumed>)        = 0
[pid   451] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   441] close(3)                    = 0
[   21.383611][  T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   21.402994][  T306] Call Trace:
[   21.406355][  T306]  <TASK>
[   21.409294][  T306]  shmem_rmdir+0x5b/0x90
[   21.410205][  T448] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.413573][  T306]  vfs_rmdir+0x1ae/0x450
[   21.413595][  T306]  incfs_kill_sb+0xfe/0x210
[   21.413612][  T306]  deactivate_locked_super+0xa0/0x100
[   21.413630][  T306]  deactivate_super+0xaf/0xe0
[   21.413644][  T306]  cleanup_mnt+0x44f/0x500
[pid   441] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   441] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   441] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   441] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   441] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   441] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   441] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   441] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   441] exit_group(0 <unfinished ...>
[pid   445] <... futex resumed>)        = ?
[pid   441] <... exit_group resumed>)   = ?
[pid   445] +++ exited with 0 +++
[pid   443] <... futex resumed>)        = ?
[pid   443] +++ exited with 0 +++
[pid   441] +++ exited with 0 +++
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   451] <... openat resumed>)       = 3
[pid   451] chdir("./bus")              = 0
[pid   451] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4
[pid   451] ioctl(4, LOOP_CLR_FD)       = 0
[pid   451] close(4)                    = 0
[pid   451] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   451] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   448] <... mount resumed>)        = 0
[pid   448] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   450] close(3)                    = 0
[pid   450] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   450] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   450] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   450] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   450] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   450] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   450] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   450] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   450] exit_group(0 <unfinished ...>
[pid   452] <... futex resumed>)        = ?
[pid   450] <... exit_group resumed>)   = ?
[pid   452] +++ exited with 0 +++
[pid   451] <... futex resumed>)        = ?
[pid   313] <... restart_syscall resumed>) = 0
[pid   313] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   313] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   313] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   313] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   451] +++ exited with 0 +++
[pid   450] +++ exited with 0 +++
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   311] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   448] <... openat resumed>)       = 3
[pid   448] chdir("./bus")              = 0
[pid   448] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4
[pid   448] ioctl(4, LOOP_CLR_FD)       = 0
[pid   448] close(4)                    = 0
[pid   448] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   448] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   444] close(3)                    = 0
[pid   444] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   444] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   444] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   444] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   444] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   444] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   444] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   444] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   444] exit_group(0 <unfinished ...>
[pid   449] <... futex resumed>)        = ?
[pid   444] <... exit_group resumed>)   = ?
[pid   449] +++ exited with 0 +++
[pid   448] <... futex resumed>)        = ?
[pid   448] +++ exited with 0 +++
[pid   444] +++ exited with 0 +++
[pid   312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
[pid   312] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   311] <... restart_syscall resumed>) = 0
[pid   312] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   311] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] <... openat resumed>)       = 3
[pid   311] <... openat resumed>)       = 3
[pid   312] fstat(3 <unfinished ...>
[pid   311] fstat(3 <unfinished ...>
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   312] getdents64(3 <unfinished ...>
[pid   311] getdents64(3 <unfinished ...>
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   312] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[   21.425151][  T443] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.427956][  T306]  __cleanup_mnt+0x19/0x20
[   21.427978][  T306]  task_work_run+0x127/0x190
[   21.432685][  T451] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.437838][  T306]  ptrace_notify+0x230/0x270
[   21.481118][  T306]  ? do_notify_parent+0x830/0x830
[   21.486290][  T306]  ? user_path_at_empty+0x162/0x1c0
[   21.491590][  T306]  ? __x64_sys_umount+0x12d/0x170
[pid   311] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   309] <... openat resumed>)       = 3
[pid   309] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   309] close(3)                    = 0
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f4f3690) = 20
[pid   309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 461 attached
[pid   461] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   461] chdir("./6")                = 0
[pid   461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   461] setpgid(0, 0)               = 0
[pid   461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   461] write(3, "1000", 4)         = 4
[pid   461] close(3)                    = 0
[pid   461] symlink("/dev/binderfs", "./binderfs") = 0
[pid   461] write(1, "executing program\n", 18) = 18
executing program
[pid   461] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   461] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   461] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   461] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[21]}, 88) = 21
[pid   461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   461] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   461] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   461] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[22]}, 88) = 22
[pid   461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   461] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   461] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 462 attached
 <unfinished ...>
[pid   462] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   462] memfd_create("syzkaller", 0) = 3
[pid   462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   462] munmap(0x7f8b6952e000, 138412032) = 0
[pid   462] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   462] ioctl(4, LOOP_SET_FD, 3ci2-android-5-15/strace-static-x86_64: Process 463 attached
)    = 0
[pid   462] close(3)                    = 0
[pid   462] close(4 <unfinished ...>
[pid   463] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   463] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] <... umount2 resumed>)      = 0
[pid   312] <... umount2 resumed>)      = 0
[pid   311] <... umount2 resumed>)      = 0
[pid   463] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   463] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   313] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   463] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   463] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   463] <... futex resumed>)        = 1
[pid   463] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   461] <... futex resumed>)        = 0
[pid   313] newfstatat(AT_FDCWD, "./4/bus" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./5/bus" <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] newfstatat(AT_FDCWD, "./5/bus" <unfinished ...>
[pid   313] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   312] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] <... openat resumed>)       = 4
[pid   312] <... openat resumed>)       = 4
[pid   311] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   313] fstat(4 <unfinished ...>
[pid   312] fstat(4 <unfinished ...>
[pid   311] <... openat resumed>)       = 4
[pid   313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   311] fstat(4 <unfinished ...>
[pid   313] getdents64(4 <unfinished ...>
[pid   312] getdents64(4 <unfinished ...>
[pid   311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   311] getdents64(4 <unfinished ...>
[pid   313] getdents64(4 <unfinished ...>
[pid   312] getdents64(4 <unfinished ...>
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 2 entries */, 32768) = 48
[pid   313] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   312] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[   21.497035][  T306]  ? path_umount+0xfa0/0xfa0
[   21.501739][  T306]  syscall_exit_work+0x87/0x160
[   21.506775][  T306]  syscall_exit_to_user_mode_prepare+0x1c/0x20
[   21.512945][  T306]  syscall_exit_to_user_mode+0xd/0x30
[   21.518555][  T306]  do_syscall_64+0x58/0xa0
[   21.523075][  T306]  ? clear_bhb_loop+0x50/0xa0
[   21.528186][  T306]  ? clear_bhb_loop+0x50/0xa0
[   21.532955][  T306]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   21.539124][  T306] RIP: 0033:0x7f8b7199b437
[pid   311] getdents64(4 <unfinished ...>
[pid   313] close(4 <unfinished ...>
[pid   312] close(4 <unfinished ...>
[pid   311] <... getdents64 resumed>, 0x55558f4fc790 /* 0 entries */, 32768) = 0
[pid   313] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] close(4 <unfinished ...>
[pid   313] rmdir("./4/bus" <unfinished ...>
[pid   312] rmdir("./5/bus" <unfinished ...>
[pid   311] <... close resumed>)        = 0
[pid   313] <... rmdir resumed>)        = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   311] rmdir("./5/bus" <unfinished ...>
[pid   313] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   312] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   311] <... rmdir resumed>)        = 0
[pid   313] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   312] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   311] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   313] newfstatat(AT_FDCWD, "./4/binderfs" <unfinished ...>
[pid   312] newfstatat(AT_FDCWD, "./5/binderfs" <unfinished ...>
[pid   311] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   311] newfstatat(AT_FDCWD, "./5/binderfs" <unfinished ...>
[pid   313] unlink("./4/binderfs" <unfinished ...>
[pid   312] unlink("./5/binderfs" <unfinished ...>
[pid   311] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   313] <... unlink resumed>)       = 0
[pid   312] <... unlink resumed>)       = 0
[pid   311] unlink("./5/binderfs" <unfinished ...>
[pid   313] getdents64(3 <unfinished ...>
[pid   312] getdents64(3 <unfinished ...>
[pid   311] <... unlink resumed>)       = 0
[pid   313] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   312] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   311] getdents64(3 <unfinished ...>
[pid   313] close(3 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   311] <... getdents64 resumed>, 0x55558f4f4750 /* 0 entries */, 32768) = 0
[pid   313] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] close(3 <unfinished ...>
[pid   313] rmdir("./4" <unfinished ...>
[pid   312] rmdir("./5" <unfinished ...>
[pid   311] <... close resumed>)        = 0
[pid   313] <... rmdir resumed>)        = 0
[pid   312] <... rmdir resumed>)        = 0
[pid   311] rmdir("./5" <unfinished ...>
[pid   313] mkdir("./5", 0777 <unfinished ...>
[pid   312] mkdir("./6", 0777 <unfinished ...>
[pid   311] <... rmdir resumed>)        = 0
[pid   313] <... mkdir resumed>)        = 0
[pid   312] <... mkdir resumed>)        = 0
[pid   311] mkdir("./6", 0777 <unfinished ...>
[pid   313] openat(AT_FDCWD, "/dev/loop4", O_RDONLY <unfinished ...>
[pid   312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   311] <... mkdir resumed>)        = 0
[pid   313] <... openat resumed>)       = 3
[pid   312] <... openat resumed>)       = 3
[pid   311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   313] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   312] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   311] <... openat resumed>)       = 3
[pid   313] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   312] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   311] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   313] close(3 <unfinished ...>
[pid   312] close(3 <unfinished ...>
[pid   311] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   313] <... close resumed>)        = 0
[pid   312] <... close resumed>)        = 0
[pid   311] close(3 <unfinished ...>
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] <... close resumed>)        = 0
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   312] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x55558f4f3690) = 17
[pid   312] <... clone resumed>, child_tidptr=0x55558f4f3690) = 20
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] <... clone resumed>, child_tidptr=0x55558f4f3690) = 20
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-5-15/strace-static-x86_64: Process 466 attached
[pid   466] set_robust_list(0x55558f4f36a0, 24) = 0
[pid   466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   466] chdir("./6")                = 0
[pid   466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   466] setpgid(0, 0)               = 0
[pid   466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   466] write(3, "1000", 4)         = 4
[pid   466] close(3)                    = 0
[pid   466] symlink("/dev/binderfs", "./binderfs") = 0
[pid   466] write(1, "executing program\n", 18) = 18
executing program
[pid   466] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   466] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
ci2-android-5-15/strace-static-x86_64: Process 464 attached
ci2-android-5-15/strace-static-x86_64: Process 465 attached
[pid   466] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[21]}, 88) = 21
[pid   466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   466] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   466] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   466] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[22]}, 88) = 22
[pid   466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   466] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   466] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 467 attached
 <unfinished ...>
[pid   467] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   467] memfd_create("syzkaller", 0) = 3
[pid   467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   464] set_robust_list(0x55558f4f36a0, 24 <unfinished ...>
[pid   465] set_robust_list(0x55558f4f36a0, 24ci2-android-5-15/strace-static-x86_64: Process 468 attached
) = 0
[pid   464] <... set_robust_list resumed>) = 0
[pid   467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   467] munmap(0x7f8b6952e000, 138412032) = 0
[pid   467] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   467] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   467] close(3)                    = 0
[pid   467] close(4 <unfinished ...>
[pid   465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   465] chdir("./6")                = 0
[pid   465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   465] setpgid(0, 0)               = 0
[pid   465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   465] write(3, "1000", 4)         = 4
[pid   465] close(3)                    = 0
[pid   465] symlink("/dev/binderfs", "./binderfs") = 0
[pid   465] write(1, "executing program\n", 18) = 18
[pid   465] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   465] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   465] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[21]}, 88) = 21
[pid   465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   465] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   465] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   465] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[22]}, 88) = 22
[pid   465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   465] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
executing program
[pid   465] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   468] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   468] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   468] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   466] <... futex resumed>)        = 0
[pid   468] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[   21.548097][  T306] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 98 66 0a 00 00 00 00 00 eb 96 e8 c1 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8
[   21.576220][  T306] RSP: 002b:00007fffcb7a8b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   21.584974][  T306] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8b7199b437
[pid   464] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-15/strace-static-x86_64: Process 470 attached
ci2-android-5-15/strace-static-x86_64: Process 469 attached
, NULL, 8) = 0
[pid   464] chdir("./5")                = 0
[pid   464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   464] setpgid(0, 0)               = 0
[pid   464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   464] write(3, "1000", 4)         = 4
[pid   464] close(3)                    = 0
[pid   464] symlink("/dev/binderfs", "./binderfs") = 0
[pid   464] write(1, "executing program\n", 18) = 18
[pid   464] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   464] rt_sigaction(SIGRT_1, {sa_handler=0x7f8b719ae310, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8b719a0300}, NULL, 8) = 0
[pid   464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7194f000
[pid   464] mprotect(0x7f8b71950000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7196f990, parent_tid=0x7f8b7196f990, exit_signal=0, stack=0x7f8b7194f000, stack_size=0x20300, tls=0x7f8b7196f6c0} => {parent_tid=[18]}, 88) = 18
[pid   464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   464] futex(0x7f8b71a42e28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   464] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8b7192e000
[pid   464] mprotect(0x7f8b7192f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8b7194e990, parent_tid=0x7f8b7194e990, exit_signal=0, stack=0x7f8b7192e000, stack_size=0x20300, tls=0x7f8b7194e6c0} => {parent_tid=[19]}, 88) = 19
[pid   464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   464] futex(0x7f8b71a42e38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   464] futex(0x7f8b71a42e3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   469] set_robust_list(0x7f8b7196f9a0, 24 <unfinished ...>
[pid   470] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   469] <... set_robust_list resumed>) = 0
[pid   470] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   469] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   470] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   469] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   470] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL <unfinished ...>
[pid   469] memfd_create("syzkaller", 0) = 3
[pid   470] <... mount resumed>)        = -1 ENOENT (No such file or directory)
[pid   469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
[pid   469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   470] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   470] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   469] <... write resumed>)        = 262144
[pid   469] munmap(0x7f8b6952e000, 138412032) = 0
[pid   469] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   469] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   469] close(3)                    = 0
[pid   469] close(4ci2-android-5-15/strace-static-x86_64: Process 472 attached
 <unfinished ...>
[pid   472] set_robust_list(0x7f8b7194e9a0, 24) = 0
[pid   472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   472] mount("", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_SILENT, NULL) = -1 ENOENT (No such file or directory)
[pid   472] futex(0x7f8b71a42e3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   464] <... futex resumed>)        = 0
[pid   472] <... futex resumed>)        = 1
[pid   472] futex(0x7f8b71a42e38, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-15/strace-static-x86_64: Process 471 attached
 <unfinished ...>
[pid   471] set_robust_list(0x7f8b7196f9a0, 24) = 0
[pid   471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   471] memfd_create("syzkaller", 0) = 3
[pid   471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b6952e000
executing program
[pid   471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   465] <... futex resumed>)        = 0
[pid   462] <... close resumed>)        = 0
[pid   462] mkdir("./bus", 0777 <unfinished ...>
[pid   471] munmap(0x7f8b6952e000, 138412032 <unfinished ...>
[pid   462] <... mkdir resumed>)        = 0
[pid   462] mount("/dev/loop0", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   471] <... munmap resumed>)       = 0
[pid   471] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   471] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   471] close(3)                    = 0
[   21.593266][  T306] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcb7a8c40
[   21.604222][  T306] RBP: 00007fffcb7a8c40 R08: 00007fffcb7a9c40 R09: 00000000ffffffff
[   21.612255][  T306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcb7a9cf0
[   21.615627][  T462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.620898][  T306] R13: 000055558f4f4720 R14: 431bde82d7b634db R15: 00007fffcb7a9c94
[pid   471] close(4 <unfinished ...>
[pid   469] <... close resumed>)        = 0
[pid   462] <... mount resumed>)        = 0
[pid   462] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   462] chdir("./bus")              = 0
[pid   462] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid   462] ioctl(4, LOOP_CLR_FD)       = 0
[pid   462] close(4)                    = 0
[pid   462] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   462] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   469] mkdir("./bus", 0777 <unfinished ...>
[pid   467] <... close resumed>)        = 0
[pid   469] <... mkdir resumed>)        = 0
[pid   469] mount("/dev/loop3", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   461] close(3)                    = 0
[pid   461] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   461] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   461] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   461] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   461] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   461] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   461] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   461] close(28 <unfinished ...>
[pid   471] <... close resumed>)        = 0
[pid   467] mkdir("./bus", 0777 <unfinished ...>
[pid   461] <... close resumed>)        = -1 EBADF (Bad file descriptor)
[pid   461] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   461] exit_group(0)               = ?
[pid   462] <... futex resumed>)        = ?
[pid   462] +++ exited with 0 +++
[pid   471] mkdir("./bus", 0777)        = 0
[pid   471] mount("/dev/loop4", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   467] <... mkdir resumed>)        = 0
[pid   467] mount("/dev/loop2", "./bus", "ext4", MS_NOEXEC, ",errors=continue" <unfinished ...>
[pid   463] <... futex resumed>)        = ?
[pid   463] +++ exited with 0 +++
[pid   461] +++ exited with 0 +++
[pid   309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[pid   309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   309] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   309] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   309] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   309] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[pid   309] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   469] <... mount resumed>)        = 0
[pid   469] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   469] chdir("./bus")              = 0
[pid   469] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4
[pid   469] ioctl(4, LOOP_CLR_FD)       = 0
[pid   469] close(4)                    = 0
[pid   469] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   21.631839][  T462] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.639638][  T306]  </TASK>
[   21.652828][  T306] ---[ end trace f99ce308af13c8b2 ]---
[   21.658657][  T306] ==================================================================
[   21.666085][  T469] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.666737][  T306] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[   21.680307][  T469] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[pid   469] futex(0x7f8b71a42e28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   471] <... mount resumed>)        = 0
[pid   471] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid   471] chdir("./bus")              = 0
[pid   471] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4
[pid   471] ioctl(4, LOOP_CLR_FD)       = 0
[pid   471] close(4)                    = 0
[pid   471] futex(0x7f8b71a42e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   464] close(3)                    = 0
[pid   464] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   464] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   464] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   464] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   464] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   464] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   464] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   464] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   464] exit_group(0)               = ?
[pid   471] +++ exited with 0 +++
[pid   472] <... futex resumed>)        = ?
[pid   472] +++ exited with 0 +++
[pid   464] +++ exited with 0 +++
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
[pid   313] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   313] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   313] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   313] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0
[pid   313] getdents64(3, 0x55558f4f4750 /* 4 entries */, 32768) = 104
[   21.684294][  T306] Write of size 4 at addr 0000000000000170 by task syz-executor197/306
[   21.684310][  T306] 
[   21.684315][  T306] CPU: 1 PID: 306 Comm: syz-executor197 Tainted: G        W         syzkaller #0
[   21.684330][  T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   21.684338][  T306] Call Trace:
[   21.684343][  T306]  <TASK>
[   21.684348][  T306]  __dump_stack+0x21/0x30
[   21.684368][  T306]  dump_stack_lvl+0x110/0x170
[   21.684382][  T306]  ? show_regs_print_info+0x20/0x20
[   21.684397][  T306]  ? _raw_spin_lock+0x94/0xf0
[   21.699366][  T471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   21.702654][  T306]  ? _raw_spin_trylock_bh+0x150/0x150
[   21.705440][  T471] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   21.714240][  T306]  ? ihold+0x20/0x60
[   21.714260][  T306]  kasan_report+0xcc/0x150
[   21.714276][  T306]  ? ihold+0x20/0x60
[   21.714289][  T306]  kasan_check_range+0x249/0x2a0
[   21.793455][  T306]  __kasan_check_write+0x14/0x20
[pid   313] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   466] close(3)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(4)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(5)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(6)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(7)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(8)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(9)                    = -1 EBADF (Bad file descriptor)
[pid   466] close(10)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(11)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(12)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(13)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(14)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(15)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(16)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(17)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(18)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(19)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(20)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(21)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(22)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(23)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(24)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(25)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(26)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(27)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(28)                   = -1 EBADF (Bad file descriptor)
[pid   466] close(29)                   = -1 EBADF (Bad file descriptor)
[pid   466] exit_group(0 <unfinished ...>
[pid   468] <... futex resumed>)        = ?
[pid   466] <... exit_group resumed>)   = ?
[pid   468] +++ exited with 0 +++
[   21.798391][  T306]  ihold+0x20/0x60
[   21.802200][  T306]  vfs_rmdir+0x23d/0x450
[   21.806430][  T306]  incfs_kill_sb+0xfe/0x210
[   21.810934][  T306]  deactivate_locked_super+0xa0/0x100
[   21.816321][  T306]  deactivate_super+0xaf/0xe0
[   21.821009][  T306]  cleanup_mnt+0x44f/0x500
[   21.825452][  T306]  __cleanup_mnt+0x19/0x20
[   21.829858][  T306]  task_work_run+0x127/0x190
[   21.834431][  T306]  ptrace_notify+0x230/0x270
[   21.839002][  T306]  ? do_notify_parent+0x830/0x830
[   21.844006][  T306]  ? user_path_at_empty+0x162/0x1c0
[   21.849189][  T306]  ? __x64_sys_umount+0x12d/0x170
[   21.854195][  T306]  ? path_umount+0xfa0/0xfa0
[   21.858862][  T306]  syscall_exit_work+0x87/0x160
[   21.863713][  T306]  syscall_exit_to_user_mode_prepare+0x1c/0x20
[   21.869878][  T306]  syscall_exit_to_user_mode+0xd/0x30
[   21.875269][  T306]  do_syscall_64+0x58/0xa0
[   21.879769][  T306]  ? clear_bhb_loop+0x50/0xa0
[   21.884436][  T306]  ? clear_bhb_loop+0x50/0xa0
[   21.889101][  T306]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   21.894995][  T306] RIP: 0033:0x7f8b7199b437
[   21.899395][  T306] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 98 66 0a 00 00 00 00 00 eb 96 e8 c1 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8
[   21.919083][  T306] RSP: 002b:00007fffcb7a8b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   21.927588][  T306] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8b7199b437
[   21.935560][  T306] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcb7a8c40
[   21.943533][  T306] RBP: 00007fffcb7a8c40 R08: 00007fffcb7a9c40 R09: 00000000ffffffff
[   21.951492][  T306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcb7a9cf0
[   21.959541][  T306] R13: 000055558f4f4720 R14: 431bde82d7b634db R15: 00007fffcb7a9c94
[   21.967522][  T306]  </TASK>
[   21.970529][  T306] ==================================================================
[   21.978568][  T306] Disabling lock debugging due to kernel taint
[   21.984955][  T306] BUG: kernel NULL pointer dereference, address: 0000000000000170
[   21.992766][  T306] #PF: supervisor write access in kernel mode
[   21.998813][  T306] #PF: error_code(0x0002) - not-present page
[   22.004977][  T306] PGD 0 P4D 0 
[   22.008337][  T306] Oops: 0002 [#1] PREEMPT SMP KASAN
[   22.013515][  T306] CPU: 1 PID: 306 Comm: syz-executor197 Tainted: G    B   W         syzkaller #0
[   22.022602][  T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   22.032639][  T306] RIP: 0010:ihold+0x26/0x60
[   22.037132][  T306] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 b1 60 b2 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 fd f1 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 31
[   22.056893][  T306] RSP: 0018:ffffc90000987c10 EFLAGS: 00010246
[   22.062949][  T306] RAX: ffff888104bb9400 RBX: 0000000000000000 RCX: ffff888104bb9400
[   22.070914][  T306] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff
[   22.078888][  T306] RBP: ffffc90000987c20 R08: 0000000000000003 R09: 0000000000000004
[   22.087455][  T306] R10: dffffc0000000000 R11: fffffbfff0e1904c R12: 1ffff11021a0f7e2
[   22.095415][  T306] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[   22.103375][  T306] FS:  000055558f4f33c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   22.112287][  T306] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   22.118856][  T306] CR2: 0000000000000170 CR3: 000000011f8f5000 CR4: 00000000003506a0
[   22.126818][  T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   22.134882][  T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   22.142840][  T306] Call Trace:
[   22.146111][  T306]  <TASK>
[   22.149036][  T306]  vfs_rmdir+0x23d/0x450
[   22.153271][  T306]  incfs_kill_sb+0xfe/0x210
[   22.157768][  T306]  deactivate_locked_super+0xa0/0x100
[   22.163129][  T306]  deactivate_super+0xaf/0xe0
[   22.167786][  T306]  cleanup_mnt+0x44f/0x500
[   22.172192][  T306]  __cleanup_mnt+0x19/0x20
[   22.176588][  T306]  task_work_run+0x127/0x190
[   22.181162][  T306]  ptrace_notify+0x230/0x270
[   22.185740][  T306]  ? do_notify_parent+0x830/0x830
[   22.190846][  T306]  ? user_path_at_empty+0x162/0x1c0
[   22.196026][  T306]  ? __x64_sys_umount+0x12d/0x170
[   22.201029][  T306]  ? path_umount+0xfa0/0xfa0
[   22.205688][  T306]  syscall_exit_work+0x87/0x160
[   22.210557][  T306]  syscall_exit_to_user_mode_prepare+0x1c/0x20
[   22.216696][  T306]  syscall_exit_to_user_mode+0xd/0x30
[   22.222104][  T306]  do_syscall_64+0x58/0xa0
[   22.226501][  T306]  ? clear_bhb_loop+0x50/0xa0
[   22.231159][  T306]  ? clear_bhb_loop+0x50/0xa0
[   22.235817][  T306]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   22.241694][  T306] RIP: 0033:0x7f8b7199b437
[   22.246097][  T306] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 98 66 0a 00 00 00 00 00 eb 96 e8 c1 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8
[   22.265955][  T306] RSP: 002b:00007fffcb7a8b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   22.274351][  T306] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8b7199b437
[   22.282316][  T306] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcb7a8c40
[   22.290283][  T306] RBP: 00007fffcb7a8c40 R08: 00007fffcb7a9c40 R09: 00000000ffffffff
[   22.298352][  T306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcb7a9cf0
[   22.306304][  T306] R13: 000055558f4f4720 R14: 431bde82d7b634db R15: 00007fffcb7a9c94
[   22.314272][  T306]  </TASK>
[   22.317300][  T306] Modules linked in:
[   22.321188][  T306] CR2: 0000000000000170
[   22.325331][  T306] ---[ end trace f99ce308af13c8b3 ]---
[   22.330775][  T306] RIP: 0010:ihold+0x26/0x60
[   22.335268][  T306] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 b1 60 b2 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 fd f1 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 31
[   22.354861][  T306] RSP: 0018:ffffc90000987c10 EFLAGS: 00010246
[   22.360911][  T306] RAX: ffff888104bb9400 RBX: 0000000000000000 RCX: ffff888104bb9400
[   22.368863][  T306] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff
[   22.376817][  T306] RBP: ffffc90000987c20 R08: 0000000000000003 R09: 0000000000000004
[   22.384769][  T306] R10: dffffc0000000000 R11: fffffbfff0e1904c R12: 1ffff11021a0f7e2
[   22.392808][  T306] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[   22.400761][  T306] FS:  000055558f4f33c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   22.409675][  T306] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   22.416241][  T306] CR2: 0000000000000170 CR3: 000000011f8f5000 CR4: 00000000003506a0
[   22.424230][  T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   22.432188][  T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   22.440140][  T306] Kernel panic - not syncing: Fatal exception
[   22.446355][  T306] Kernel Offset: disabled
[   22.450657][  T306] Rebooting in 86400 seconds..