ci2-android-5-15/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-15/syz-executor950263088 <...> Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. execve("ci2-android-5-15/syz-executor950263088", ["ci2-android-5-15/syz-executor950263088"], 0x7ffe1f1b5050 /* 10 vars */) = 0 brk(NULL) = 0x555568c7a000 brk(0x555568c7ad40) = 0x555568c7ad40 arch_prctl(ARCH_SET_FS, 0x555568c7a3c0) = 0 set_tid_address(0x555568c7a690) = 302 set_robust_list(0x555568c7a6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-15/syz-executor950263088", 4096) = 44 getrandom("\xd0\x29\x78\x7a\x08\xa9\x6e\xa5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555568c7ad40 brk(0x555568c9bd40) = 0x555568c9bd40 brk(0x555568c9c000) = 0x555568c9c000 mprotect(0x7fb883f0f000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555568c7a690) = 303 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXECci2-android-5-15/strace-static-x86_64: Process 303 attached ) = 3 [pid 303] set_robust_list(0x555568c7a6a0, 24 [pid 302] write(3, "1", 1 [pid 303] <... set_robust_list resumed>) = 0 [pid 302] <... write resumed>) = 1 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "100", 3) = 3 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "7 4 1 3", 7) = 7 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "Y", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "Y", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "Y", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "Y", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "Y", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "Y", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0", 1) = 1 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "303", 3) = 3 [pid 302] close(3) = 0 [pid 302] kill(303, SIGKILL) = 0 [pid 303] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=303, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [ 47.233818][ T30] audit: type=1400 audit(1787870188.340:64): avc: denied { execmem } for pid=302 comm="syz-executor950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 chmod("/dev/raw-gadget", 0666) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fb883e807e0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fb883e807e0}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e3a000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7fb883e3a000, stack_size=0x9000}, 88ci2-android-5-15/strace-static-x86_64: Process 304 attached [pid 304] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 304] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fb883e807e0}, NULL, 8) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7ffdf1261218 /* 10 vars */ [pid 302] <... clone3 resumed>) = 304 [pid 302] munmap(0x7fb883e3a000, 36864 [pid 304] <... execve resumed>) = 0 [pid 302] <... munmap resumed>) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 304] brk(NULL) = 0x562c72665000 [pid 304] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa29e57d000 [pid 304] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd3a2b4030, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd3a2b4030, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 304] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e4bb000 [pid 304] mmap(0x7fa29e4cb000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7fa29e4cb000 [pid 304] mmap(0x7fa29e551000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7fa29e551000 [pid 304] mmap(0x7fa29e579000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7fa29e579000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 304] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 304] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 304] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e2db000 [pid 304] mmap(0x7fa29e303000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7fa29e303000 [pid 304] mmap(0x7fa29e451000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7fa29e451000 [pid 304] mmap(0x7fa29e4a8000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7fa29e4a8000 [pid 304] mmap(0x7fa29e4ae000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa29e4ae000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 304] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e2ca000 [pid 304] mmap(0x7fa29e2cd000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa29e2cd000 [pid 304] mmap(0x7fa29e2d5000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fa29e2d5000 [pid 304] mmap(0x7fa29e2d9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7fa29e2d9000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 304] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e2c3000 [pid 304] mmap(0x7fa29e2c5000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa29e2c5000 [pid 304] mmap(0x7fa29e2c7000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fa29e2c7000 [pid 304] mmap(0x7fa29e2c8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fa29e2c8000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 304] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e2b2000 [pid 304] mmap(0x7fa29e2b5000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa29e2b5000 [pid 304] mmap(0x7fa29e2bd000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fa29e2bd000 [pid 304] mmap(0x7fa29e2bf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7fa29e2bf000 [pid 304] mmap(0x7fa29e2c1000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa29e2c1000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd3a2b3f90, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd3a2b3f90, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 304] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e282000 [pid 304] mmap(0x7fa29e28a000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7fa29e28a000 [pid 304] mmap(0x7fa29e2a6000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7fa29e2a6000 [pid 304] mmap(0x7fa29e2ae000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7fa29e2ae000 [pid 304] mmap(0x7fa29e2b0000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa29e2b0000 [pid 304] close(3) = 0 [pid 304] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa29e280000 [pid 304] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 304] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e276000 [pid 304] mmap(0x7fa29e278000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa29e278000 [pid 304] mmap(0x7fa29e27b000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fa29e27b000 [pid 304] mmap(0x7fa29e27d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa29e27d000 [pid 304] mmap(0x7fa29e27f000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa29e27f000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 304] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa29e214000 [pid 304] mmap(0x7fa29e217000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa29e217000 [pid 304] mmap(0x7fa29e24e000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7fa29e24e000 [pid 304] mmap(0x7fa29e274000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7fa29e274000 [pid 304] close(3) = 0 [pid 304] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa29e212000 [pid 304] arch_prctl(ARCH_SET_FS, 0x7fa29e212c80) = 0 [pid 304] set_tid_address(0x7fa29e212f50) = 304 [pid 304] set_robust_list(0x7fa29e212f60, 24) = 0 [pid 304] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 304] mprotect(0x7fa29e4a8000, 16384, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e274000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e27d000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e2ae000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e2bf000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e2d9000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e2c8000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e579000, 12288, PROT_READ) = 0 [pid 304] mprotect(0x562c604ae000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7fa29e5b2000, 8192, PROT_READ) = 0 [pid 304] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 304] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 304] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 304] getrandom("\xe9\xd1\x5e\x49\x10\x06\xcb\x20", 8, GRND_NONBLOCK) = 8 [pid 304] brk(NULL) = 0x562c72665000 [pid 304] brk(0x562c72686000) = 0x562c72686000 [pid 304] access("/etc/selinux/config", F_OK) = 0 [pid 304] getpid() = 304 [pid 304] rt_sigaction(SIGCHLD, {sa_handler=0x7fa29e4fe287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7fa29e31a180}, NULL, 8) = 0 [pid 304] getppid() = 302 [pid 304] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 304] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 304] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 304] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 304] rt_sigaction(SIGINT, {sa_handler=0x7fa29e4fe287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7fa29e31a180}, NULL, 8) = 0 [pid 304] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 304] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 304] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffd3a2b4928, 0) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [ 47.276169][ T30] audit: type=1400 audit(1787870188.390:65): avc: denied { setattr } for pid=302 comm="syz-executor950" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 304] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x562c726656f0 /* 10 vars */) = 0 [pid 304] brk(NULL) = 0x556f4628b000 [pid 304] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2d44132000 [pid 304] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffca20b9b90, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffca20b9b90, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 304] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d44070000 [pid 304] mmap(0x7f2d44080000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f2d44080000 [pid 304] mmap(0x7f2d44106000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f2d44106000 [pid 304] mmap(0x7f2d4412e000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f2d4412e000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 304] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 304] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 304] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43e90000 [pid 304] mmap(0x7f2d43eb8000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f2d43eb8000 [pid 304] mmap(0x7f2d44006000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f2d44006000 [pid 304] mmap(0x7f2d4405d000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f2d4405d000 [pid 304] mmap(0x7f2d44063000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2d44063000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 304] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43e7f000 [pid 304] mmap(0x7f2d43e82000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f2d43e82000 [pid 304] mmap(0x7f2d43e8a000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f2d43e8a000 [pid 304] mmap(0x7f2d43e8e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f2d43e8e000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 304] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43e78000 [pid 304] mmap(0x7f2d43e7a000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f2d43e7a000 [pid 304] mmap(0x7f2d43e7c000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f2d43e7c000 [pid 304] mmap(0x7f2d43e7d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f2d43e7d000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 304] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43e67000 [pid 304] mmap(0x7f2d43e6a000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f2d43e6a000 [pid 304] mmap(0x7f2d43e72000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f2d43e72000 [pid 304] mmap(0x7f2d43e74000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f2d43e74000 [pid 304] mmap(0x7f2d43e76000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2d43e76000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffca20b9af0, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffca20b9af0, 0) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 304] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43e37000 [pid 304] mmap(0x7f2d43e3f000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f2d43e3f000 [pid 304] mmap(0x7f2d43e5b000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f2d43e5b000 [pid 304] mmap(0x7f2d43e63000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f2d43e63000 [pid 304] mmap(0x7f2d43e65000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2d43e65000 [pid 304] close(3) = 0 [pid 304] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2d43e35000 [pid 304] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 304] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43e2b000 [pid 304] mmap(0x7f2d43e2d000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f2d43e2d000 [pid 304] mmap(0x7f2d43e30000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f2d43e30000 [pid 304] mmap(0x7f2d43e32000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f2d43e32000 [pid 304] mmap(0x7f2d43e34000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2d43e34000 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 304] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 304] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 304] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2d43dc9000 [pid 304] mmap(0x7f2d43dcc000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f2d43dcc000 [pid 304] mmap(0x7f2d43e03000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f2d43e03000 [pid 304] mmap(0x7f2d43e29000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f2d43e29000 [pid 304] close(3) = 0 [pid 304] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2d43dc7000 [pid 304] arch_prctl(ARCH_SET_FS, 0x7f2d43dc7c80) = 0 [pid 304] set_tid_address(0x7f2d43dc7f50) = 304 [pid 304] set_robust_list(0x7f2d43dc7f60, 24) = 0 [pid 304] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 304] mprotect(0x7f2d4405d000, 16384, PROT_READ) = 0 [pid 304] mprotect(0x7f2d43e29000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d43e32000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d43e63000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d43e74000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d43e8e000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d43e7d000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d4412e000, 12288, PROT_READ) = 0 [pid 304] mprotect(0x556f3cdbe000, 4096, PROT_READ) = 0 [pid 304] mprotect(0x7f2d44167000, 8192, PROT_READ) = 0 [pid 304] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 304] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 304] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 304] getrandom("\x39\x06\x21\x41\xf7\x57\x8e\x98", 8, GRND_NONBLOCK) = 8 [pid 304] brk(NULL) = 0x556f4628b000 [pid 304] brk(0x556f462ac000) = 0x556f462ac000 [pid 304] access("/etc/selinux/config", F_OK) = 0 [pid 304] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 304] lseek(3, 0, SEEK_END) = 128000000 [pid 304] lseek(3, 0, SEEK_SET) = 0 [pid 304] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 304] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0 [pid 304] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 304] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 304] futex(0x7f2d43e666b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 304] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 304] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 304] lseek(3, 4086, SEEK_SET) = 4086 [pid 304] write(3, "SWAPSPACE2", 10) = 10 [pid 304] fsync(3) = 0 [ 47.402379][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 47.411588][ T30] audit: type=1400 audit(1787870188.520:66): avc: denied { relabelto } for pid=304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [pid 304] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 304] exit_group(0) = ? [pid 304] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fb883e807e0}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fb883e807e0}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 47.438181][ T30] audit: type=1400 audit(1787870188.520:67): avc: denied { write } for pid=304 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.464700][ T30] audit: type=1400 audit(1787870188.580:68): avc: denied { read } for pid=302 comm="syz-executor950" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-15/strace-static-x86_64: Process 305 attached , child_tidptr=0x555568c7a690) = 305 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-15/strace-static-x86_64: Process 306 attached [pid 302] <... clone resumed>, child_tidptr=0x555568c7a690) = 306 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [] [pid 306] set_robust_list(0x555568c7a6a0, 24 [pid 305] getrandom( [pid 302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... set_robust_list resumed>) = 0 [pid 305] <... getrandom resumed>"\xde\xdd\x0b\x21\x94\xb6\x6f\x44", 8, GRND_NONBLOCK) = 8 [pid 305] mkdir("./syzkaller.8vxm5A", 0700 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 302] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... mkdir resumed>) = 0 [pid 305] chmod("./syzkaller.8vxm5A", 0777 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] <... chmod resumed>) = 0 [pid 305] chdir("./syzkaller.8vxm5A"ci2-android-5-15/strace-static-x86_64: Process 307 attached [pid 302] <... clone resumed>, child_tidptr=0x555568c7a690) = 307 [pid 306] getrandom( [pid 305] <... chdir resumed>) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... getrandom resumed>"\x75\x38\xa4\x1d\x56\xaa\xde\x7e", 8, GRND_NONBLOCK) = 8 [pid 305] unshare(CLONE_NEWPID [pid 302] <... clone resumed>, child_tidptr=0x555568c7a690) = 308 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555568c7a690) = 309 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-15/strace-static-x86_64: Process 308 attached ci2-android-5-15/strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x555568c7a6a0, 24 [pid 308] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] getrandom( [pid 309] <... set_robust_list resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 306] mkdir("./syzkaller.3376zg", 0700 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] getrandom( [pid 308] <... getrandom resumed>"\x8c\x7e\x85\x9d\x65\xf9\x84\x58", 8, GRND_NONBLOCK) = 8 [pid 308] mkdir("./syzkaller.oTwYt5", 0700 [pid 306] <... mkdir resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... mkdir resumed>) = 0 [pid 309] <... getrandom resumed>"\x54\x99\xa8\x49\xb4\x19\x75\xbb", 8, GRND_NONBLOCK) = 8 [pid 309] mkdir("./syzkaller.aqbAkT", 0700 [pid 306] chmod("./syzkaller.3376zg", 0777 [pid 305] <... clone resumed>, child_tidptr=0x555568c7a690) = 310 [pid 309] <... mkdir resumed>) = 0 [pid 308] chmod("./syzkaller.oTwYt5", 0777 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... chmod resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... chmod resumed>) = 0 [pid 306] chdir("./syzkaller.3376zg" [pid 308] chdir("./syzkaller.oTwYt5") = 0 [pid 308] unshare(CLONE_NEWPID) = 0 [pid 309] chmod("./syzkaller.aqbAkT", 0777) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... chdir resumed>) = 0 [pid 307] set_robust_list(0x555568c7a6a0, 24 [pid 306] unshare(CLONE_NEWPID [pid 309] chdir("./syzkaller.aqbAkT") = 0 [pid 309] unshare(CLONE_NEWPID) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... unshare resumed>) = 0 [pid 307] <... set_robust_list resumed>) = 0 ci2-android-5-15/strace-static-x86_64: Process 310 attached [pid 308] <... clone resumed>, child_tidptr=0x555568c7a690) = 311 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x555568c7a690) = 312 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-15/strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] getppid() = 0 [pid 312] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 312] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 312] unshare(CLONE_NEWNS [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [ 47.490883][ T30] audit: type=1400 audit(1787870188.580:69): avc: denied { open } for pid=302 comm="syz-executor950" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.490926][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] <... unshare resumed>) = 0 [pid 312] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 312] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 312] unshare(CLONE_NEWCGROUP) = 0 [pid 312] unshare(CLONE_NEWUTS) = 0 [pid 312] unshare(CLONE_SYSVSEM) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 312] getpid() = 1 [pid 312] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 313] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] getppid() = 0 [pid 313] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 313] unshare(CLONE_NEWNS) = 0 [pid 313] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 313] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 313] unshare(CLONE_NEWCGROUP) = 0 [pid 313] unshare(CLONE_NEWUTS) = 0 [pid 313] unshare(CLONE_SYSVSEM) = 0 [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 306] <... clone resumed>, child_tidptr=0x555568c7a690) = 313 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] getpid() = 1 [pid 313] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] getrandom( [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... getrandom resumed>"\x34\xd8\xea\x0d\x70\x36\xe9\x5c", 8, GRND_NONBLOCK) = 8 [pid 310] set_robust_list(0x555568c7a6a0, 24 [pid 307] mkdir("./syzkaller.UH4JAz", 0700 [pid 310] <... set_robust_list resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] chmod("./syzkaller.UH4JAz", 0777 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... chmod resumed>) = 0 [pid 307] chdir("./syzkaller.UH4JAz" [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... chdir resumed>) = 0 ci2-android-5-15/strace-static-x86_64: Process 311 attached [pid 310] <... prctl resumed>) = 0 [pid 307] unshare(CLONE_NEWPID [pid 310] getppid( [pid 307] <... unshare resumed>) = 0 [pid 311] set_robust_list(0x555568c7a6a0, 24 [pid 310] <... getppid resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 311] <... set_robust_list resumed>) = 0 [pid 310] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [] [pid 310] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 311] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... prlimit64 resumed>, NULL) = 0 [pid 310] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] <... prlimit64 resumed>, NULL) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 311] <... prctl resumed>) = 0 [pid 310] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 311] getppid( [pid 307] <... clone resumed>, child_tidptr=0x555568c7a690) = 314 [pid 310] <... prlimit64 resumed>, NULL) = 0 [pid 311] <... getppid resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 311] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 310] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] <... prlimit64 resumed>, NULL) = 0 [pid 310] <... prlimit64 resumed>, NULL) = 0 [pid 310] unshare(CLONE_NEWNS [pid 311] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 310] <... unshare resumed>) = 0 ci2-android-5-15/strace-static-x86_64: Process 314 attached [pid 311] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 310] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 311] <... prlimit64 resumed>, NULL) = 0 [pid 310] <... mount resumed>) = 0 [pid 311] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 310] unshare(CLONE_NEWIPC [pid 314] set_robust_list(0x555568c7a6a0, 24 [pid 311] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 310] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 311] <... prlimit64 resumed>, NULL) = 0 [pid 311] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 310] unshare(CLONE_NEWCGROUP [pid 314] <... set_robust_list resumed>) = 0 [pid 311] <... prlimit64 resumed>, NULL) = 0 [pid 310] <... unshare resumed>) = 0 [pid 311] unshare(CLONE_NEWNS [pid 310] unshare(CLONE_NEWUTS [pid 311] <... unshare resumed>) = 0 [pid 310] <... unshare resumed>) = 0 [pid 311] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 310] unshare(CLONE_SYSVSEM [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] <... mount resumed>) = 0 [pid 310] <... unshare resumed>) = 0 [pid 311] unshare(CLONE_NEWIPC [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 311] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] unshare(CLONE_NEWCGROUP [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 311] <... unshare resumed>) = 0 [pid 314] <... prctl resumed>) = 0 [pid 311] unshare(CLONE_NEWUTS [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] getppid( [pid 311] <... unshare resumed>) = 0 [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 314] <... getppid resumed>) = 0 [pid 311] unshare(CLONE_SYSVSEM [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 311] <... unshare resumed>) = 0 [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 314] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 314] <... prlimit64 resumed>, NULL) = 0 [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 310] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] getpid() = 1 [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 311] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 310] <... getpid resumed>) = 1 [pid 311] <... capset resumed>) = 0 [pid 311] unshare(CLONE_NEWNET [pid 310] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 314] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 314] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 314] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 314] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 310] <... capget resumed>, {effective=1<, NULL) = 0 [pid 314] unshare(CLONE_NEWNS) = 0 [pid 310] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 314] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 314] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 314] unshare(CLONE_NEWCGROUP) = 0 [pid 310] <... capset resumed>) = 0 [pid 314] unshare(CLONE_NEWUTS) = 0 [pid 314] unshare(CLONE_SYSVSEM) = 0 [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 310] unshare(CLONE_NEWNET [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 314] getpid() = 1 [pid 314] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 312] <... unshare resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "0 65535", 7) = 7 [pid 312] close(3) = 0 [pid 312] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "100000", 6) = 6 [pid 312] close(3) = 0 [pid 312] mkdir("./syz-tmp", 0777) = 0 [pid 312] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 314] <... unshare resumed>) = 0 [pid 313] <... unshare resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 310] <... unshare resumed>) = 0 [pid 311] <... unshare resumed>) = 0 [pid 311] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "0 65535", 7) = 7 [pid 311] close(3) = 0 [pid 311] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "100000", 6) = 6 [pid 311] close(3) = 0 [pid 311] mkdir("./syz-tmp", 0777) = 0 [pid 311] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 311] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 311] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 311] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 311] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 311] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 311] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 311] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 314] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 313] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 312] mkdir("./syz-tmp/newroot", 0777 [pid 310] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 311] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... mkdir resumed>) = 0 [pid 313] <... openat resumed>) = 3 [pid 311] <... mount resumed>) = 0 [pid 311] mkdir("./syz-tmp/newroot/sys", 0700 [pid 310] <... openat resumed>) = 3 [pid 311] <... mkdir resumed>) = 0 [pid 314] <... openat resumed>) = 3 [pid 313] write(3, "0 65535", 7 [pid 312] mkdir("./syz-tmp/newroot/dev", 0700 [pid 310] write(3, "0 65535", 7 [pid 314] write(3, "0 65535", 7 [ 47.627790][ T30] audit: type=1400 audit(1787870188.740:71): avc: denied { mounton } for pid=312 comm="syz-executor950" path="/root/syzkaller.aqbAkT/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 47.652895][ T30] audit: type=1400 audit(1787870188.760:72): avc: denied { mount } for pid=312 comm="syz-executor950" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [pid 311] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] <... write resumed>) = 7 [pid 313] <... write resumed>) = 7 [pid 312] <... mkdir resumed>) = 0 [pid 310] <... write resumed>) = 7 [pid 311] <... mount resumed>) = 0 [pid 311] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 311] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 311] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 311] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 311] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 311] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 311] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 311] chdir("/") = 0 [pid 314] close(3) = 0 [pid 314] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "100000", 6) = 6 [pid 314] close(3) = 0 [pid 314] mkdir("./syz-tmp", 0777) = 0 [pid 314] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 314] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 314] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 314] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 314] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 314] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 314] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 314] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 314] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 314] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 314] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 313] close(3 [pid 312] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 310] close(3 [pid 314] <... mount resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 313] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 312] <... mount resumed>) = 0 [pid 310] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 313] <... openat resumed>) = 3 [pid 312] mkdir("./syz-tmp/newroot/proc", 0700 [pid 313] write(3, "100000", 6 [pid 311] umount2("./pivot", MNT_DETACH [pid 310] <... openat resumed>) = 3 [pid 314] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 313] <... write resumed>) = 6 [pid 312] <... mkdir resumed>) = 0 [pid 310] write(3, "100000", 6 [pid 313] close(3 [pid 312] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 313] <... close resumed>) = 0 [pid 310] <... write resumed>) = 6 [pid 314] <... mount resumed>) = 0 [pid 314] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 314] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 313] mkdir("./syz-tmp", 0777 [pid 310] close(3 [pid 314] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 312] <... mount resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 314] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 314] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 314] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 313] <... mkdir resumed>) = 0 [pid 312] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 310] mkdir("./syz-tmp", 0777 [pid 313] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 312] <... mkdir resumed>) = 0 [pid 314] chdir("/") = 0 [pid 314] umount2("./pivot", MNT_DETACH [pid 310] <... mkdir resumed>) = 0 [pid 314] <... umount2 resumed>) = 0 [pid 313] <... mount resumed>) = 0 [pid 312] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 310] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 314] chroot("./newroot" [pid 313] mkdir("./syz-tmp/newroot", 0777 [pid 312] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 311] <... umount2 resumed>) = 0 [pid 314] <... chroot resumed>) = 0 [pid 313] <... mkdir resumed>) = 0 [pid 312] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 310] <... mount resumed>) = 0 [pid 313] mkdir("./syz-tmp/newroot/dev", 0700 [pid 314] chdir("/") = 0 [pid 312] <... mount resumed>) = 0 [pid 310] mkdir("./syz-tmp/newroot", 0777 [pid 313] <... mkdir resumed>) = 0 [pid 312] mkdir("./syz-tmp/newroot/sys", 0700 [pid 310] <... mkdir resumed>) = 0 [pid 313] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mkdir("/dev/gadgetfs", 0777 [pid 312] <... mkdir resumed>) = 0 [pid 310] mkdir("./syz-tmp/newroot/dev", 0700 [pid 314] <... mkdir resumed>) = 0 [pid 313] <... mount resumed>) = 0 [pid 312] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 310] <... mkdir resumed>) = 0 [pid 313] mkdir("./syz-tmp/newroot/proc", 0700 [pid 311] chroot("./newroot" [ 47.677219][ T30] audit: type=1400 audit(1787870188.760:73): avc: denied { mounton } for pid=311 comm="syz-executor950" path="/root/syzkaller.oTwYt5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [pid 314] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 313] <... mkdir resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 311] <... chroot resumed>) = 0 [pid 310] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 313] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 312] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 311] chdir("/" [pid 310] <... mount resumed>) = 0 [pid 313] <... mount resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 311] <... chdir resumed>) = 0 [pid 310] mkdir("./syz-tmp/newroot/proc", 0700 [pid 313] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 312] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 311] mkdir("/dev/gadgetfs", 0777 [pid 310] <... mkdir resumed>) = 0 [pid 313] <... mkdir resumed>) = 0 [pid 312] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 311] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 310] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 313] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 311] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 310] <... mount resumed>) = 0 [pid 314] <... mount resumed>) = -1 ENODEV (No such device) [pid 313] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 312] <... mount resumed>) = 0 [pid 311] <... mount resumed>) = -1 ENODEV (No such device) [pid 310] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 313] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 311] mkdir("/dev/binderfs", 0777 [pid 310] <... mkdir resumed>) = 0 [pid 313] <... mount resumed>) = 0 [pid 310] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 314] mkdir("/dev/binderfs", 0777 [pid 312] <... mkdir resumed>) = 0 [pid 313] mkdir("./syz-tmp/newroot/sys", 0700 [pid 312] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 310] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 313] <... mkdir resumed>) = 0 [pid 313] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 310] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 311] <... mkdir resumed>) = 0 [pid 314] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 313] <... mount resumed>) = 0 [pid 312] mkdir("./syz-tmp/pivot", 0777 [pid 310] <... mount resumed>) = 0 [pid 313] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 311] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 314] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 313] <... mount resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 311] <... mount resumed>) = 0 [pid 310] mkdir("./syz-tmp/newroot/sys", 0700 [pid 313] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 311] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 313] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 310] <... mkdir resumed>) = 0 [pid 314] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 312] <... pivot_root resumed>) = 0 [pid 310] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 313] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] chdir("/" [pid 314] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 313] <... mount resumed>) = 0 [pid 312] <... chdir resumed>) = 0 [pid 310] <... mount resumed>) = 0 [pid 311] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 313] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 312] umount2("./pivot", MNT_DETACH [pid 310] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 313] <... mkdir resumed>) = 0 [pid 314] mkdir("./0", 0777 [pid 310] <... mount resumed>) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 313] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 311] mkdir("./0", 0777 [pid 310] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... umount2 resumed>) = 0 [pid 313] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 312] chroot("./newroot" [pid 310] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 313] mkdir("./syz-tmp/pivot", 0777 [pid 312] <... chroot resumed>) = 0 [pid 310] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 313] <... mkdir resumed>) = 0 [pid 312] chdir("/" [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 312] <... chdir resumed>) = 0 [pid 311] <... mkdir resumed>) = 0 [pid 310] <... mount resumed>) = 0 ci2-android-5-15/strace-static-x86_64: Process 315 attached [pid 313] <... pivot_root resumed>) = 0 [pid 312] mkdir("/dev/gadgetfs", 0777 [pid 311] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 315] set_robust_list(0x555568c7a6a0, 24 [pid 314] <... clone resumed>, child_tidptr=0x555568c7a690) = 2 [pid 313] chdir("/" [pid 312] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 315] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... chdir resumed>) = 0 [pid 312] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 311] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] umount2("./pivot", MNT_DETACH [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... mount resumed>) = -1 ENODEV (No such device) [pid 311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 315] chdir("./0" [pid 313] <... umount2 resumed>) = 0 [pid 312] mkdir("/dev/binderfs", 0777 [pid 313] chroot("./newroot" [pid 312] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 310] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 313] <... chroot resumed>) = 0 [pid 312] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 310] mkdir("./syz-tmp/pivot", 0777 [pid 313] chdir("/" [pid 315] <... chdir resumed>) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] <... chdir resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 313] mkdir("/dev/gadgetfs", 0777 [pid 312] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 310] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 313] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 315] write(3, "1000", 4 [pid 312] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 315] <... write resumed>) = 4 [pid 315] close(3 [pid 313] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 310] <... pivot_root resumed>) = 0 [pid 312] mkdir("./0", 0777 [pid 311] <... clone resumed>, child_tidptr=0x555568c7a690) = 2 [pid 313] <... mount resumed>) = -1 ENODEV (No such device) [pid 310] chdir("/" [pid 312] <... mkdir resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 313] mkdir("/dev/binderfs", 0777 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 311] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... chdir resumed>) = 0 [pid 313] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 311] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] umount2("./pivot", MNT_DETACH [pid 313] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] symlink("/dev/binderfs", "./binderfs"ci2-android-5-15/strace-static-x86_64: Process 317 attached ci2-android-5-15/strace-static-x86_64: Process 316 attached ) = 0 [pid 313] <... mount resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 315] write(1, "executing program\n", 18 [pid 313] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 312] <... clone resumed>, child_tidptr=0x555568c7a690) = 2 executing program [pid 310] chroot("./newroot" [pid 317] set_robust_list(0x555568c7a6a0, 24 [pid 315] <... write resumed>) = 18 [pid 313] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 315] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] mkdir("./0", 0777 [pid 317] <... set_robust_list resumed>) = 0 [pid 310] <... chroot resumed>) = 0 [pid 316] set_robust_list(0x555568c7a6a0, 24 [pid 315] <... futex resumed>) = 0 [pid 313] <... mkdir resumed>) = 0 [pid 310] chdir("/" [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... set_robust_list resumed>) = 0 [pid 315] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 313] rt_sigprocmask(SIG_BLOCK, ~[] [pid 315] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 310] <... chdir resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 310] mkdir("/dev/gadgetfs", 0777 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 317] chdir("./0" [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e22000 [pid 315] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 317] <... chdir resumed>) = 0 [pid 315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} [pid 313] <... clone resumed>, child_tidptr=0x555568c7a690) = 2 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] chdir("./0" [pid 310] <... mount resumed>) = -1 ENODEV (No such device) [pid 317] <... prctl resumed>) = 0 [pid 315] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 317] setpgid(0, 0 [pid 316] <... chdir resumed>) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] mkdir("/dev/binderfs", 0777 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 317] <... setpgid resumed>) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 315] <... futex resumed>) = 0 [pid 310] mount("binder", "/dev/binderfs", "binder", 0, NULLci2-android-5-15/strace-static-x86_64: Process 319 attached ci2-android-5-15/strace-static-x86_64: Process 318 attached [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4 [pid 316] <... prctl resumed>) = 0 [pid 310] <... mount resumed>) = 0 [pid 317] <... write resumed>) = 4 [pid 317] close(3) = 0 [pid 317] symlink("/dev/binderfs", "./binderfs" [pid 319] set_robust_list(0x7fb883e429a0, 24 [pid 318] set_robust_list(0x555568c7a6a0, 24 [pid 316] setpgid(0, 0 [pid 310] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 319] <... set_robust_list resumed>) = 0 [pid 317] <... symlink resumed>) = 0 [pid 316] <... setpgid resumed>) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [] [pid 317] write(1, "executing program\n", 18 executing program [pid 310] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 319] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] <... write resumed>) = 18 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] mkdir("./0", 0777 [pid 319] mkdirat(AT_FDCWD, "./my_configfs", 0777 [pid 318] <... set_robust_list resumed>) = 0 [pid 317] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... mkdirat resumed>) = 0 [pid 317] <... futex resumed>) = 0 [pid 316] <... openat resumed>) = 3 [pid 310] <... mkdir resumed>) = 0 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 316] write(3, "1000", 4 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 319] <... futex resumed>) = 1 [pid 317] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 316] <... write resumed>) = 4 [pid 315] <... futex resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 319] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 316] close(3 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] rt_sigprocmask(SIG_SETMASK, [] [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... close resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 319] mount(NULL, "./my_configfs", "configfs", 0, NULL [pid 317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] symlink("/dev/binderfs", "./binderfs" [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 320 attached [pid 319] <... mount resumed>) = 0 [pid 318] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] <... mmap resumed>) = 0x7fb883e22000 [pid 316] <... symlink resumed>) = 0 [pid 320] set_robust_list(0x555568c7a6a0, 24 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE [pid 316] write(1, "executing program\n", 18 [pid 310] <... clone resumed>, child_tidptr=0x555568c7a690) = 2 executing program [pid 320] <... set_robust_list resumed>) = 0 [pid 319] <... futex resumed>) = 1 [pid 317] <... mprotect resumed>) = 0 [pid 316] <... write resumed>) = 18 [pid 315] <... futex resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 320] rt_sigprocmask(SIG_SETMASK, [] [pid 319] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[] [pid 316] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 320] chdir("./0" [pid 317] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} [pid 316] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] <... chdir resumed>) = 0 [pid 316] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 320] <... prctl resumed>) = 0 [pid 317] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] setpgid(0, 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 320] <... setpgid resumed>) = 0 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... mmap resumed>) = 0x7fb883e22000 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE [pid 320] <... openat resumed>) = 3 [pid 316] <... mprotect resumed>) = 0 [pid 320] write(3, "1000", 4 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 320] <... write resumed>) = 4 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 320] close(3 [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} [pid 320] <... close resumed>) = 0 [pid 320] symlink("/dev/binderfs", "./binderfs" [pid 316] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 320] <... symlink resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 320] write(1, "executing program\n", 18 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] <... write resumed>) = 18 [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 0 [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0}, NULL, 8) = 0 [pid 320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e22000 [pid 320] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITEci2-android-5-15/strace-static-x86_64: Process 321 attached ) = 0 [pid 321] set_robust_list(0x7fb883e429a0, 24 executing program [pid 320] rt_sigprocmask(SIG_BLOCK, ~[] [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... set_robust_list resumed>) = 0 [pid 320] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 317] <... futex resumed>) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [] [pid 320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} [pid 319] <... mkdirat resumed>) = 0 [pid 321] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] mkdirat(AT_FDCWD, "./my_configfs", 0777 [pid 320] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 321] <... mkdirat resumed>) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [] [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 321] <... futex resumed>) = 1 [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] <... futex resumed>) = 0 [pid 319] <... futex resumed>) = 1 [pid 317] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-15/strace-static-x86_64: Process 322 attached [pid 317] <... futex resumed>) = 1 [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... futex resumed>) = 0 [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 318] chdir("./0" [pid 321] <... futex resumed>) = 0 [pid 321] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0 [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 321] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] <... futex resumed>) = 0 [pid 322] set_robust_list(0x7fb883e429a0, 24 [pid 321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... set_robust_list resumed>) = 0 [pid 321] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 317] <... futex resumed>) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [] [pid 321] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] mkdirat(AT_FDCWD, "./my_configfs", 0777 [pid 321] <... futex resumed>) = 0 [pid 322] <... mkdirat resumed>) = 0 [pid 321] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 322] mount(NULL, "./my_configfs", "configfs", 0, NULL [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... mount resumed>) = 0 [pid 316] <... futex resumed>) = 0 [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-15/strace-static-x86_64: Process 324 attached [pid 322] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 316] <... futex resumed>) = 0 [pid 324] set_robust_list(0x7fb883e429a0, 24 [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... set_robust_list resumed>) = 0 [pid 322] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] rt_sigprocmask(SIG_SETMASK, [] [pid 322] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... futex resumed>) = 0 [pid 324] mkdirat(AT_FDCWD, "./my_configfs", 0777 [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... mkdirat resumed>) = 0 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 320] <... futex resumed>) = 0 [pid 324] mount(NULL, "./my_configfs", "configfs", 0, NULL [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... mount resumed>) = 0 [pid 320] <... futex resumed>) = 0 [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... mkdirat resumed>) = 0 [pid 324] <... futex resumed>) = 0 [pid 322] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 321] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... chdir resumed>) = 0 [pid 317] <... futex resumed>) = 1 [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] <... futex resumed>) = 1 [pid 321] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 320] <... futex resumed>) = 0 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... futex resumed>) = 0 [pid 324] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 322] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] <... futex resumed>) = 0 [pid 319] <... futex resumed>) = 1 [pid 318] <... prctl resumed>) = 0 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] mkdirat(AT_FDCWD, "./dev", 0777 [pid 321] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 322] <... mkdirat resumed>) = 0 [pid 321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 320] <... futex resumed>) = 0 [pid 319] mkdirat(AT_FDCWD, "./dev", 0777 [pid 318] setpgid(0, 0 [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [ 47.718936][ T314] request_module fs-gadgetfs succeeded, but still no fs? [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] mkdirat(AT_FDCWD, "./dev", 0777 [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... mkdirat resumed>) = 0 [pid 318] <... setpgid resumed>) = 0 [pid 317] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] <... futex resumed>) = 1 [pid 321] <... mkdirat resumed>) = 0 [pid 320] <... futex resumed>) = 0 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 322] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 0 [pid 318] <... openat resumed>) = 3 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] <... futex resumed>) = 0 [pid 319] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] write(3, "1000", 4 [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 321] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... write resumed>) = 4 [pid 317] <... futex resumed>) = 0 [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 322] <... mount resumed>) = 0 [pid 321] <... mount resumed>) = 0 [pid 320] <... futex resumed>) = 0 [pid 319] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 318] close(3 [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... mount resumed>) = 0 [pid 318] <... close resumed>) = 0 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] <... futex resumed>) = 1 [pid 321] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 0 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] symlink("/dev/binderfs", "./binderfs" [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 324] mkdirat(AT_FDCWD, "./dev", 0777 [pid 322] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 318] <... symlink resumed>) = 0 [pid 317] <... futex resumed>) = 0 [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 324] <... mkdirat resumed>) = 0 [pid 322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] <... openat resumed>) = 3 [pid 319] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL executing program [pid 318] write(1, "executing program\n", 18 [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... write resumed>) = 18 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 322] <... openat resumed>) = 3 [pid 321] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 0 [pid 319] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 318] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... openat resumed>) = 3 [pid 318] <... futex resumed>) = 0 [pid 317] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 322] <... futex resumed>) = 1 [pid 320] <... futex resumed>) = 0 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 317] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... futex resumed>) = 0 [pid 324] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 322] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 318] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 316] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 324] <... mount resumed>) = 0 [pid 322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 319] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 320] <... futex resumed>) = 0 [pid 319] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... mmap resumed>) = 0x7fb883e22000 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 320] <... futex resumed>) = 0 [pid 318] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE [pid 324] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... mprotect resumed>) = 0 [pid 324] <... openat resumed>) = -1 ENODEV (No such device) [pid 318] rt_sigprocmask(SIG_BLOCK, ~[] [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 324] <... futex resumed>) = 1 [pid 320] <... futex resumed>) = 0 [pid 318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-15/strace-static-x86_64: Process 326 attached [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 320] <... futex resumed>) = 0 [pid 324] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 320] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 326] set_robust_list(0x7fb883e429a0, 24 [pid 318] rt_sigprocmask(SIG_SETMASK, [] [pid 326] <... set_robust_list resumed>) = 0 [pid 318] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [] [pid 318] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] <... futex resumed>) = 0 [pid 326] mkdirat(AT_FDCWD, "./my_configfs", 0777 [pid 318] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... mkdirat resumed>) = 0 [pid 326] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 326] mount(NULL, "./my_configfs", "configfs", 0, NULL [pid 318] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] <... mount resumed>) = 0 [pid 326] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists) [pid 326] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 326] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 318] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 318] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 318] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 318] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e01000 [pid 318] mprotect(0x7fb883e02000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e21990, parent_tid=0x7fb883e21990, exit_signal=0, stack=0x7fb883e01000, stack_size=0x20300, tls=0x7fb883e216c0} => {parent_tid=[4]}, 88) = 4 ci2-android-5-15/strace-static-x86_64: Process 327 attached [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] set_robust_list(0x7fb883e219a0, 24 [pid 318] <... futex resumed>) = 0 [pid 327] <... set_robust_list resumed>) = 0 [pid 318] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] mkdirat(AT_FDCWD, "./dev", 0777) = 0 [pid 327] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 327] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] mount(NULL, "./dev", "devtmpfs", 0, NULL) = 0 [pid 327] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 327] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR) = -1 ENODEV (No such device) [pid 327] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 0 [pid 327] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 317] close(3) = 0 [pid 321] <... rmdir resumed>) = 0 [pid 322] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 321] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 326] <... mkdirat resumed>) = 0 [pid 324] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 322] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 319] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] close(4 [pid 316] close(3 [pid 327] <... rmdir resumed>) = 0 [pid 326] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 321] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 319] <... futex resumed>) = 0 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] close(3 [pid 327] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 322] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] close(3 [pid 318] close(3 [pid 317] close(5 [pid 327] <... futex resumed>) = 0 [pid 324] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 327] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] close(4 [pid 318] close(4 [pid 317] close(6 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(5 [pid 318] close(5 [pid 317] close(7 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(6 [pid 318] close(6 [pid 317] close(8 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(7 [pid 318] close(7 [pid 317] close(9 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(8 [pid 318] close(8 [pid 317] close(10 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(9 [pid 318] close(9 [pid 317] close(11 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(10 [pid 318] close(10 [pid 317] close(12 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(11 [pid 318] close(11 [pid 317] close(13 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(12 [pid 318] close(12 [pid 317] close(14 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(13 [pid 318] close(13 [pid 317] close(15 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(14 [pid 318] close(14 [pid 317] close(16 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(15 [pid 318] close(15 [pid 317] close(17 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(16 [pid 318] close(16 [pid 317] close(18 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(17 [pid 318] close(17 [pid 317] close(19 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(18 [pid 318] close(18 [pid 317] close(20 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(19 [pid 318] close(19 [pid 317] close(21 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(20 [pid 318] close(20 [pid 317] close(22 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(21 [pid 318] close(21 [pid 317] close(23 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(22 [pid 318] close(22 [pid 317] close(24 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(23 [pid 318] close(23 [pid 317] close(25 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(24 [pid 318] close(24 [pid 317] close(26 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(25 [pid 318] close(25 [pid 317] close(27 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(26 [pid 318] close(26 [pid 317] close(28 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(27 [pid 318] close(27 [pid 317] close(29 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] close(28 [pid 318] close(28 [pid 317] exit_group(0 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... exit_group resumed>) = ? [pid 320] close(29 [pid 318] close(29 [pid 320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] exit_group(0 [pid 318] exit_group(0 [pid 327] <... futex resumed>) = ? [pid 324] <... futex resumed>) = ? [pid 320] <... exit_group resumed>) = ? [pid 318] <... exit_group resumed>) = ? [pid 327] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 310] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=100, ...}) = 0 [pid 310] getdents64(3, 0x555568c7b750 /* 5 entries */, 32768) = 136 [ 47.978234][ T316] ================================================================== [ 47.986450][ T316] BUG: KASAN: use-after-free in check_tty_count+0x1a8/0x330 [ 47.993777][ T316] Read of size 8 at addr ffff88810dc43910 by task syz-executor950/316 [ 48.001954][ T316] [ 48.004324][ T316] CPU: 1 PID: 316 Comm: syz-executor950 Not tainted syzkaller #0 [ 48.012100][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.022374][ T316] Call Trace: [pid 310] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 326] <... futex resumed>) = ? [pid 326] +++ exited with 0 +++ [pid 318] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 321] <... futex resumed>) = ? [pid 321] +++ exited with 0 +++ [pid 317] +++ exited with 0 +++ [pid 313] <... restart_syscall resumed>) = 0 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 312] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] <... openat resumed>) = 3 [pid 312] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] fstat(3 [pid 312] <... openat resumed>) = 3 [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=100, ...}) = 0 [pid 312] fstat(3 [pid 313] getdents64(3 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=100, ...}) = 0 [pid 313] <... getdents64 resumed>, 0x555568c7b750 /* 5 entries */, 32768) = 136 [pid 312] getdents64(3 [pid 313] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] <... getdents64 resumed>, 0x555568c7b750 /* 5 entries */, 32768) = 136 [pid 312] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [ 48.025689][ T316] [ 48.028737][ T316] __dump_stack+0x21/0x30 [ 48.033115][ T316] dump_stack_lvl+0x110/0x170 [ 48.037835][ T316] ? show_regs_print_info+0x20/0x20 [ 48.043073][ T316] ? load_image+0x3f0/0x3f0 [ 48.047756][ T316] ? locks_remove_file+0x371/0xff0 [ 48.052910][ T316] print_address_description+0x7f/0x2c0 [ 48.058610][ T316] ? check_tty_count+0x1a8/0x330 [ 48.063562][ T316] kasan_report+0x10f/0x150 [ 48.068085][ T316] ? __kasan_check_write+0x14/0x20 [ 48.073208][ T316] ? check_tty_count+0x1a8/0x330 [ 48.078148][ T316] kasan_check_range+0x249/0x2a0 [ 48.083095][ T316] __kasan_check_read+0x11/0x20 [ 48.087956][ T316] check_tty_count+0x1a8/0x330 [ 48.092741][ T316] tty_release+0xc9/0x1330 [ 48.097180][ T316] ? tty_release_struct+0xe0/0xe0 [ 48.102222][ T316] __fput+0x22b/0x900 [ 48.106223][ T316] ____fput+0x15/0x20 [ 48.110331][ T316] task_work_run+0x127/0x190 [ 48.114939][ T316] ptrace_notify+0x230/0x270 [ 48.119542][ T316] ? kick_process+0xdc/0x150 [ 48.124150][ T316] ? do_notify_parent+0x830/0x830 [ 48.129210][ T316] ? task_work_add+0x1b2/0x1e0 [ 48.133988][ T316] ? fput_many+0x161/0x1a0 [ 48.138415][ T316] ? fput+0x1a/0x20 [ 48.142245][ T316] ? filp_close+0x105/0x150 [ 48.146763][ T316] syscall_exit_work+0x87/0x160 [ 48.151625][ T316] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 48.157789][ T316] syscall_exit_to_user_mode+0xd/0x30 [ 48.163181][ T316] do_syscall_64+0x58/0xa0 [ 48.167713][ T316] ? clear_bhb_loop+0x50/0xa0 [ 48.172407][ T316] ? clear_bhb_loop+0x50/0xa0 [ 48.177098][ T316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.183004][ T316] RIP: 0033:0x7fb883e9037e [ 48.187433][ T316] Code: 08 0f 85 05 e3 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 48.207069][ T316] RSP: 002b:00007ffdf1260df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 48.215809][ T316] RAX: 0000000000000000 RBX: 0000555568c7a3c0 RCX: 00007fb883e9037e [ 48.223971][ T316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.232218][ T316] RBP: 00007ffdf1260e80 R08: 0000000000000000 R09: 0000000000000000 [ 48.240204][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb883f15b4c [ 48.248202][ T316] R13: 000000000000bac2 R14: 00007ffdf1260ea0 R15: 00007fb883e4d690 [ 48.256308][ T316] [ 48.259343][ T316] [ 48.261676][ T316] Allocated by task 319: [ 48.265924][ T316] __kasan_kmalloc+0xd4/0x100 [ 48.270702][ T316] kmem_cache_alloc_trace+0x119/0x270 [ 48.276182][ T316] gserial_alloc_line_no_console+0x238/0x700 [ 48.282184][ T316] obex_alloc_inst+0x86/0xe0 [ 48.286874][ T316] usb_get_function_instance+0xe2/0x2f0 [ 48.292436][ T316] function_make+0x118/0x350 [ 48.297042][ T316] configfs_mkdir+0x50a/0x9c0 [ 48.301727][ T316] vfs_mkdir+0x38b/0x590 [ 48.305987][ T316] do_mkdirat+0x174/0x4d0 [ 48.310336][ T316] __x64_sys_mkdirat+0x89/0xa0 [ 48.315115][ T316] x64_sys_call+0x37e/0x9a0 [ 48.319641][ T316] do_syscall_64+0x4c/0xa0 [ 48.324067][ T316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.329972][ T316] [ 48.332305][ T316] Freed by task 321: [ 48.336206][ T316] kasan_set_track+0x4a/0x70 [ 48.340808][ T316] kasan_set_free_info+0x23/0x40 [ 48.345756][ T316] ____kasan_slab_free+0x125/0x160 [ 48.350876][ T316] __kasan_slab_free+0x11/0x20 [ 48.355769][ T316] slab_free_freelist_hook+0xc2/0x190 [ 48.361158][ T316] kfree+0xc4/0x270 [ 48.364983][ T316] gserial_free_port+0x245/0x2e0 [ 48.369935][ T316] gserial_free_line+0x9b/0x1a0 [ 48.374802][ T316] obex_free_inst+0x39/0x60 [ 48.379317][ T316] usb_put_function_instance+0x85/0xa0 [ 48.384785][ T316] obex_attr_release+0x15/0x20 [ 48.389557][ T316] config_item_put+0x158/0x210 [ 48.394333][ T316] configfs_rmdir+0x89f/0x960 [ 48.399024][ T316] vfs_rmdir+0x1ae/0x450 [ 48.403344][ T316] do_rmdir+0x261/0x6b0 [ 48.407527][ T316] __x64_sys_rmdir+0x49/0x50 [ 48.412172][ T316] x64_sys_call+0x25f/0x9a0 [ 48.416873][ T316] do_syscall_64+0x4c/0xa0 [ 48.421316][ T316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.427232][ T316] [ 48.429587][ T316] The buggy address belongs to the object at ffff88810dc43800 [ 48.429587][ T316] which belongs to the cache kmalloc-1k of size 1024 [ 48.443655][ T316] The buggy address is located 272 bytes inside of [ 48.443655][ T316] 1024-byte region [ffff88810dc43800, ffff88810dc43c00) [ 48.457026][ T316] The buggy address belongs to the page: [ 48.462676][ T316] page:ffffea0004371000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dc40 [ 48.473069][ T316] head:ffffea0004371000 order:3 compound_mapcount:0 compound_pincount:0 [ 48.481411][ T316] flags: 0x4000000000010200(slab|head|zone=1) [ 48.487620][ T316] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043080 [ 48.496217][ T316] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 48.504901][ T316] page dumped because: kasan: bad access detected [ 48.511327][ T316] page_owner tracks the page as allocated [ 48.517144][ T316] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 299, ts 47772114532, free_ts 47678805805 [ 48.536175][ T316] post_alloc_hook+0x192/0x1b0 [ 48.540966][ T316] prep_new_page+0x1c/0x110 [ 48.545608][ T316] get_page_from_freelist+0x2c3a/0x2cd0 [ 48.551166][ T316] __alloc_pages+0x1a2/0x460 [ 48.555778][ T316] new_slab+0xa0/0x4d0 [ 48.559862][ T316] ___slab_alloc+0x3ac/0x840 [ 48.564481][ T316] __slab_alloc+0x49/0x90 [ 48.568863][ T316] __kmalloc_track_caller+0x169/0x2c0 [ 48.574262][ T316] __alloc_skb+0x210/0x730 [ 48.578699][ T316] sk_stream_alloc_skb+0x216/0xb70 [ 48.584181][ T316] tcp_sendmsg_locked+0xcbb/0x3330 [ 48.589581][ T316] tcp_sendmsg+0x2f/0x50 [ 48.593879][ T316] inet_sendmsg+0xa5/0xc0 [ 48.598249][ T316] sock_write_iter+0x2a6/0x3a0 [ 48.603115][ T316] vfs_write+0x831/0xfd0 [ 48.607372][ T316] ksys_write+0x14a/0x260 [ 48.611713][ T316] page last free stack trace: [ 48.616403][ T316] free_unref_page_prepare+0x5fa/0x600 [ 48.621880][ T316] free_unref_page+0xae/0x540 [ 48.626664][ T316] __free_pages+0x6c/0x100 [ 48.631098][ T316] __free_slab+0xe5/0x1e0 [ 48.635644][ T316] __unfreeze_partials+0x15a/0x190 [ 48.640769][ T316] put_cpu_partial+0xc6/0x120 [ 48.645465][ T316] __slab_free+0x1d4/0x290 [ 48.649900][ T316] ___cache_free+0x104/0x120 [ 48.654503][ T316] qlink_free+0x4d/0x90 [ 48.658842][ T316] qlist_free_all+0x5f/0xb0 [ 48.663390][ T316] kasan_quarantine_reduce+0x14a/0x170 [ 48.668960][ T316] __kasan_slab_alloc+0x2f/0xe0 [ 48.673845][ T316] slab_post_alloc_hook+0x4f/0x2b0 [ 48.678987][ T316] kmem_cache_alloc+0xf7/0x260 [ 48.683776][ T316] alloc_vfsmnt+0x27/0x4a0 [ 48.688238][ T316] clone_mnt+0x6d/0xd00 [ 48.692424][ T316] [ 48.694853][ T316] Memory state around the buggy address: [ 48.700496][ T316] ffff88810dc43800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.708582][ T316] ffff88810dc43880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.716670][ T316] >ffff88810dc43900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.725105][ T316] ^ [pid 319] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... umount2 resumed>) = 0 [pid 312] <... umount2 resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 313] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/dev" [pid 312] newfstatat(AT_FDCWD, "./0/dev" [pid 310] newfstatat(AT_FDCWD, "./0/dev" [pid 313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 310] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./0/dev", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 312] openat(AT_FDCWD, "./0/dev", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] openat(AT_FDCWD, "./0/dev", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] <... openat resumed>) = 4 [pid 312] <... openat resumed>) = 4 [pid 310] <... openat resumed>) = 4 [pid 313] fstat(4 [pid 312] fstat(4 [pid 310] fstat(4 [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 310] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4 [pid 312] getdents64(4 [pid 310] getdents64(4 [pid 313] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 310] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4 [pid 312] getdents64(4 [pid 310] getdents64(4 [pid 313] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 310] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 313] close(4 [pid 312] close(4 [pid 310] close(4 [pid 313] <... close resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 313] rmdir("./0/dev" [pid 312] rmdir("./0/dev" [pid 310] rmdir("./0/dev" [pid 313] <... rmdir resumed>) = 0 [pid 312] <... rmdir resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 313] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = 0 [pid 312] <... umount2 resumed>) = 0 [pid 313] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = 0 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/my_configfs" [pid 312] newfstatat(AT_FDCWD, "./0/my_configfs" [pid 310] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./0/my_configfs", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 312] openat(AT_FDCWD, "./0/my_configfs", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] <... openat resumed>) = 4 [pid 312] <... openat resumed>) = 4 [pid 313] fstat(4 [pid 312] fstat(4 [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4 [pid 312] getdents64(4 [pid 313] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4 [pid 312] getdents64(4 [pid 313] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 313] close(4 [pid 312] close(4 [pid 313] <... close resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 313] rmdir("./0/my_configfs" [ 48.729718][ T316] ffff88810dc43980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.737806][ T316] ffff88810dc43a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.745883][ T316] ================================================================== [ 48.754204][ T316] Disabling lock debugging due to kernel taint [ 48.772856][ T316] ------------[ cut here ]------------ [pid 312] rmdir("./0/my_configfs" [pid 313] <... rmdir resumed>) = 0 [pid 312] <... rmdir resumed>) = 0 [pid 313] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/binderfs" [pid 312] newfstatat(AT_FDCWD, "./0/binderfs" [pid 313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./0/binderfs" [pid 312] unlink("./0/binderfs" [pid 313] <... unlink resumed>) = 0 [pid 312] <... unlink resumed>) = 0 [pid 313] getdents64(3 [pid 312] getdents64(3 [pid 313] <... getdents64 resumed>, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 312] <... getdents64 resumed>, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 313] close(3 [pid 312] close(3 [pid 313] <... close resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 313] rmdir("./0" [pid 312] rmdir("./0" [pid 313] <... rmdir resumed>) = 0 [pid 312] <... rmdir resumed>) = 0 [pid 313] mkdir("./1", 0777 [pid 312] mkdir("./1", 0777 [pid 313] <... mkdir resumed>) = 0 [pid 312] <... mkdir resumed>) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[] [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 313] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] <... clone resumed>, child_tidptr=0x555568c7a690) = 5 [pid 312] <... clone resumed>, child_tidptr=0x555568c7a690) = 4 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-5-15/strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] chdir("./1") = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 329] write(1, "executing program\n", 18) = 18 executing program [ 48.778381][ T316] WARNING: CPU: 1 PID: 316 at drivers/usb/gadget/function/u_serial.c:686 gs_close+0x17d/0x9b0 [ 48.789096][ T316] Modules linked in: [ 48.793023][ T316] CPU: 1 PID: 316 Comm: syz-executor950 Tainted: G B syzkaller #0 [ 48.802173][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.812354][ T316] RIP: 0010:gs_close+0x17d/0x9b0 [ 48.817422][ T316] Code: 83 3e fe 41 ff cc 42 0f b6 04 2b 84 c0 0f 85 c6 06 00 00 48 8b 44 24 20 44 89 20 48 8b 5c 24 38 e9 c2 02 00 00 e8 b3 83 3e fe <0f> 0b 48 8b 5c 24 38 e9 b1 02 00 00 e8 a2 83 3e fe 49 8d bf 90 02 [ 48.837505][ T316] RSP: 0018:ffffc90000ac7ae0 EFLAGS: 00010093 [ 48.843598][ T316] RAX: ffffffff832b33fd RBX: 1ffff11021b8871a RCX: ffff88810cb762c0 [ 48.851714][ T316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.859797][ T316] RBP: ffffc90000ac7be8 R08: 0000000000000003 R09: 0000000000000004 [ 48.867963][ T316] R10: dffffc0000000000 R11: fffff52000158f4c R12: 0000000000000000 [ 48.876059][ T316] R13: dffffc0000000000 R14: 1ffff92000158f64 R15: ffff88810dc43800 [ 48.884369][ T316] FS: 0000555568c7a3c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.893431][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.900158][ T316] CR2: 00007fb883e90350 CR3: 000000010d7e8000 CR4: 00000000003506a0 [ 48.908178][ T316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.916255][ T316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.924242][ T316] Call Trace: [ 48.927530][ T316] [ 48.930472][ T316] ? _raw_spin_trylock_bh+0x150/0x150 [ 48.935863][ T316] ? gs_open+0x410/0x410 [ 48.940142][ T316] ? _raw_spin_unlock+0x4d/0x70 [ 48.945019][ T316] ? fasync_remove_entry+0x19c/0x1d0 [ 48.950318][ T316] ? gs_open+0x410/0x410 [ 48.954576][ T316] tty_release+0x3c8/0x1330 [ 48.959189][ T316] ? tty_release_struct+0xe0/0xe0 [ 48.964222][ T316] __fput+0x22b/0x900 [ 48.968223][ T316] ____fput+0x15/0x20 [ 48.972236][ T316] task_work_run+0x127/0x190 [ 48.976845][ T316] ptrace_notify+0x230/0x270 [ 48.981449][ T316] ? kick_process+0xdc/0x150 [ 48.986057][ T316] ? do_notify_parent+0x830/0x830 [ 48.991104][ T316] ? task_work_add+0x1b2/0x1e0 [ 48.996056][ T316] ? fput_many+0x161/0x1a0 [ 49.000511][ T316] ? fput+0x1a/0x20 [ 49.004338][ T316] ? filp_close+0x105/0x150 [ 49.008950][ T316] syscall_exit_work+0x87/0x160 [ 49.013823][ T316] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 49.020016][ T316] syscall_exit_to_user_mode+0xd/0x30 [ 49.025414][ T316] do_syscall_64+0x58/0xa0 [ 49.029843][ T316] ? clear_bhb_loop+0x50/0xa0 [ 49.034554][ T316] ? clear_bhb_loop+0x50/0xa0 [ 49.039256][ T316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.045262][ T316] RIP: 0033:0x7fb883e9037e [ 49.049869][ T316] Code: 08 0f 85 05 e3 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 49.069618][ T316] RSP: 002b:00007ffdf1260df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [pid 329] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0}, NULL, 8) = 0 [pid 329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e22000 [pid 329] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} => {parent_tid=[5]}, 88) = 5 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 330 attached ci2-android-5-15/strace-static-x86_64: Process 328 attached ) = -1 ETIMEDOUT (Connection timed out) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 329] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] newfstatat(AT_FDCWD, "./0/my_configfs" [pid 329] <... futex resumed>) = 0 [pid 310] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 310] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 329] <... mmap resumed>) = 0x7fb883e01000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 329] mprotect(0x7fb883e02000, 131072, PROT_READ|PROT_WRITE [pid 310] openat(AT_FDCWD, "./0/my_configfs", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 329] <... mprotect resumed>) = 0 [pid 310] <... openat resumed>) = 4 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] fstat(4 [pid 329] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e21990, parent_tid=0x7fb883e21990, exit_signal=0, stack=0x7fb883e01000, stack_size=0x20300, tls=0x7fb883e216c0} [pid 310] getdents64(4, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 329] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 310] getdents64(4 [pid 329] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 329] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] close(4 [pid 329] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 310] rmdir("./0/my_configfs" [pid 329] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 310] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 310] unlink("./0/binderfs") = 0 ci2-android-5-15/strace-static-x86_64: Process 331 attached [pid 310] getdents64(3, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 331] set_robust_list(0x7fb883e219a0, 24) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./0") = 0 [ 49.078052][ T316] RAX: 0000000000000000 RBX: 0000555568c7a3c0 RCX: 00007fb883e9037e [ 49.086069][ T316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 49.094161][ T316] RBP: 00007ffdf1260e80 R08: 0000000000000000 R09: 0000000000000000 [ 49.102145][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb883f15b4c [ 49.110125][ T316] R13: 000000000000bac2 R14: 00007ffdf1260ea0 R15: 00007fb883e4d690 [ 49.118114][ T316] [ 49.121145][ T316] ---[ end trace 8ed7c3b6a9bf13f2 ]--- [pid 310] mkdir("./1", 0777) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555568c7a690) = 4 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] chdir("./1") = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 executing program [pid 328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 330] set_robust_list(0x7fb883e429a0, 24 [pid 328] write(1, "executing program\n", 18 [pid 330] <... set_robust_list resumed>) = 0 [pid 328] <... write resumed>) = 18 [pid 330] rt_sigprocmask(SIG_SETMASK, [] [pid 328] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 328] <... futex resumed>) = 0 [pid 330] mkdirat(AT_FDCWD, "./my_configfs", 0777 [pid 328] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 330] <... mkdirat resumed>) = 0 [pid 328] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 330] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 330] <... futex resumed>) = 0 [pid 328] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 330] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e22000 [pid 328] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} => {parent_tid=[6]}, 88) = 6 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x7fb883e429a0, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] mkdirat(AT_FDCWD, "./my_configfs", 0777) = 0 [pid 333] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 ci2-android-5-15/strace-static-x86_64: Process 332 attached [pid 331] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... close resumed>) = 0 [pid 331] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0 [pid 333] mount(NULL, "./my_configfs", "configfs", 0, NULL [pid 331] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... mount resumed>) = 0 [pid 332] set_robust_list(0x555568c7a6a0, 24 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 316] close(4 [pid 333] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... set_robust_list resumed>) = 0 [pid 331] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 332] rt_sigprocmask(SIG_SETMASK, [] [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 330] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 329] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 49.132400][ T315] ------------[ cut here ]------------ [ 49.137916][ T315] WARNING: CPU: 1 PID: 315 at drivers/usb/gadget/function/u_serial.c:686 gs_close+0x17d/0x9b0 [ 49.148205][ T315] Modules linked in: [ 49.152129][ T315] CPU: 1 PID: 315 Comm: syz-executor950 Tainted: G B W syzkaller #0 [ 49.161385][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.171629][ T315] RIP: 0010:gs_close+0x17d/0x9b0 [ 49.176871][ T315] Code: 83 3e fe 41 ff cc 42 0f b6 04 2b 84 c0 0f 85 c6 06 00 00 48 8b 44 24 20 44 89 20 48 8b 5c 24 38 e9 c2 02 00 00 e8 b3 83 3e fe <0f> 0b 48 8b 5c 24 38 e9 b1 02 00 00 e8 a2 83 3e fe 49 8d bf 90 02 [ 49.196643][ T315] RSP: 0018:ffffc90000ab7ae0 EFLAGS: 00010093 [ 49.202759][ T315] RAX: ffffffff832b33fd RBX: 1ffff11021b8871a RCX: ffff88812394a780 [ 49.210781][ T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.218787][ T315] RBP: ffffc90000ab7be8 R08: 0000000000000003 R09: 0000000000000004 [ 49.227226][ T315] R10: dffffc0000000000 R11: fffff52000156f4c R12: 0000000000000000 [ 49.235233][ T315] R13: dffffc0000000000 R14: 1ffff92000156f64 R15: ffff88810dc43800 [ 49.243510][ T315] FS: 0000555568c7a3c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 49.252477][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.259087][ T315] CR2: 00007fb883e20bb0 CR3: 000000010d40c000 CR4: 00000000003506a0 [ 49.267079][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.275098][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.283323][ T315] Call Trace: [ 49.286676][ T315] [ 49.289683][ T315] ? _raw_spin_trylock_bh+0x150/0x150 [ 49.295115][ T315] ? _raw_spin_trylock_bh+0x150/0x150 [ 49.300740][ T315] ? gs_open+0x410/0x410 [ 49.305023][ T315] ? _raw_spin_unlock+0x4d/0x70 [ 49.310004][ T315] ? fasync_remove_entry+0x19c/0x1d0 [ 49.315436][ T315] ? gs_open+0x410/0x410 [ 49.319735][ T315] tty_release+0x3c8/0x1330 [ 49.324282][ T315] ? tty_release_struct+0xe0/0xe0 [ 49.329321][ T315] __fput+0x22b/0x900 [ 49.333462][ T315] ____fput+0x15/0x20 [ 49.337925][ T315] task_work_run+0x127/0x190 [ 49.342686][ T315] ptrace_notify+0x230/0x270 [ 49.347401][ T315] ? kick_process+0xdc/0x150 [ 49.352118][ T315] ? do_notify_parent+0x830/0x830 [ 49.357183][ T315] ? task_work_add+0x1b2/0x1e0 [ 49.362131][ T315] ? fput_many+0x161/0x1a0 [ 49.366596][ T315] ? fput+0x1a/0x20 [ 49.370493][ T315] ? filp_close+0x105/0x150 [ 49.375051][ T315] syscall_exit_work+0x87/0x160 [ 49.379967][ T315] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 49.386301][ T315] syscall_exit_to_user_mode+0xd/0x30 [ 49.391722][ T315] do_syscall_64+0x58/0xa0 [ 49.396169][ T315] ? clear_bhb_loop+0x50/0xa0 [ 49.400868][ T315] ? clear_bhb_loop+0x50/0xa0 [ 49.405584][ T315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.411523][ T315] RIP: 0033:0x7fb883e9037e [ 49.415977][ T315] Code: 08 0f 85 05 e3 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 49.435729][ T315] RSP: 002b:00007ffdf1260df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.444241][ T315] RAX: 0000000000000000 RBX: 0000555568c7a3c0 RCX: 00007fb883e9037e [ 49.452244][ T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 49.460290][ T315] RBP: 00007ffdf1260e80 R08: 0000000000000000 R09: 0000000000000000 [ 49.468333][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb883f15b4c [ 49.476343][ T315] R13: 000000000000bac2 R14: 00007ffdf1260ea0 R15: 00007fb883e4d690 [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] chdir("./1" [pid 330] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 328] <... futex resumed>) = 0 [pid 316] close(5 [pid 333] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 332] <... chdir resumed>) = 0 [pid 330] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 330] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 316] close(6 [pid 333] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... prctl resumed>) = 0 [pid 330] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... futex resumed>) = 1 [pid 332] setpgid(0, 0 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 316] close(7 [pid 333] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] <... setpgid resumed>) = 0 [pid 330] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 329] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 328] <... futex resumed>) = 0 [pid 316] close(8 [pid 333] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 332] <... openat resumed>) = 3 [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] write(3, "1000", 4 [pid 316] close(9 [pid 332] <... write resumed>) = 4 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(3 [pid 316] close(10 [pid 332] <... close resumed>) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] symlink("/dev/binderfs", "./binderfs" [pid 316] close(11 [pid 332] <... symlink resumed>) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] write(1, "executing program\n", 18 [pid 316] close(12 [pid 332] <... write resumed>) = 18 executing program [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] close(13 [pid 332] <... futex resumed>) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 316] close(14 [pid 332] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 316] close(15 [pid 332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] close(16 [pid 332] <... mmap resumed>) = 0x7fb883e22000 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE [pid 316] close(17 [pid 332] <... mprotect resumed>) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] rt_sigprocmask(SIG_BLOCK, ~[] [pid 316] close(18 [pid 332] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} [pid 316] close(19) = -1 EBADF (Bad file descriptor) [pid 332] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 316] close(20 [pid 332] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] close(21 [pid 332] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... futex resumed>) = 0 [pid 316] close(22 [pid 332] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(23) = -1 EBADF (Bad file descriptor) [pid 316] close(24) = -1 EBADF (Bad file descriptor) [pid 316] close(25) = -1 EBADF (Bad file descriptor) [pid 316] close(26) = -1 EBADF (Bad file descriptor) [pid 316] close(27) = -1 EBADF (Bad file descriptor) [pid 316] close(28) = -1 EBADF (Bad file descriptor) [pid 316] close(29) = -1 EBADF (Bad file descriptor) [pid 316] exit_group(0 [pid 322] <... futex resumed>) = ? [pid 316] <... exit_group resumed>) = ? [pid 322] +++ exited with 0 +++ [pid 316] +++ exited with 0 +++ [pid 333] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 330] <... mkdirat resumed>) = 0 [pid 333] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] mkdirat(AT_FDCWD, "./dev", 0777 [pid 330] mkdirat(AT_FDCWD, "./dev", 0777 [pid 329] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... mkdirat resumed>) = 0 [pid 330] <... mkdirat resumed>) = 0 [pid 333] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 330] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 329] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... mount resumed>) = 0 [pid 330] <... mount resumed>) = 0 [pid 333] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 333] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 330] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 329] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 334 attached [pid 332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 332] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 332] <... futex resumed>) = 0 [pid 311] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 311] <... restart_syscall resumed>) = 0 [pid 332] <... mmap resumed>) = 0x7fb883e01000 [pid 332] mprotect(0x7fb883e02000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 311] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] rt_sigprocmask(SIG_BLOCK, ~[] [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 311] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e21990, parent_tid=0x7fb883e21990, exit_signal=0, stack=0x7fb883e01000, stack_size=0x20300, tls=0x7fb883e216c0} [pid 311] <... openat resumed>) = 3 [pid 332] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 311] fstat(3 [pid 332] rt_sigprocmask(SIG_SETMASK, [] [pid 311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=100, ...}) = 0 [pid 332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] getdents64(3 [pid 332] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... getdents64 resumed>, 0x555568c7b750 /* 5 entries */, 32768) = 136 [pid 332] <... futex resumed>) = 0 [pid 311] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] set_robust_list(0x7fb883e429a0, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] mkdirat(AT_FDCWD, "./my_configfs", 0777) = 0 [pid 334] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-15/strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7fb883e219a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0 [pid 335] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 1 [pid 334] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 332] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 335] <... futex resumed>) = 1 [pid 334] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 0 [pid 334] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 332] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 332] <... futex resumed>) = 0 [pid 334] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 334] mkdirat(AT_FDCWD, "./dev", 0777 [pid 332] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... mkdirat resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 334] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 334] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 334] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 332] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] <... mount resumed>) = 0 [pid 334] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] <... futex resumed>) = 0 [pid 334] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 334] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 332] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 329] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 331] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 1 [pid 328] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 329] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 0 [pid 331] <... rmdir resumed>) = 0 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 331] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... mmap resumed>) = 0x7fb883e01000 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 328] mprotect(0x7fb883e02000, 131072, PROT_READ|PROT_WRITE [pid 331] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... mprotect resumed>) = 0 [pid 328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e21990, parent_tid=0x7fb883e21990, exit_signal=0, stack=0x7fb883e01000, stack_size=0x20300, tls=0x7fb883e216c0} => {parent_tid=[7]}, 88) = 7 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x7fb883e219a0, 24) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = -1 ENOENT (No such file or directory) [pid 336] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 336] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 332] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 1 [pid 335] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" [pid 332] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 335] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] <... futex resumed>) = 0 [pid 335] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] close(3) = -1 EBADF (Bad file descriptor) [pid 329] close(4) = -1 EBADF (Bad file descriptor) [pid 329] close(5) = -1 EBADF (Bad file descriptor) [pid 329] close(6) = -1 EBADF (Bad file descriptor) [pid 329] close(7) = -1 EBADF (Bad file descriptor) [pid 329] close(8) = -1 EBADF (Bad file descriptor) [pid 329] close(9) = -1 EBADF (Bad file descriptor) [pid 329] close(10) = -1 EBADF (Bad file descriptor) [pid 329] close(11) = -1 EBADF (Bad file descriptor) [pid 329] close(12) = -1 EBADF (Bad file descriptor) [pid 329] close(13) = -1 EBADF (Bad file descriptor) [pid 329] close(14) = -1 EBADF (Bad file descriptor) [pid 329] close(15) = -1 EBADF (Bad file descriptor) [pid 329] close(16) = -1 EBADF (Bad file descriptor) [pid 329] close(17) = -1 EBADF (Bad file descriptor) [pid 329] close(18) = -1 EBADF (Bad file descriptor) [pid 328] close(3 [pid 329] close(19 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(4 [pid 329] close(20 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(5 [pid 329] close(21 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(6 [pid 329] close(22 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(7 [pid 329] close(23 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(8 [pid 329] close(24 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(9 [pid 329] close(25 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(10 [pid 329] close(26 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(11 [pid 329] close(27 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(12 [pid 329] close(28 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(13 [pid 329] close(29 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(14 [pid 329] exit_group(0 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... futex resumed>) = ? [pid 330] <... openat resumed>) = ? [pid 329] <... exit_group resumed>) = ? [pid 328] close(15 [pid 331] +++ exited with 0 +++ [pid 330] +++ exited with 0 +++ [pid 329] +++ exited with 0 +++ [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... umount2 resumed>) = 0 [pid 328] close(16 [pid 312] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 311] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 328] close(17 [pid 312] <... restart_syscall resumed>) = 0 [pid 311] newfstatat(AT_FDCWD, "./0/dev" [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 328] close(18 [pid 311] umount2("./0/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 328] close(19 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 311] openat(AT_FDCWD, "./0/dev", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 311] <... openat resumed>) = 4 [pid 328] close(20 [pid 312] <... openat resumed>) = 3 [pid 311] fstat(4 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] fstat(3 [pid 311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 328] close(21 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=100, ...}) = 0 [pid 311] getdents64(4 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] getdents64(3 [pid 311] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 328] close(22 [pid 312] <... getdents64 resumed>, 0x555568c7b750 /* 5 entries */, 32768) = 136 [pid 311] getdents64(4 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./1/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 328] close(23 [pid 312] <... umount2 resumed>) = 0 [pid 311] close(4 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./1/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... close resumed>) = 0 [pid 328] close(24 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 311] rmdir("./0/dev" [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] newfstatat(AT_FDCWD, "./1/dev" [pid 311] <... rmdir resumed>) = 0 [pid 328] close(25 [pid 312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 311] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] umount2("./1/dev", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] close(26 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 311] <... umount2 resumed>) = 0 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] openat(AT_FDCWD, "./1/dev", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 311] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] close(27 [pid 312] <... openat resumed>) = 4 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] fstat(4 [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 328] close(28 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 311] newfstatat(AT_FDCWD, "./0/my_configfs" [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] getdents64(4 [pid 328] close(29 [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 311] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] getdents64(4 [pid 311] umount2("./0/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] exit_group(0 [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 336] <... futex resumed>) = ? [pid 328] <... exit_group resumed>) = ? [pid 312] close(4 [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 336] +++ exited with 0 +++ [pid 312] <... close resumed>) = 0 [pid 311] openat(AT_FDCWD, "./0/my_configfs", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 312] rmdir("./1/dev") = 0 [pid 311] <... openat resumed>) = 4 [pid 312] umount2("./1/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] fstat(4 [pid 312] <... umount2 resumed>) = 0 [pid 311] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 312] umount2("./1/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] getdents64(4 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] newfstatat(AT_FDCWD, "./1/my_configfs" [pid 311] <... getdents64 resumed>, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 312] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 311] getdents64(4 [pid 312] umount2("./1/my_configfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 311] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 312] openat(AT_FDCWD, "./1/my_configfs", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 311] close(4 [pid 312] <... openat resumed>) = 4 [pid 311] <... close resumed>) = 0 [pid 312] fstat(4 [pid 311] rmdir("./0/my_configfs" [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 312] getdents64(4, 0x555568c83790 /* 2 entries */, 32768) = 48 [pid 311] <... rmdir resumed>) = 0 [pid 312] getdents64(4 [pid 311] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] <... getdents64 resumed>, 0x555568c83790 /* 0 entries */, 32768) = 0 [pid 312] close(4 [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... close resumed>) = 0 [pid 311] newfstatat(AT_FDCWD, "./0/binderfs" [pid 312] rmdir("./1/my_configfs") = 0 [pid 311] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 312] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 311] unlink("./0/binderfs" [pid 312] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 311] <... unlink resumed>) = 0 [pid 312] unlink("./1/binderfs" [pid 311] getdents64(3 [pid 312] <... unlink resumed>) = 0 [pid 312] getdents64(3, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [pid 312] rmdir("./1" [pid 311] <... getdents64 resumed>, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 312] <... rmdir resumed>) = 0 [pid 311] close(3 [pid 312] mkdir("./2", 0777) = 0 [pid 311] <... close resumed>) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] rmdir("./0" [pid 312] <... clone resumed>, child_tidptr=0x555568c7a690) = 7 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 311] <... rmdir resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] mkdir("./1", 0777ci2-android-5-15/strace-static-x86_64: Process 337 attached ) = 0 [pid 337] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] chdir("./2") = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0 [pid 311] <... clone resumed>, child_tidptr=0x555568c7a690) = 4 [pid 311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] <... setpgid resumed>) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 337] write(1, "executing program\n", 18) = 18 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0} [pid 332] close(3) = -1 EBADF (Bad file descriptor) [pid 332] close(4) = -1 EBADF (Bad file descriptor) [pid 332] close(5) = -1 EBADF (Bad file descriptor) [pid 332] close(6) = -1 EBADF (Bad file descriptor) [pid 332] close(7) = -1 EBADF (Bad file descriptor) [pid 332] close(8) = -1 EBADF (Bad file descriptor) [pid 332] close(9) = -1 EBADF (Bad file descriptor) [pid 332] close(10) = -1 EBADF (Bad file descriptor) [pid 332] close(11) = -1 EBADF (Bad file descriptor) [pid 332] close(12) = -1 EBADF (Bad file descriptor) [pid 332] close(13) = -1 EBADF (Bad file descriptor) [pid 332] close(14) = -1 EBADF (Bad file descriptor) [pid 332] close(15) = -1 EBADF (Bad file descriptor) [pid 332] close(16) = -1 EBADF (Bad file descriptor) [pid 332] close(17) = -1 EBADF (Bad file descriptor) [pid 332] close(18) = -1 EBADF (Bad file descriptor) [pid 332] close(19) = -1 EBADF (Bad file descriptor) [pid 332] close(20) = -1 EBADF (Bad file descriptor) [pid 332] close(21) = -1 EBADF (Bad file descriptor) [pid 332] close(22) = -1 EBADF (Bad file descriptor) [pid 332] close(23) = -1 EBADF (Bad file descriptor) [pid 332] close(24) = -1 EBADF (Bad file descriptor) [pid 332] close(25) = -1 EBADF (Bad file descriptor) [pid 332] close(26) = -1 EBADF (Bad file descriptor) [pid 332] close(27) = -1 EBADF (Bad file descriptor) [pid 332] close(28) = -1 EBADF (Bad file descriptor) [pid 332] close(29) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0 [pid 335] <... futex resumed>) = ? [pid 332] <... exit_group resumed>) = ? [pid 335] +++ exited with 0 +++ [pid 337] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e22000 [pid 337] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} => {parent_tid=[8]}, 88) = 8 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x555568c7a6a0, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] chdir("./1") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 executing program [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 338] write(1, "executing program\n", 18) = 18 executing program [pid 338] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 ci2-android-5-15/strace-static-x86_64: Process 339 attached [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7fb883e8eff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb883e807e0}, NULL, 8) = 0 [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e22000 [pid 338] mprotect(0x7fb883e23000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e42990, parent_tid=0x7fb883e42990, exit_signal=0, stack=0x7fb883e22000, stack_size=0x20300, tls=0x7fb883e426c0} => {parent_tid=[5]}, 88) = 5 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x7fb883e429a0, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] mkdirat(AT_FDCWD, "./my_configfs", 0777) = 0 [pid 340] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0 [pid 340] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists) [pid 340] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 339] set_robust_list(0x7fb883e429a0, 24) = 0 [pid 340] <... mkdirat resumed>) = 0 [pid 340] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] rt_sigprocmask(SIG_SETMASK, [] [pid 340] <... futex resumed>) = 1 [pid 340] mkdirat(AT_FDCWD, "./dev", 0777) = 0 [pid 340] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] mount(NULL, "./dev", "devtmpfs", 0, NULL) = 0 [pid 339] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 340] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 339] mkdirat(AT_FDCWD, "./my_configfs", 0777) = 0 [pid 339] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] mount(NULL, "./my_configfs", "configfs", 0, NULL [pid 337] <... futex resumed>) = 0 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... mount resumed>) = 0 [pid 339] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 [pid 337] <... futex resumed>) = 0 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 339] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 1 [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 339] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 339] futex(0x7fb883f15b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] mkdirat(AT_FDCWD, "./dev", 0777) = 0 [pid 339] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 339] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... mount resumed>) = 0 [pid 337] <... futex resumed>) = 0 [pid 339] futex(0x7fb883f15b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR [pid 337] futex(0x7fb883f15b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 49.484355][ T315] [ 49.487403][ T315] ---[ end trace 8ed7c3b6a9bf13f3 ]--- [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e01000 [pid 338] mprotect(0x7fb883e02000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e21990, parent_tid=0x7fb883e21990, exit_signal=0, stack=0x7fb883e01000, stack_size=0x20300, tls=0x7fb883e216c0} => {parent_tid=[6]}, 88) = 6 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x7fb883e219a0, 24) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = 0 [pid 341] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 341] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 337] futex(0x7fb883f15b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 337] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb883e01000 [pid 337] mprotect(0x7fb883e02000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb883e21990, parent_tid=0x7fb883e21990, exit_signal=0, stack=0x7fb883e01000, stack_size=0x20300, tls=0x7fb883e216c0} => {parent_tid=[9]}, 88) = 9 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] futex(0x7fb883f15b58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb883f15b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-15/strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x7fb883e219a0, 24) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = -1 ENOENT (No such file or directory) [pid 342] futex(0x7fb883f15b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 342] futex(0x7fb883f15b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] close(3) = -1 EBADF (Bad file descriptor) [pid 338] close(4) = -1 EBADF (Bad file descriptor) [pid 338] close(5) = -1 EBADF (Bad file descriptor) [pid 338] close(6) = -1 EBADF (Bad file descriptor) [pid 338] close(7) = -1 EBADF (Bad file descriptor) [pid 338] close(8) = -1 EBADF (Bad file descriptor) [pid 338] close(9) = -1 EBADF (Bad file descriptor) [pid 338] close(10) = -1 EBADF (Bad file descriptor) [pid 338] close(11) = -1 EBADF (Bad file descriptor) [pid 338] close(12) = -1 EBADF (Bad file descriptor) [pid 338] close(13) = -1 EBADF (Bad file descriptor) [pid 338] close(14) = -1 EBADF (Bad file descriptor) [pid 338] close(15) = -1 EBADF (Bad file descriptor) [pid 338] close(16) = -1 EBADF (Bad file descriptor) [pid 338] close(17) = -1 EBADF (Bad file descriptor) [pid 338] close(18) = -1 EBADF (Bad file descriptor) [pid 338] close(19) = -1 EBADF (Bad file descriptor) [pid 338] close(20) = -1 EBADF (Bad file descriptor) [pid 338] close(21 [pid 337] close(3 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(22 [pid 337] close(4 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(23 [pid 337] close(5 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(24 [pid 337] close(6 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(25 [pid 337] close(7 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(26 [pid 337] close(8 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(27 [pid 337] close(9 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(28 [pid 337] close(10 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(29 [pid 337] close(11 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] exit_group(0 [pid 337] close(12 [pid 341] <... futex resumed>) = ? [pid 338] <... exit_group resumed>) = ? [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 341] +++ exited with 0 +++ [pid 337] close(13) = -1 EBADF (Bad file descriptor) [pid 337] close(14) = -1 EBADF (Bad file descriptor) [pid 337] close(15) = -1 EBADF (Bad file descriptor) [pid 337] close(16) = -1 EBADF (Bad file descriptor) [pid 337] close(17) = -1 EBADF (Bad file descriptor) [pid 337] close(18) = -1 EBADF (Bad file descriptor) [pid 337] close(19) = -1 EBADF (Bad file descriptor) [pid 337] close(20) = -1 EBADF (Bad file descriptor) [pid 337] close(21) = -1 EBADF (Bad file descriptor) [pid 337] close(22) = -1 EBADF (Bad file descriptor) [pid 337] close(23) = -1 EBADF (Bad file descriptor) [pid 337] close(24) = -1 EBADF (Bad file descriptor) [pid 337] close(25) = -1 EBADF (Bad file descriptor) [pid 337] close(26) = -1 EBADF (Bad file descriptor) [pid 337] close(27) = -1 EBADF (Bad file descriptor) [pid 337] close(28) = -1 EBADF (Bad file descriptor) [pid 337] close(29) = -1 EBADF (Bad file descriptor) [pid 337] exit_group(0 [pid 342] <... futex resumed>) = ? [pid 337] <... exit_group resumed>) = ? [pid 342] +++ exited with 0 +++ [pid 314] kill(-2, SIGKILL [pid 319] <... futex resumed>) = ? [pid 314] <... kill resumed>) = 0 [pid 319] +++ killed by SIGKILL +++ [pid 314] kill(2, SIGKILL) = 0 [pid 314] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 314] getdents64(3, 0x555568c7b750 /* 2 entries */, 32768) = 48 [pid 314] getdents64(3, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 314] close(3) = 0 [pid 313] kill(-5, SIGKILL) = 0 [pid 313] kill(5, SIGKILL) = 0 [pid 313] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 313] getdents64(3, 0x555568c7b750 /* 2 entries */, 32768) = 48 [pid 313] getdents64(3, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 310] kill(-4, SIGKILL) = 0 [pid 310] kill(4, SIGKILL) = 0 [pid 310] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 310] getdents64(3, 0x555568c7b750 /* 2 entries */, 32768) = 48 [pid 310] getdents64(3, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 312] kill(-7, SIGKILL [pid 311] kill(-4, SIGKILL [pid 312] <... kill resumed>) = 0 [pid 311] <... kill resumed>) = 0 [pid 312] kill(7, SIGKILL [pid 311] kill(4, SIGKILL [pid 312] <... kill resumed>) = 0 [pid 311] <... kill resumed>) = 0 [pid 312] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 311] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 312] <... openat resumed>) = 3 [pid 311] <... openat resumed>) = 3 [pid 312] fstat(3 [pid 311] fstat(3 [pid 312] <... fstat resumed>, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 311] <... fstat resumed>, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 312] getdents64(3 [pid 311] getdents64(3 [pid 312] <... getdents64 resumed>, 0x555568c7b750 /* 2 entries */, 32768) = 48 [pid 311] <... getdents64 resumed>, 0x555568c7b750 /* 2 entries */, 32768) = 48 [pid 312] getdents64(3 [pid 311] getdents64(3 [pid 312] <... getdents64 resumed>, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 311] <... getdents64 resumed>, 0x555568c7b750 /* 0 entries */, 32768) = 0 [pid 312] close(3 [pid 311] close(3 [pid 312] <... close resumed>) = 0 [pid 311] <... close resumed>) = 0